Security Basics mailing list archives

Re: IP/Domain Name restriction with IIS


From: Gremlin <cybercat13 () cox net>
Date: Sat, 07 Jan 2006 01:08:49 -0500

Accoording to my system administrator's when they tried to apply Domain Name restritions to a website it blocked all internet access to that website. The system administrator's have found no way to limit access to a website by either IP or Domain name restriction that works. What I am looking for is third party confirmation one way or the other.

Roger A. Grimes wrote:

Describe what "does not work" means. It works as designed. Are your
admins reporting an easy way to get around them, or something like that?

Roger

*******************************************************************
*Roger A. Grimes, Banneret Computer Security, Consultant *CPA, CISSP, MCSE: Security (2000/2003/MVP), CEH, yada...yada...
*email: roger () banneretcs com
*Author of Honeypots for Windows (Apress)
*http://www.apress.com/book/bookDisplay.html?bID=281
*******************************************************************



-----Original Message-----
From: cybercat13 () cox net [mailto:cybercat13 () cox net] Sent: Thursday, January 05, 2006 11:10 PM
To: security-basics () securityfocus com
Subject: IP/Domain Name restriction with IIS

Can anyone tell me if IP/Domain Name restriction works on a system
running IIS 6 and Windows 2003 Server?  The system administrators I am
working with say it does not work.  The system domain name restrictions
was tried on block everyone from the website. Any comments would be greatly appreciated.


------------------------------------------------------------------------
---
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich
University program offers unparalleled Infosec management education and
the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity
Planning, Computer Emergency Response Teams, and Digital Investigations.


http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
----




---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations.
http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------


Current thread: