Intranet security question

Sorry, newbie at this here goes.
I have an iis server setup on a W2k server my router reouts port 80 to that
server for outside access. - works fine.

I have one small web site set up that I want outsiders to access but I have
to have another site that can only be accesses by users on the inside
netwok, private adresses from 192.168.1.2 to 192.168.1.254.

I created another folder under the inetpub folder called intranet but I
can't seem to find a way to limit access to it to only those users in the
private Ip address range. How can I do this? Thanks for any help.


Bob

jeff
Thu Nov 04 14:09:12 CST 2004

On Thu, 4 Nov 2004 11:59:45 -0500, "RD" <nospam@nospam.net> wrote:

>Sorry, newbie at this here goes.
>I have an iis server setup on a W2k server my router reouts port 80 to that
>server for outside access. - works fine.
>
>I have one small web site set up that I want outsiders to access but I have
>to have another site that can only be accesses by users on the inside
>netwok, private adresses from 192.168.1.2 to 192.168.1.254.
>
>I created another folder under the inetpub folder called intranet but I
>can't seem to find a way to limit access to it to only those users in the
>private Ip address range. How can I do this? Thanks for any help.

You need a second site, answering on the internal IP address.

Jeff

Sparky
Fri Nov 05 10:22:14 CST 2004


"RD" <nospam@nospam.net> wrote in message
news:u$wxa$owEHA.3292@TK2MSFTNGP15.phx.gbl...
> Sorry, newbie at this here goes.
> I have an iis server setup on a W2k server my router reouts port 80 to
that
> server for outside access. - works fine.
>
> I have one small web site set up that I want outsiders to access but I
have
> to have another site that can only be accesses by users on the inside
> netwok, private adresses from 192.168.1.2 to 192.168.1.254.
>
> I created another folder under the inetpub folder called intranet but I
> can't seem to find a way to limit access to it to only those users in the
> private Ip address range. How can I do this? Thanks for any help.
>
>
> Bob
>
>
>
>

With whole servers, virtual sites, folders and files you can right click on
them via IIS Manager, then go to security settings, and then IP addresses
and specify to either allow all, or deny all (you want deny) and then add
the specific IP addresses that are allowed (or denied). Denied users still
make a connection to the server but get a "connection refused" error.

For SOLID security you will want to add routing or firewall options to that,
but in a pinch for "pretty good" security it works.