2

The project I'm working on contains three folder under "Views" folder: Home, Shared, and Data folders.

What can I add to my web.config file to deny everyone access except people with IP address xxx.x.xx.xx?

Essentially, what would be the equivalent of placing a .htaccess file inside the "Data" folder under views with the code:

order deny,allow
deny from all
allow from xxx.x.xx.xx

Is there a way to do this without active directory?

LatentDenis
  • 2,839
  • 12
  • 48
  • 99

1 Answers1

2

On IIS7 use IPSecurity to restrict by IP address:

<system.webServer>
  <security>
    <ipSecurity allowUnlisted="false">          
       <clear/>
       <add ipAddress="xxx.x.xx.xx" allowed="true"/>  
    </ipSecurity>
  </security>

https://www.iis.net/configreference/system.webserver/security/ipsecurity

Similar topics: Best way to restrict access by IP address?, Internal Server Error with web.config ipSecurity, http://www.victor-ratajczyk.com/post/2011/12/21/Webconfig-ipSecurity-Allow-specific-IP-addresses-Deny-all-others.aspx

Community
  • 1
  • 1
user2316116
  • 6,726
  • 1
  • 21
  • 35