Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 1881

Mode Proxy for Dynamic IP Restriction

$
0
0

Hello all,

I got one server in 2008 R2 with IIS7.5 behind a loadbalancer.

I want to allow access to one of my site to a certain list of IP addresses.

I have configure the IP and domain restriction to deny access to the non members of the list and set my allowed IP.

I have installed the Dynamic IP restriction module and activate mode proxy.

In my logs I can see that requests have the X-Forwarded-for with the public IP source. 

The fact is that I still have a 403 when I want to access to my website (even if my IP public is in the X-Forwarded-For and in the IP allowed).

If I allow the IP of my loadbalancer, every request is allowed and everyone can access the site. (even the IP not listed)

It seems like the mode proxy is not enable (but it is in my applicationHost.conf, and I test to add it in my web.conf but it still the same).

If I disable the basic IP and domains restrictions, all IP are allowed (even if i had <ipSecurity allowUnlisted="false"> in my web.conf or ApplicationHost.conf).

Is there a sort of priority beetween the 2 modules ? Is someone already have this problem ?

Thanks for your help and sorry for my english.

Regards


Viewing all articles
Browse latest Browse all 1881

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>