Block IP Addresses Using Microsoft Internet Information Server (IIS) 6.0
Blocking IP addresses from accessing your website is pretty common, especially when you are first starting a user-generated website. Sometimes you need to block IP addresses at the server level. It’s a part of the business, you want to keep your site clean and free of rogue scripts or persons.
Many times if you operate a unique or appealing user-generated website (such as: classified ad site, forum site, social media site, etc.) then it’s likely you experience hardships with controlling spam. When you are a new site and you begin getting a mass amount of SPAM to your website, this is actually a good sign, because following SPAM is usually the real traffic. It’s common for spammers to discover your website before you gain a steady flow of unique and quality traffic, but you better get a handle on the spam before it gets out of control, whereas its uncontrollable.
You should make certain your website doesn’t get overran by spammers (or hackers), sometimes this includes blocking IP addresses at the server level. If you run Microsoft Windows IIS 6.0 then this guide will show you how to block IP address with IIS 6.0
First go into your website properties…
- Go to START >>> RUN
- Type inetmgr
- Expand your server name
- Expand Web Sites
- Right-click on your website
- Select Properties
Then click on the “Directory Security” tab
Click the Edit button for IP address and domain name restrictions. You’ll see a screen similar to the following:
Select the Denied Access radio button and click on the Add button. The first option allows you to add a single IP address. This is useful if in your logs you continue to see the same IP address as being the rogue address.
The Group of computers option allows you to deny access to a set of IP addresses on the same subnet. This is useful if you need to block a group of IP address on the same subnet such as a network of hosted rogue computers.
The last option, Domain name, will allow you to add the FQDN (fully qualified domain name) opposed to the IP address. This option is best if you want to block an entire domain host or rogue spider bot domain.
Click OK all the way out. You are done. You are now blocking the IP addresses and domains you want blocked. Decreasing the amount of spammers on your website will increase the overall value of your website. It is important to note that blocking IP addresses and domains is only half the battle, you must still be diligent and continue to monitor your logs as well as be eyes on glass for spammers exploits and attacks.
