Home / server / Questions / 529073
In Process
ojek
Asked: 2013-08-07 07:55:15 +0800 CST

IIS7 - setup domain name to display maintenance page for all IPs but mine

  • 772

I have a website under www.somedomain.com. Now, I would like to setup IIS to display some simple single-html page that says "site under maintenance" or something like that to all my users who access it, but also, I want to have full access to my website when I enter it. So basically I want to disable all IP's but mine from using the website. How can I do it?

windows-server-2008

2 Answers

  1. Basic IIS setup will let you block/allow based on IP. If you want to redirect a user based on IP, you should look at URL Rewrite (http://www.iis.net/downloads/microsoft/url-rewrite). Specifically, an inbound rule that works off the condition REMOTE_ADDR.

    • 1

  2. Verify that you have the 'IP and Domain Restrictions module' installed, if not, install it:

    start /w pkgmgr.exe /iu:IIS-IPSecurity;

    Only allow your own IP address to access the site:

    appcmd.exe set config "Default Web Site" -section:system.webServer/security/ipSecurity /allowUnlisted:"False"  /commit:apphost

appcmd.exe set config "Default Web Site" -section:system.webServer/security/ipSecurity /+"[ipAddress='192.168.1.9',allowed='True']" /commit:apphost

    now everybody else gets a standard IIS "403 - Forbidden: Access is denied" page.

    You want to replace this page with your own. Build an Html page that has no dependencies on any other resources, include the css on the page, and also all images:

    background-image:url(data:image/jpeg;base64,/9j/4AAQSkZJ...

<img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEU...

    You need to encode your images into base64, but you can create a nice enough looking page without images.

    You could also references images on another server, but I like to keep my error pages self-contained.

    Save the file to the root of your site e.g.: C:\inetpub\wwwroot\403.html

    finally set IIS to use your new page:

    C:\Windows\system32\inetsrv\appcmd.exe unlock config -section:system.webServer/httpErrors 

C:\Windows\system32\inetsrv\appcmd.exe set config "Default Web Site" -section:system.webServer/httpErrors /[statusCode='403',subStatusCode='-1'].prefixLanguageFilePath:"" /[statusCode='403',subStatusCode='-1'].path:"403.html"

    Your page will now be displayed for all 403 status codes, not just IP restrictions, but that shouldn't be a big problem.

    • 1