Home / server / Questions / 820877
In Process
5lovak
Asked: 2016-12-16 04:08:59 +0800 CST

Prevent IIS Listing on Port 443 for Single IP Address

  • 772

I am running a website in IIS and am also running another piece of software which streams media over port 1935 on the same server. The streaming software also has the capability of delivering content over port 443. I have assigned an SSL certificate to it, but it can't bind to port 443 on the IP address it uses as it is being taken by IIS.

I am not able to use the 'netsh' command to explicity bind the IP address being used by the website, because I also need to binding for the streaming application's IP address in IIS so that content can be deliverd over port 80.

Is there a way of being able to stop IIS listing on port 443 for a specific IP address, whilst still allowing it to listen on port 80 for the same IP?

ip iis-7.5 netsh windows-server-2008-r2

2 Answers

  1. You can configure it in bingings for you site:

    1. Open IIS Manager.
    2. In the Connections pane, expand the Sites node in the tree, and then click to select the site for which you want to edit a binding.
    3. In the Actions pane, click Bindings.
    4. In the Site Bindings dialog box, select binding to ip-adreess you need to free and remove it. Or select 443 port binding with * in ip-adreess field end edit it to turn off the binding to the ip-address that you want to release.
    5. After edditing close with Ok
    • 0

  2. By default, IIS binds to all IP addresses even when you specify an IP Address in the Site's Binding.

    What you need is runing following command in an elevated command prompt.

    netsh add iplisten ipaddress=www.xxx.yyy.zzz`

    where www.xxx.yyy.zzz is the IP Address you want IIS to bind to. Run the command multiple times if you want IIS to bind to additional IP Address.

    https://docs.microsoft.com/en-us/windows-server/networking/technologies/netsh/netsh-http

    • 0