IP and URL analysis in IIS 10

Sergey Knyazev 0

Good afternoon! It is necessary to filter connections to the server by IP address and the presence of a certain phrase in the URL. For example, there are two users: one connects by URL https:\animals.eu\cats\1513515 , and the other one connects by URL https:\animals.eu\dogs\43434 . I need to analyze the ip address from which the connection is going on, and then if the URL contains \dogs, then prohibit access to it, display a separate page. In other cases, allow connection. Is it possible to do this via IIS 10 version?

1 answer

XuDong Peng-MSFT 11,181 Reputation points Microsoft Vendor

2025-02-11T08:48:48.7133333+00:00
Hi @Sergey Knyazev,

It is necessary to filter connections to the server by IP address and the presence of a certain phrase in the URL.

There are two directions:

If you filter by IP address, you can use the IP and Domain Restrictions module.

Select your website -> double click module IP and Domain Restrictions -> Add Deny Entry... - > Enter the <IP address you want> in Specific IP address textbox.

If you filter by URL, you can use the URL Rewrite module.

Download and install URL Rewrite Module via: https://www.iis.net/downloads/microsoft/url-rewrite

Open the URL Rewrite module, Click the Add Rules option, select Request Blocking rule template and click the OK button.

Set configuration like this (You can modify it according to your needs):

Click "OK" to finish the configuration.

For more details, you can refer to relevant docs: https://learn.microsoft.com/en-us/iis/extensions/url-rewrite-module/creating-rewrite-rules-for-the-url-rewrite-module

Best regards,

Xudong Peng

If the answer is the right solution, please click "Accept Answer" and kindly upvote. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
Sergey Knyazev 0 Reputation points

2025-02-11T17:09:48.36+00:00

The thing is, I need a compound condition - when the IP from the list and the URL are specific. And in your solution, separately for IP, separately for URL. How do I make a compound condition?

XuDong Peng-MSFT 11,181 Reputation points Microsoft Vendor

2025-02-12T02:07:38.8866667+00:00

Hi @Sergey Knyazev,

How do I make a compound condition?

If this is the case, you can create conditions using URL Rewrite module. Based on the module configuration I mentioned above, add filtering conditions for IP address, similar to this:

And change the logical grouping to "Match Any".

Sergey Knyazev 0 Reputation points

2025-02-13T15:56:52.86+00:00

Thanks for the help. Now there's another problem - I'm trying to save the rule, but the apply button is unavailable.

I found information on the Internet that requires the installation of AR 3.0 https://www.iis.net/downloads/microsoft/application-request-routing .

It was not possible to install via Web Installer 5.1 - it is empty. I downloaded the file from the website and it doesn't start either.

What should I do?

XuDong Peng-MSFT 11,181 Reputation points Microsoft Vendor

2025-02-14T01:34:52.4466667+00:00

Hi @Sergey Knyazev,

I'm trying to save the rule, but the apply button is unavailable.

Please review your configuration to check if there are other sections that are not populated. Something like this (mainly in Match URL and Actions sections):

In addition, Web Platform Installer you mentioned already retired on December 31, 2022. You can refer to this link to download the .msi installation package for ARR module.

Sergey Knyazev 0 Reputation points

2025-02-14T08:20:19.38+00:00

Hooray. I managed to save the rule. I didn't add the Match URL last time. I added the rule with the URL '/mobile', but for some reason it doesn't work. I'm going to the address https://test.ru/mobile/51515 - skips it. I don't understand what's the matter(

I downloaded the file .msi to install the ARR 3.0 module - but how to install it? it outputs an error at startup.

XuDong Peng-MSFT 11,181 Reputation points Microsoft Vendor

2025-02-14T09:16:37.4766667+00:00

Hi @Sergey Knyazev,

I'm not sure if you have it configured correctly, it looks like you have applied two rewrite rules (these two conditions can exist in one rule at the same time). Check if the configuration file is correct, follow these steps: Right click on your website -> Click Explore -> Find the Web.config file and open it -> Check the configuration in System.webserver node:

<system.webServer> <rewrite> <rules> <rule name="RequestBlockingRule1" enabled="false" stopProcessing="true"> <match url=".*" /> <conditions logicalGrouping="MatchAny"> <add input="{URL}" pattern="/dogs" /> <add input="{REMOTE_ADDR}" pattern="127.0.0.2" /> </conditions> <action type="CustomResponse" statusCode="403" statusReason="Forbidden: Access is denied." statusDescription="You do not have permission to view this directory or page using the credentials that you supplied." /> </rule> </rules> </rewrite> </system.webServer>

For the error about the installation of ARR module, I cannot reproduce your issue, it works for me locally. Which installation package did you download, x86 or x64? This depends on your operating system.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

IP and URL analysis in IIS 10

1 answer

Your answer