locked
IIS - How to restrict incoming IP address from accessing one URL path and not the other RRS feed

  • Question

  • I have three APIs installed on the same IIS server using different ports

    • https://myIISserver/Api_One/?[query string]
    • https://myIISserver/Api_Two/?[query string]
    • https://myIISserver/Api_Three/?[query string]

    I need a way to

    • Allow Client_One with IP_One to only access API_One and denied access to the other two APIs
    • Allow Client_Two with IP_Two to only access API_Two and denied access to the other two APIs
    • Allow Client_Three with IP_Three to only access API_Three and denied access to the other two APIs

    • Moved by litdev Saturday, August 15, 2020 5:50 PM
    Wednesday, August 12, 2020 10:50 PM

Answers

  • I'd try asking for help over here.

    https://forums.iis.net/

     

     



    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows Server] Datacenter Management

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

    Wednesday, August 19, 2020 3:40 PM

All replies

  • Do you want to do this in Small Basic?

    Jan [ WhTurner ] The Netherlands

    Thursday, August 13, 2020 10:00 AM
  • I need it done in a safe secure way

    the issue is that the API are third party and i have no source code

    They are installed on an internal server (internet) as 

    API 1: - https : // InternalServer : 5220  

    API 2: - https : // InternalServer : 5221

    API 3: - https :// InternalServer : 5222 

    On an external server (available to public - internet)

    I have created a reverse proxy using ( IIS rewrite rules ) to redirect clients request to the internal server 

    Ex: 

    • https://myExternalIISserver/Api_One/?[query string] - will redirect the request to https://InternalServer:5220  
    • https://myExternalIISserver/Api_Two/?[query string] - will redirect the request to https://InternalServer:5221  
    • https://myExternalIISserver/Api_Three/?[query string] - will redirect the request to https://InternalServer:5222  

    The issue Is that I want

    - only IP address from my business Client/customer 1 to access only API 1

    - only IP address from  my business Client/customer 2 to access only API 2

    - only IP address from  my business Client/customer 3 to access only API 3

    only IP address from  my business Client/customer X to access only API 1 and AP 2 and not API 3 

    Friday, August 14, 2020 12:58 AM
  • If you don't use SmallBasic, you can better look for another forum.

    Jan [ WhTurner ] The Netherlands

    Friday, August 14, 2020 2:00 PM
  • I'd try asking for help over here.

    https://forums.iis.net/

     

     



    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows Server] Datacenter Management

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

    Wednesday, August 19, 2020 3:40 PM