IIS 默认网站锁定虚拟目录
我在 IIS 6.0 中有一个网站,其中托管多个虚拟目录。网站中的一些虚拟目录需要提供给互联网,因此整个网站有一个公共 DNS 条目。其他虚拟目录不应提供给互联网,但默认情况下它们会通过公共 DNS 主机公开。
是否可以在单个网站内“锁定”某些虚拟目录而不锁定其他虚拟目录?或者您是否需要创建一个不同的网站来分隔虚拟目录?
I have a Web Site in IIS 6.0 that hosts several virtual directories. Some of the virtual directories in the Web Site need to be served out to the internet, so there is a public DNS entry for the Web Site as a whole. Other virutal directories should not be served to the internet, but they get exposed by default through the public DNS host.
Is it possible to "lock down" certain virtual directories and not others within a single Web Site? Or would you need to create a different Web Site to separate the virtual directories?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
如果您使用任何类型的网址重写过滤器,您可以使用它来隐藏您想要的目录。
或者,您可以更改这些目录的权限以禁止访问。
您还可以限制从内部网络地址以外的 IP 访问这些目录。
if you are using any kind of Url Rewriting filter, you could use it to hide the directories you want.
Alternatively you can change the permissions on those directories to disallow access ..
You could also restrict access to those directories from IPs other than your internal network addresses..
取决于您所说的“锁定”的含义,如果您只想锁定 vdir 以仅允许某些 IP 地址或子网,那么您可以在网站的任何级别上执行此操作 - 如果您愿意,甚至可以在页面上执行此操作!您还可以将站点与网卡相关联,并且仅从该网卡提供流量。
最后,如果您想获得真正的技术,您始终可以使用 IPSec 来限制来自某些 IP 地址的流量。
Depends what you mean by "locking down" if all you want to do is lock a vdir to only allow certain IP addresses or subnets, then you can do this on any level of the web site - even a page if you want! You can also assoc a site with a network card, and only feed traffic from that network card.
Finally, if you want to get REALLY techy, you could always IPSec to limit traffic from certain IP addresses.