IIS IPSecurity is working properly after the AWS Elastic load balancer

I have set up IP restrictions (installed on IIS8, set function delegation to read/write), IIS seems to be reading from my web.config. OK, block all IP address, but when I click directly on the server, not through the load balancer

When I go through the load balancer, it doesn’t seem to respect the client IP.

So , Even though my IP is in the allowed IP list and I selected “Enable Proxy Mode”, I am still blocked.

I debugged the header, x-forwarded-for IP as the specified allowed IP To achieve. If I reverse it all, set everything to allow, and then use the proxy checkbox to deny my specific IP, it works, I just can’t make it deny all and allow my IP.

I Google as much as possible for help/experience on any of these issues?

This is my configuration:





I tested a similar situation in my own settings. IIS needs to have the actual IP of the load balancer (or proxy) and the x-forwarded-for IP address in the allow list To allow access. You can check the IIS log to get the actual client IP address obtained by your site.

I have set IP restrictions (installed on IIS8, set the function delegation to Read/write), IIS seems to be reading from my web.config. OK, all IP addresses are blocked, but when I hit the server directly, not through the load balancer

When going through the load balancer, it doesn’t seem to respect the client IP.

So even though my IP is in the list of allowed IPs and I select “Enable Proxy Mode”, I am still blocked.

p>

I debugged the header, and x-forwarded-for IP is implemented as the specified allowed IP. If I reverse all of them, set everything to allow, and then use the proxy checkbox setting to deny my specific IP , It works, I just can’t let it deny all and allow my IP.

I Google as much as possible for help/experience on any of these issues?

This is my configuration:





I tested a similar situation in my own setup. IIS needs to have the actual IP of the load balancer (or proxy) and the x-forwarded-for IP address in the allow list to allow access. You can check the IIS logs to get you The actual client IP address obtained by the site.

Leave a Comment

Your email address will not be published.