Q: IIS 6.0 settings

[JIM.H.]

Hello,
I have two questions about IIS 6.0. Please also let me know if there is a
specific newsgroup for IIS.
1. It seems I can define an IP address for my web site through IIS settings;
does it have to be the server that web application is on?
2. I have windows authentication and anonymous access checked. Will it be
any security issue since anonymous access is checked?
Thanks,
Jim.

[Scott Allen]

Hi Jim:

On Wed, 18 May 2005 07:01:09 -0700, JIM.H.
<JI**@discussions.microsoft.com> wrote:

Hello,
I have two questions about IIS 6.0. Please also let me know if there is a
specific newsgroup for IIS.
There is also microsoft.public.inetserver.iis.
1. It seems I can define an IP address for my web site through IIS settings;
does it have to be the server that web application is on?
Yes, although you can also leave the setting open. Some servers are
assigned multiple IP addresses, and IIS can route a request to the
right web site by looking at the requested IP. If you only have one IP
you can leave the setting as (All Unassigned).

2. I have windows authentication and anonymous access checked. Will it be
any security issue since anonymous access is checked?

Do you want anonymous users coming to the site?
Note: you'll also control access with web.config for ASP.NET apps.

--
Scott
http://www.OdeToCode.com/blogs/scott/

[Cowboy (Gregory A. Beamer) - MVP]

There is an IIS group:

Server: msnews.microsoft.com
Group: microsoft.public.inetserver.iis

1) The IP must be bound to a NIC (Network Interface Card) in the machine you
are working with IIS on. You cannot set this to another machine. You can,
however, administer another machine from the MMC console, by selecting a
different machine (under the file menu). If you want muliple sites on
different addresses, bind multiple addresses to the NIC.

2) If you have anon checked, the default is anon. If a particular page has
an ACL set (permissions), the windows login box will fire. Otherwise, the
user will be authenticated as the anonymous user account, even if they have
an account on your system.

--
Gregory A. Beamer
MVP; MCP: +I, SE, SD, DBA

***************************
Think Outside the Box!
***************************
"JIM.H." wrote:

Hello,
I have two questions about IIS 6.0. Please also let me know if there is a
specific newsgroup for IIS.
1. It seems I can define an IP address for my web site through IIS settings;
does it have to be the server that web application is on?
2. I have windows authentication and anonymous access checked. Will it be
any security issue since anonymous access is checked?
Thanks,
Jim.

[JIM.H.]

Hi Scott/Cowboy.
Thanks for the replies.
1. So I have to have a second network card to be able to use a different IP
address?
2. I already have a login page and I am authentication the user, I also have
anonymous access checked, because if not, it was not working properly. Where
does anonymous access become in use? Why do we need it? Users are already
authenticated so why don’t we let system use anonymous access if it requires?
Any problem?
Thanks,
Jim.

"Scott Allen" wrote:

Hi Jim:

On Wed, 18 May 2005 07:01:09 -0700, JIM.H.
<JI**@discussions.microsoft.com> wrote:

Hello,
I have two questions about IIS 6.0. Please also let me know if there is a
specific newsgroup for IIS.

There is also microsoft.public.inetserver.iis.

1. It seems I can define an IP address for my web site through IIS settings;
does it have to be the server that web application is on?

Yes, although you can also leave the setting open. Some servers are
assigned multiple IP addresses, and IIS can route a request to the
right web site by looking at the requested IP. If you only have one IP
you can leave the setting as (All Unassigned).

2. I have windows authentication and anonymous access checked. Will it be
any security issue since anonymous access is checked?

Do you want anonymous users coming to the site?
Note: you'll also control access with web.config for ASP.NET apps.

--
Scott
http://www.OdeToCode.com/blogs/scott/

[JIM.H.]

Hello Cowboy,
Thanks for the reply. What you mean by bind. I went to IIS and used
advanced>Add to add new ip addresses and port number. When I say ipconfig it
seems my adapter has 2 ip addresses, Does it all I need to do to bind?
Jim.

"Cowboy (Gregory A. Beamer) - MVP" wrote:

There is an IIS group:

Server: msnews.microsoft.com
Group: microsoft.public.inetserver.iis

1) The IP must be bound to a NIC (Network Interface Card) in the machine you
are working with IIS on. You cannot set this to another machine. You can,
however, administer another machine from the MMC console, by selecting a
different machine (under the file menu). If you want muliple sites on
different addresses, bind multiple addresses to the NIC.

2) If you have anon checked, the default is anon. If a particular page has
an ACL set (permissions), the windows login box will fire. Otherwise, the
user will be authenticated as the anonymous user account, even if they have
an account on your system.

--
Gregory A. Beamer
MVP; MCP: +I, SE, SD, DBA

***************************
Think Outside the Box!
***************************
"JIM.H." wrote:

Hello,
I have two questions about IIS 6.0. Please also let me know if there is a
specific newsgroup for IIS.
1. It seems I can define an IP address for my web site through IIS settings;
does it have to be the server that web application is on?
2. I have windows authentication and anonymous access checked. Will it be
any security issue since anonymous access is checked?
Thanks,
Jim.

[William Tasso]

JIM.H. <JI**@discussions.microsoft.com> wrote:

Hi Scott/Cowboy.
Thanks for the replies.
1. So I have to have a second network card to be able to use a different
IP
address?

no
--
William Tasso

[JIM.H.]

William,
Thanks for the reply. How does two IP address work for one machine? If one
card have more than one IP address assigned, how does it communicate with the
network? With witch IP address? How does it select it?
Thanks,
Jim.
"William Tasso" wrote:

JIM.H. <JI**@discussions.microsoft.com> wrote:

Hi Scott/Cowboy.
Thanks for the replies.
1. So I have to have a second network card to be able to use a different
IP
address?

no
--
William Tasso

[William Tasso]

JIM.H. <JI**@discussions.microsoft.com> wrote:

...
How does two IP address work for one machine? If one
card have more than one IP address assigned, how does it communicate
with the
network? With witch IP address? How does it select it?

Whichever nic has the gateway address specified, then (I believe, but do
chack) it uses the first IP allocated.

But this has strayed way off-topic already for this group.

--
William Tasso

[Juan T. Llibre]

Check out :
http://www.estouaqui.com/docs/IIS50_...re/iinmres.htm

The section titled "Multiple IP Addresses"


Juan T. Llibre
ASP.NET MVP
http://asp.net.do/foros/
Foros de ASP.NET en Español
Ven, y hablemos de ASP.NET...
======================

"JIM.H." <JI**@discussions.microsoft.com> wrote in message
news:7D**********************************@microsof t.com...

William,
Thanks for the reply. How does two IP address work for one machine? If one
card have more than one IP address assigned, how does it communicate with the
network? With witch IP address? How does it select it?
Thanks,
Jim.
"William Tasso" wrote:

JIM.H. <JI**@discussions.microsoft.com> wrote:

> Hi Scott/Cowboy.
> Thanks for the replies.
> 1. So I have to have a second network card to be able to use a different
> IP
> address?

no
--
William Tasso