Question

Due to employer security issues, the development team is not allowed to have IIS on their development PCs. I would like to know if there is a way to have IIS locally and disallow incoming/outgoing connections? The development team would just like to harness the power of IIS for development purposes and not have to worry about "security" breaches/issues? Long story...

Was it helpful?

Solution

You can bind it to a local-only address.

Instead of binding it to 0 or * (any available address) bind it to 127.0.0.1. This will only allow your box to access IIS since it's only listening on IP 127.0.0.1.

Changing the binding is different from version to version, what version are you using?

EDIT

For IIS 5/6 you want to.

  • Right-click your site and goto Properties
  • Select the Web Site tab
  • Under Web Site Identification click Advanced

This should allow you to change your bindings.

Make sure the only binding you have is 127.0.0.1 on whatever port.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top