Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
Due to employer security issues, the development team is not allowed to have IIS on their development PCs. I would like to know if there is a way to have IIS locally and disallow incoming/outgoing connections? The development team would just like to harness the power of IIS for development purposes and not have to worry about ‘security’ breaches/issues? Long story…
You can bind it to a local-only address.
Instead of binding it to 0 or * (any available address) bind it to 127.0.0.1. This will only allow your box to access IIS since it’s only listening on IP 127.0.0.1.
Changing the binding is different from version to version, what version are you using?
EDIT
For IIS 5/6 you want to.
This should allow you to change your bindings.
Make sure the only binding you have is 127.0.0.1 on whatever port.