In IIS, I configure the applicationHost.config file by adding <ipSecurity
allowUnlisted="false" />. And I did not put and IP address in the
<ipSecurity> section.

However, I still can visit the Web site that is hosted in IIS from a client
computer without any problem. I have restarted the IIS service. Still I can
open the Web page.

Did I missing anything? Thanks!

On Sep 13, 8:12 pm, Felix_Jiang <FelixJi... [at] discussions.microsoft.com>
wrote:
> In IIS, I configure the applicationHost.config file by adding <ipSecurity
> allowUnlisted="false" />. And I did not put and IP address in the
> <ipSecurity> section.
>
> However, I still can visit the Web site that is hosted in IIS from a client
> computer without any problem. I have restarted the IIS service. Still I can
> open the Web page.
>
> Did I missing anything? Thanks!


Is the IP Security module installed on your IIS7? It's not installed
by default.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//