Allow Access to a Website only for specific IPs
<p>I have a website  running in IIS 6.0, the website is an asp.net with framework 4.0
We have an application that is not hosted on the client, is hosted in our side. The client ask to allow access only for specific IPs.</p>

<p>So I added the list of IPs in the web.config, like this:</p>

<pre><code>&lt;security&gt;
  &lt;ipSecurity allowUnlisted="false"&gt;    
    &lt;clear/&gt; &lt;!-- removes all upstream restrictions --&gt;
    &lt;add ipAddress="XXX.XXX.XXX.114" subnetMask="255.255.255.0" allowed="true"/&gt;
&lt;add ipAddress="XXX.XXX.XXX.85" subnetMask="255.255.255.0" allowed="true"/&gt;
   &lt;/ipSecurity&gt;
 &lt;/security&gt;
</code></pre>

<p>In this example only two IPs have access to the side.
Should I need to do an extra step? because is not working. Is it the best way to do it?
Thank you.</p>
