How to Block Specific IPs and IP Ranges in IIS7

denial-of-serviceiis-7ipSecurity

I'm trying to block various IP addresses from every site that I have hosted from an server running Windows 2008 and IIS7. I've found various information about how to do this using Deny rules from "IPv4 Address and Domain Name Deny Rules (IIS 7)" in the Features View of the IIS7 manager (http://technet.microsoft.com/en-us/library/cc733090(WS.10).aspx), but I don't have any icon that reads like that.

How do I get that UI in my IIS manager?

Best Answer

OK, so it turns out, the Role has to be added. I went to Server Manager > Roles > Add Role Services. Under Security node in the Role Services tree there is an option for IP and Domain Restrictions.

Checking that installed the role services and now my IIS Manager has an icon for "IPv4 Address and Domain Restrictions". Feels like this should be installed by default.

***Note: the installer warns about a restart but I was not prompted for one after the install completed. My sites all stayed up during the install as well.