IIS过滤IP管理VBS脚本

ejzhang

为保证IIS安全或限制某些IP访问站点，需要在IIS安全性里设置过滤IP地址，为了方便命令行操作，参照网上的脚本写了一个

1. Dim IisW3Svc, SiteServers, SiteIdLists
   
2. SiteServers = "WebSite Listing:" & vbCrLf
   
3. SiteIdLists = "|"
   
4. On Error Resume Next
   
5. Set IisW3Svc = GetObject("IIS://LocalHost/W3SVC")
   
6. If Err.Number = 0 Then
   
7.     For Each WebSrvr in IisW3Svc
   
8.         If IsNumeric(WebSrvr.Name) Then
   
9.             SiteIdLists = SiteIdLists & WebSrvr.Name & "|"
   
10.             SiteServers = SiteServers & WebSrvr.ServerComment & "(SiteId:" & WebSrvr.Name & ", IpBinding:" & Join(WebSrvr.ServerBindings(0),"") & ")" & vbCrLf
    
11.         End If
    
12.     Next
    
13. Else
    
14.     WScript.Echo "The IIS cannot access!"
    
15.     WScript.Quit(-1)
    
16. End If
    
17. On Error Goto 0
    
18. If WScript.Arguments.Count = 0 Then
    
19.     WScript.Echo SiteServers
    
20. End If
    
21. 
    
22. If WScript.Arguments.Count <> 2 Then
    
23.     WScript.Echo "Usage: cscript " & WScript.ScriptName & " <SiteId> [*|+|-]<NewIp>"
    
24.     WScript.Quit(1)
    
25. End If
    
26. 
    
27. Dim SiteId, NewIp, Action, reIPv4
    
28. SiteId = WScript.Arguments(0)
    
29. NewIp = WScript.Arguments(1)
    
30. If InStr(SiteIdLists, "|" & SiteId & "|") = 0 Then
    
31.     WScript.Echo "The <SiteId> is NOT valid!"
    
32.     WScript.Quit(2)
    
33. End If
    
34. If Left(NewIp, 1) = "*" Then
    
35.     Action = "List"
    
36. ElseIf Left(NewIp, 1) = "-" Then
    
37.     Action = "Del"
    
38. Else
    
39.     Action = "Add"
    
40. End If
    
41. If Action <> "List" Then
    
42.     If Left(NewIp, 1) = "+" Or Left(NewIp, 1) = "-" Then
    
43.         NewIp = Mid(NewIp, 2)
    
44.     End If
    
45.     Set reIPv4 = New regExp
    
46.     reIPv4.Pattern = "^((25[0-5]|2[0-4]\d|1?\d?\d)\.){3}(25[0-5]|2[0-4]\d|1?\d?\d)$"
    
47.     If reIPv4.Test(NewIp) = 0 Then
    
48.         WScript.Echo "The <NewIp> is NOT valid!"
    
49.         WScript.Quit(2)
    
50.     Else
    
51.         NewIp = NewIp & ", 255.255.255.255"
    
52.     End If
    
53. End If
    
54. 
    
55. Dim IisSecObj, IisIpSec
    
56. On Error Resume Next
    
57. Set IisSecObj = GetObject("IIS://LocalHost/W3SVC/" & SiteId & "/ROOT")
    
58. If Err.Number = 0 Then
    
59.     Set IisIpSec = IisSecObj.IPSecurity
    
60. Else
    
61.     WScript.Echo "SiteId is WRONG!"
    
62.     WScript.Quit(-1)
    
63. End If
    
64. On Error Goto 0
    
65. 
    
66. Dim IpLists
    
67. If IisIpSec.GrantByDefault Then
    
68.     IpLists = IisIpSec.IPDeny
    
69. Else
    
70.     IpLists = IisIpSec.IPGrant
    
71. End If
    
72. 
    
73. If Action = "List" Then
    
74.     If IisIpSec.GrantByDefault Then
    
75.         WScript.Echo "Default Grant access" & vbCrLf & Replace(Join(IpLists, vbCrLf), ", 255.255.255.255", "")
    
76.     Else
    
77.         WScript.Echo "Default Deny access" & vbCrLf & Replace(Join(IpLists, vbCrLf), ", 255.255.255.255", "")
    
78.     End If
    
79.     WScript.Quit(0)
    
80. End If
    
81. 
    
82. IpLists = "|" & Join(IpLists, "|")
    
83. If Action = "Add" Then
    
84.     If InStr(IpLists, NewIp) = 0 Then
    
85.         IpLists = IpLists & "|" & NewIp
    
86.     Else
    
87.         WScript.Echo "Ip address " & Replace(NewIp, ", 255.255.255.255", "") & " is exist!"
    
88.         WScript.Quit(3)
    
89.     End If
    
90. End If
    
91. If Action = "Del" Then
    
92.     If InStr(IpLists, NewIp) > 0 Then
    
93.         IpLists = Replace(IpLists, "|" & NewIp, "")
    
94.     Else
    
95.         WScript.Echo "Ip address " & Replace(NewIp, ", 255.255.255.255", "") & " is not exist!"
    
96.         WScript.Quit(3)
    
97.     End If
    
98. End If
    
99. IpLists = Split(Mid(IpLists, 2), "|")
    
100. If IisIpSec.GrantByDefault Then
     
101.     IisIpSec.IPDeny = IpLists
     
102. Else
     
103.     IisIpSec.IPGrant = IpLists
     
104. End If
     
105. 
     
106. On Error Resume Next
     
107. IisSecObj.IPSecurity = IisIpSec
     
108. If Err.Number = 0 Then
     
109.     IisSecObj.SetInfo
     
110.     If Action = "Add" Then
     
111.         WScript.Echo "Ip address " & Replace(NewIp, ", 255.255.255.255", "") & " is added!"
     
112.     Else
     
113.         WScript.Echo "Ip address " & Replace(NewIp, ", 255.255.255.255", "") & " is deleted!"
     
114.     End If
     
115.     WScript.Quit(0)
     
116. Else
     
117.     WScript.Echo "NewIp is WRONG!"
     
118.     WScript.Quit(-1)
     
119. End If

复制代码