Microsoft KB Archive/306833

Knowledge Base

"HTTP Error 403.6" Error Message Occurs When You Try to Access Web Sites Beyond Proxy Server

Article ID: 306833

Article Last Modified on 10/30/2006

---

APPLIES TO

• Microsoft Proxy Server 2.0 Standard Edition

---

This article was previously published under Q306833

SYMPTOMS

When you are using a client computer that is behind Proxy Server 2.0 and you try to access an external Internet Web site using the Web Proxy service, you may receive the following error message:

HTTP Error 403
403.6 Forbidden: IP address rejected
This error is caused when the server has a list of IP addresses that are not allowed to access the site, and the IP address you are using is in this list.
Please contact the Web server's administrator if the problem persists

CAUSE

This error message can occur if the default Web site has been configured to accept connections only from certain Internet protocol (IP) addresses and the client does not fall within the permitted address range. Because the Web Proxy service is run as an Internet Server API (ISAPI) filter that depends on the default Web site, clients that are unable to access the default Web site cannot access the proxy server.

RESOLUTION

To resolve this issue:

1. Click Start, click Programs, click Microsoft Proxy Server, and then click Microsoft Management Console.
2. Click to expand the Internet Information Server container.
3. Click to expand your server name container.
4. Right-click Default Web Site and click Properties.
5. Click the Directory Security tab.
6. Click Edit in the IP Address and Domain Name Restrictions section.
7. Use one of the following methods:
   • Method 1: Allow any computer to access to your default Web site. To do so:
     
     
     1. Under By default, all computers will be, click Granted Access.
     2. Click OK.
     Use this method if you do not want to restrict access to the default Web site. This setting is the default setting on a new installation.
   • Method 2: Add your internal client's IP address to the exception list. To do so:
     
     
     1. Click Add in the IP Address and Domain Name Restrictions dialog box.
     2. Click Group of Computers under Type.
     3. Type your internal network ID and subnet mask in the Grant Access On dialog box, and then click OK.
     4. Click Add in the IP Address and Domain Name Restrictions dialog box.
     5. Click Single Computer under Type.
     6. Type 127.0.0.1 in the IP Address box.
     7. Click OK, and then click OK.
     Use this method if you want to restrict access to the default Web site.
8. Click Apply in the default Web site properties, and then click OK.
   
   NOTE: If you receive an "Inheritance Override" message after you click Apply, click OK without clicking any of the child nodes.

MORE INFORMATION

For additional information, click the article number below to view the article in the Microsoft Knowledge Base:

248043 Error Message: 403.6 - Forbidden: IP Address Rejected

Keywords: kbenv kberrmsg kbprb KB306833

---

Send feedback to Microsoft

© Microsoft Corporation. All rights reserved.