How to Mask IP Addresses in Windows Media Technologies (274158)



The information in this article applies to:

  • Microsoft Windows Media Services 4.0
  • Microsoft Windows Media Services 4.1
  • Microsoft Windows Media Tools 4.0
  • Microsoft Windows Media Tools 4.1
  • Microsoft Windows Media Encoder 7
  • Microsoft Windows Media Encoder 7.1

This article was previously published under Q274158
IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry

SUMMARY

Windows Media Encoder and Windows Media Services support the use of Internet Protocol (IP) masks. These masks allow you to specify individual IP addresses or sets of IP addresses that should have access the Encoder and server. You can also specify IP addresses that should be denied access to the Encoder and server.

MORE INFORMATION

This access information is stored in the following four registry keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NetShow\AccessLists\AllowDistributionList

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NetShow\AccessLists\DisallowDistributionList

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NetShow\AccessLists\AllowUnicastClients

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NetShow\AccessLists\DisallowUnicastClients

Use the Registry Editor to update the registry keys with specific IP addresses. If you add the same IP addresses to both the Allow and Disallow registry keys, then the Disallow registry key overrides and access is denied. If these registry keys are not listed in your registry, then you can use the Edit menu to add them. Your ability to make changes to the registry by using Registry Editor depends on your access permissions.

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

To add an IP address to an access list, perform the following steps:
  1. Start Registry Editor.
  2. In Registry Editor, use the tree view to navigate through the following path:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NetShow\AccessLists

    If this registry key is not listed, use the Edit menu to add it.
  3. Click AllowDistribution or AllowUnicastClients to include specific IP addresses; click DisallowDistribution DisallowUnicastClients to exclude specific IP addresses. If these registry keys are not listed, use the Edit menu to add them.
  4. On the Edit menu, point to New, and then click String Value.
  5. Type the value of the IP address that you want to add to the list in the Name column, and then press the ENTER key.
To specify a range of IP addresses in an access list, perform the following steps:
  1. Start Registry Editor.
  2. In Registry Editor, use the tree view to navigate through the following path:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NetShow\AccessLists

    If this registry key is not listed, use the Edit menu to add it.
  3. Click AllowDistribution or AllowUnicastClients to include specific IP addresses; click DisallowDistribution DisallowUnicastClients to exclude specific IP addresses. If these registry keys are not listed, use the Edit menu to add them.
  4. In the Name column, click the IP address.
  5. On the Edit menu, click Modify to display the Edit String dialog box.
  6. In Value Data, type the mask value. The mask value is added to the Data column.
NOTE: Like an IP address, the mask is a 32-bit value. To set a range of addresses, each bit in the mask is compared to the corresponding bit in the IP address. When the value in the mask is 1, the corresponding bit in the IP address is included in the list. When the value in the mask is 0, any value is acceptable. For example, in decimal notation, if the IP address in the list is 134.123.123.20 and the mask is 255.255.255.0, all IP addresses from 134.123.123.0 to 134.123.123.255 are included in the list. If the mask is 255.255.255.128, all IP addresses from 134.123.123.0 to 134.123.123.127 are included in the list. If you specify an invalid mask, the mask is ignored.

When IP restrictions are placed on a computer, they affect all the Windows Media Technologies on that computer. For example, if Windows Media Services and Windows Media Encoder are installed on the same computer and you want to restrict access to the Encoder by using an IP Mask, the IP restrictions that you set also limit the clients that can connect to the server.

Modification Type:MajorLast Reviewed:11/26/2003
Keywords:kbinfo KB274158