Windows server 16 with a website

Question

My windows server 16 has: IIS, DNS and active director

My local server is obama.local and I host a website call obama.work

The external clients can access the website without any problem

The internal clients can't access the website

I will need to configure DNS Forward Lookup zone but don't the details.
I configures the lookup zone with the following:

obama.work
Name = cpanel
Type= Host(a)
Data = <The external IP address>

This is all I have and is not working.
Can you please help me or give me a web page with information as what to do?

Answer 1

@Dave Patrick I am able to ping my internal and external IP address.
Looks like the problem maybe in the IIS? I am reading @Candy Luo comment.

Answer 2

Hi @Tia Rojas ,

I have discussed with my IIS colleagues, if possible, please post web.config file for us to find some clues.

If I enter the "internal IP" "www.obama.com" I am able to access the intranet website on that computer only but, I can't be updating all the iphones and ipads host files for all users.

By the way, I noticed that you said enter the "internal IP" "www.obama.com" then you can access the intranet website. How did you access the website? Can you access the website by IP address at that time?

Best Regards,
Candy

Answer 3

@Candy Luo that message is in reference to updating the C:\Windows\System32\drivers\etc\host file with <internal IP> www.obama.com. this solution only works if I update the host file of all the iphones and ipads that we use. I don't want to use this solution.

I have a lot of web.config files. Is this the one that you want?
C:\Users\administrator.OBAMA\AppData\Local\Microsoft\Office\SolutionPackages\ca5fad937e92d69a1194ecbd63a29c56\PackageResources\build

<?xml version="1.0" encoding="utf-8" ?>
<configuration>
<system.webServer>
<rewrite>
<rules>
<!-- Redirect to https -->
<rule name="Redirect to https">
<match url="(.*)"/>
<conditions>
<add input="{HTTPS}" pattern="Off"/>
<add input="{REQUEST_METHOD}" pattern="^get$|^head$" />
</conditions>
<action type="Redirect" url="https://{HTTP_HOST}/{R:1}"/>
</rule>
</rules>

        <outboundRules>  
            <!-- Disable caching for HTML files -->  
            <rule name="DisableCacheHTMLFiles" preCondition="IsHTMLFile">  
                <match serverVariable="RESPONSE_Cache-Control" pattern=".*" />  
                <action type="Rewrite" value="no-cache, no-store" />  
            </rule>  
            <preConditions>  
                <preCondition name="IsHTMLFile">  
                    <add input="{REQUEST_FILENAME}" pattern=".*\.html" />  
                </preCondition>  
            </preConditions>  
        </outboundRules>  
    </rewrite>  
</system.webServer>  

</configuration>

Answer 4

@Candy Luo the applicationHost.config is too large to transfer. I had to put the information in the page

The HTTPS binding image:

<?xml version="1.0" encoding="UTF-8"?>
<!--

IIS configuration sections.  

For schema documentation, see  
%windir%\system32\inetsrv\config\schema\IIS_schema.xml.  
  
Please make a backup of this file before making any changes to it.  

-->

<configuration>

<!--  

    The <configSections> section controls the registration of sections.  
    Section is the basic unit of deployment, locking, searching and  
    containment for configuration settings.  
      
    Every section belongs to one section group.  
    A section group is a container of logically-related sections.  
      
    Sections cannot be nested.  
    Section groups may be nested.  
      
    <section  
        name=""  [Required, Collection Key] [XML name of the section]  
        allowDefinition="Everywhere" [MachineOnly|MachineToApplication|AppHostOnly|Everywhere] [Level where it can be set]  
        overrideModeDefault="Allow"  [Allow|Deny] [Default delegation mode]  
        allowLocation="true"  [true|false] [Allowed in location tags]  
    />  
      
    The recommended way to unlock sections is by using a location tag:  
    <location path="Default Web Site" overrideMode="Allow">  
        <system.webServer>  
            <asp />  
        </system.webServer>  
    </location>  

-->  
<configSections>  
    <sectionGroup name="system.applicationHost">  
        <section name="applicationPools" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />  
        <section name="configHistory" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />  
        <section name="customMetadata" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />  
        <section name="listenerAdapters" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />  
        <section name="log" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />  
        <section name="serviceAutoStartProviders" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />  
        <section name="sites" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />  
        <section name="webLimits" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />  
    </sectionGroup>  

    <sectionGroup name="system.webServer">  
        <section name="asp" overrideModeDefault="Deny" />  
        <section name="caching" overrideModeDefault="Allow" />  
        <section name="cgi" overrideModeDefault="Deny" />  
        <section name="defaultDocument" overrideModeDefault="Allow" />  
        <section name="directoryBrowse" overrideModeDefault="Allow" />  
        <section name="fastCgi" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />  
        <section name="globalModules" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />  
        <section name="handlers" overrideModeDefault="Deny" />  
        <section name="httpCompression" overrideModeDefault="Allow" />  
        <section name="httpErrors" overrideModeDefault="Allow" />  
        <section name="httpLogging" overrideModeDefault="Deny" />  
        <section name="httpProtocol" overrideModeDefault="Allow" />  
        <section name="httpRedirect" overrideModeDefault="Allow" />  
        <section name="httpTracing" overrideModeDefault="Deny" />  
        <section name="isapiFilters" allowDefinition="MachineToApplication" overrideModeDefault="Deny" />  
        <section name="modules" allowDefinition="MachineToApplication" overrideModeDefault="Deny" />  
        <section name="applicationInitialization" allowDefinition="MachineToApplication" overrideModeDefault="Allow" />  
        <section name="odbcLogging" overrideModeDefault="Deny" />  
        <sectionGroup name="security">  
            <section name="access" overrideModeDefault="Deny" />  
            <section name="applicationDependencies" overrideModeDefault="Deny" />  
            <sectionGroup name="authentication">  
                <section name="anonymousAuthentication" overrideModeDefault="Deny" />  
                <section name="basicAuthentication" overrideModeDefault="Deny" />  
                <section name="clientCertificateMappingAuthentication" overrideModeDefault="Deny" />  
                <section name="digestAuthentication" overrideModeDefault="Deny" />  
                <section name="iisClientCertificateMappingAuthentication" overrideModeDefault="Deny" />  
                <section name="windowsAuthentication" overrideModeDefault="Deny" />  
            </sectionGroup>  
            <section name="authorization" overrideModeDefault="Allow" />  
            <section name="ipSecurity" overrideModeDefault="Deny" />  
            <section name="dynamicIpSecurity" overrideModeDefault="Deny" />  
            <section name="isapiCgiRestriction" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />  
            <section name="requestFiltering" overrideModeDefault="Allow" />  
        </sectionGroup>  
        <section name="serverRuntime" overrideModeDefault="Deny" />  
        <section name="serverSideInclude" overrideModeDefault="Deny" />  
        <section name="staticContent" overrideModeDefault="Allow" />  
        <sectionGroup name="tracing">  
            <section name="traceFailedRequests" overrideModeDefault="Allow" />  
            <section name="traceProviderDefinitions" overrideModeDefault="Deny" />  
        </sectionGroup>  
        <section name="urlCompression" overrideModeDefault="Allow" />  
        <section name="validation" overrideModeDefault="Allow" />  
        <sectionGroup name="webdav">  
            <section name="globalSettings" overrideModeDefault="Deny" />  
            <section name="authoring" overrideModeDefault="Deny" />  
            <section name="authoringRules" overrideModeDefault="Deny" />  
        </sectionGroup>  
        <section name="webSocket" overrideModeDefault="Deny" />  
        <sectionGroup name="rewrite">  
            <section name="rules" overrideModeDefault="Allow" />  
            <section name="globalRules" overrideModeDefault="Deny" allowDefinition="AppHostOnly" />  
            <section name="outboundRules" overrideModeDefault="Allow" />  
            <section name="providers" overrideModeDefault="Allow" />  
            <section name="rewriteMaps" overrideModeDefault="Allow" />  
            <section name="allowedServerVariables" overrideModeDefault="Deny" />  
        </sectionGroup>  
    </sectionGroup>  
    <sectionGroup name="system.ftpServer">  
        <section name="log" overrideModeDefault="Deny" allowDefinition="AppHostOnly" />  
        <section name="firewallSupport" overrideModeDefault="Deny" allowDefinition="AppHostOnly" />  
        <section name="caching" overrideModeDefault="Deny" allowDefinition="AppHostOnly" />  
        <section name="providerDefinitions" overrideModeDefault="Deny" />  
        <sectionGroup name="security">  
            <section name="ipSecurity" overrideModeDefault="Deny" />  
            <section name="requestFiltering" overrideModeDefault="Deny" />  
            <section name="authorization" overrideModeDefault="Deny" />  
            <section name="authentication" overrideModeDefault="Deny" />  
        </sectionGroup>  
        <section name="serverRuntime" overrideModeDefault="Deny" allowDefinition="AppHostOnly" />  
    </sectionGroup>  
</configSections>  

<configProtectedData>  
    <providers>  
        <add name="IISWASOnlyRsaProvider" type="" description="Uses RsaCryptoServiceProvider to encrypt and decrypt" keyContainerName="iisWasKey" cspProviderName="" useMachineContainer="true" useOAEP="false" />  
        <add name="IISCngProvider" type="Microsoft.ApplicationHost.CngProtectedConfigurationProvider" description="Uses Win32 Crypto CNG to encrypt and decrypt" keyContainerName="iisCngConfigurationKey" useMachineContainer="true" />  
        <add name="IISWASOnlyCngProvider" type="Microsoft.ApplicationHost.CngProtectedConfigurationProvider" description="(WAS Only) Uses Win32 Crypto CNG to encrypt and decrypt" keyContainerName="iisCngWasKey" useMachineContainer="true" />  
        <add name="AesProvider" type="Microsoft.ApplicationHost.AesProtectedConfigurationProvider" description="Uses an AES session key to encrypt and decrypt" keyContainerName="iisConfigurationKey" cspProviderName="" useOAEP="false" useMachineContainer="true" sessionKey="AQIAAA5mAAAApAAA4T5XxyMXcFs5ibaamsetTcaveBuBFxIjwl/c/yS/vCcCmw1Tho9pZUm44r6+WbO75fKQrA+A6dDTRc+COFQcExXHjW9mbjNef5/SFjmwv5NhL/VN5WLsCP/Dhco2zp1fIYyBGX/iholE0oDddFCKyTQV5EPVSxGivX7aFpkydNvfFbHWaS27c4yFToo7Awv2XonQ7zBU0PCzREjSl15mwiRqINnAhHrgeIIYep1aQ4DHgbXteLi9kxJGxFii3HhU0E4t57ASZd6A5GiN7aHUHhZczF45k9Pek8aJB8zAhFTNhrsTpNweviKqplMeHLtoMGZXWomSpzkQASciTxOjUA==" />  
        <add name="IISWASOnlyAesProvider" type="Microsoft.ApplicationHost.AesProtectedConfigurationProvider" description="Uses an AES session key to encrypt and decrypt" keyContainerName="iisWasKey" cspProviderName="" useOAEP="false" useMachineContainer="true" sessionKey="AQIAAA5mAAAApAAAvkhPCG2r/vbYqHR2bq147CnKwJUEDQnWfrHmHGgOpF9+GgLKfNmbvwoV6Fg4Kl5QeRtqexoRcGnS1Tn2F4zUPUSUFDRaRS10Ctjajr4xVO3bcfkvl1KlP/MRbsg2AwJxU/KPD5uEqiuSmw6Mt/ifwsXVPTaTJLj70Wemjnr5v0KpqEGYK18jpKsjP50lP2A+eTrjRQLgGbSQL80Wbdl6aKX5fcnoD9lZZsxTwOAFRPhVsrNVn2zL/E9cvAq46QD2SGmzbeRp1nUjX0pNzoprMX0cjILuqNSmdT+fpnFhVMS4NGDraou8JqP3iHG87O21Z9K4AqlFLzIZz1uDeY76Ww==" />  
    </providers>  
</configProtectedData>  

<system.applicationHost>  

    <applicationPools>  
        <add name="DefaultAppPool" autoStart="false" />  
        <add name="CMO" autoStart="true" enable32BitAppOnWin64="true" />  
        <add name="Classic .NET AppPool" managedRuntimeVersion="v2.0" managedPipelineMode="Classic" />  
        <add name=".NET v2.0 Classic" managedRuntimeVersion="v2.0" managedPipelineMode="Classic" />  
        <add name=".NET v2.0" managedRuntimeVersion="v2.0" />  
        <add name=".NET v4.5 Classic" managedRuntimeVersion="v4.0" managedPipelineMode="Classic" />  
        <add name=".NET v4.5" managedRuntimeVersion="v4.0" />  
        <add name="CMOV2" enable32BitAppOnWin64="true" />  
        <applicationPoolDefaults managedRuntimeVersion="v4.0">  
            <processModel identityType="ApplicationPoolIdentity" />  
        </applicationPoolDefaults>  
    </applicationPools>  

    <!--  

      The <customMetadata> section is used internally by the Admin Base Objects  
      (ABO) Compatibility component. Please do not modify its content.  

    -->  
    <customMetadata>  
        <key path="LM/W3SVC/INFO">  
            <property id="4012" dataType="String" userType="1" attributes="Inherit" value="NCSA Common Log File Format,Microsoft IIS Log File Format,W3C Extended Log File Format,ODBC Logging" />  
            <property id="2120" dataType="MultiSZ" userType="1" attributes="None" value="400,0,,,0&#xA;" />  
        </key>  
    </customMetadata>  

    <!--  

      The <listenerAdapters> section defines the protocols with which the  
      Windows Process Activation Service (WAS) binds.  

    -->  
    <listenerAdapters>  
        <add name="http" />  
        <add name="net.tcp" identity="S-1-5-80-3579033775-2824656752-1522793541-1960352512-462907086" />  
        <add name="net.msmq" identity="S-1-5-80-89244771-1762554971-1007993102-348796144-2203111529" />  
        <add name="msmq.formatname" identity="S-1-5-80-89244771-1762554971-1007993102-348796144-2203111529" />  
        <add name="net.pipe" identity="S-1-5-80-2943419899-937267781-4189664001-1229628381-3982115073" />  
    </listenerAdapters>  

    <log>  
        <centralBinaryLogFile enabled="true" directory="%SystemDrive%\inetpub\logs\LogFiles" />  
        <centralW3CLogFile enabled="true" directory="%SystemDrive%\inetpub\logs\LogFiles" />  
    </log>  

    <sites>  
        <site name="Default Web Site" id="1" serverAutoStart="false">  
            <application path="/">  
                <virtualDirectory path="/" physicalPath="%SystemDrive%\inetpub\wwwroot" />  
            </application>  
            <bindings>  
                <binding protocol="net.tcp" bindingInformation="808:*" />  
                <binding protocol="net.msmq" bindingInformation="localhost" />  
                <binding protocol="msmq.formatname" bindingInformation="localhost" />  
                <binding protocol="net.pipe" bindingInformation="*" />  
            </bindings>  
        </site>  
        <site name="CMOV2" id="3" serverAutoStart="true">  
            <application path="/" applicationPool="CMOV2">  
                <virtualDirectory path="/" physicalPath="C:\Program Files (x86)\Distinctive Systems Ltd\CMOV2" />  
            </application>  
            <bindings>  
                <binding protocol="http" bindingInformation="20.0.0.8:80:" />  
                <binding protocol="https" bindingInformation="*:443:www.obama.work" sslFlags="0" />  
            </bindings>  
        </site>  
        <siteDefaults>  
            <logFile logFormat="W3C" directory="%SystemDrive%\inetpub\logs\LogFiles" />  
            <traceFailedRequestsLogging directory="%SystemDrive%\inetpub\logs\FailedReqLogFiles" />  
        </siteDefaults>  
        <applicationDefaults applicationPool="DefaultAppPool" />  
        <virtualDirectoryDefaults allowSubDirConfig="true" />  
    </sites>  

    <webLimits />  

</system.applicationHost>  

<system.webServer>  

    <asp />  

    <caching enabled="true" enableKernelCache="true">  
    </caching>  

    <cgi />  

    <defaultDocument enabled="true">  
        <files>  
            <add value="Default.htm" />  
            <add value="Default.asp" />  
            <add value="index.htm" />  
            <add value="index.html" />  
            <add value="iisstart.htm" />  
            <add value="default.aspx" />  
        </files>  
    </defaultDocument>  

    <directoryBrowse enabled="false" />  

    <fastCgi />  

    <!--  

      The <globalModules> section defines all native-code modules.  
      To enable a module, specify it in the <modules> section.  

    -->  
    <globalModules>  
        <add name="HttpLoggingModule" image="%windir%\System32\inetsrv\loghttp.dll" />  
        <add name="UriCacheModule" image="%windir%\System32\inetsrv\cachuri.dll" />  
        <add name="FileCacheModule" image="%windir%\System32\inetsrv\cachfile.dll" />  
        <add name="TokenCacheModule" image="%windir%\System32\inetsrv\cachtokn.dll" />  
        <add name="HttpCacheModule" image="%windir%\System32\inetsrv\cachhttp.dll" />  
        <add name="StaticCompressionModule" image="%windir%\System32\inetsrv\compstat.dll" />  
        <add name="DefaultDocumentModule" image="%windir%\System32\inetsrv\defdoc.dll" />  
        <add name="DirectoryListingModule" image="%windir%\System32\inetsrv\dirlist.dll" />  
        <add name="ProtocolSupportModule" image="%windir%\System32\inetsrv\protsup.dll" />  
        <add name="StaticFileModule" image="%windir%\System32\inetsrv\static.dll" />  
        <add name="AnonymousAuthenticationModule" image="%windir%\System32\inetsrv\authanon.dll" />  
        <add name="RequestFilteringModule" image="%windir%\System32\inetsrv\modrqflt.dll" />  
        <add name="CustomErrorModule" image="%windir%\System32\inetsrv\custerr.dll" />  
        <add name="BasicAuthenticationModule" image="%windir%\System32\inetsrv\authbas.dll" />  
        <add name="WindowsAuthenticationModule" image="%windir%\System32\inetsrv\authsspi.dll" />  
        <add name="IsapiModule" image="%windir%\System32\inetsrv\isapi.dll" />  
        <add name="IsapiFilterModule" image="%windir%\System32\inetsrv\filter.dll" />  
        <add name="ManagedEngine64" image="%windir%\Microsoft.NET\Framework64\v2.0.50727\webengine.dll" preCondition="integratedMode,runtimeVersionv2.0,bitness64" />  
        <add name="ManagedEngine" image="%windir%\Microsoft.NET\Framework\v2.0.50727\webengine.dll" preCondition="integratedMode,runtimeVersionv2.0,bitness32" />  
        <add name="ManagedEngineV4.0_32bit" image="%windir%\Microsoft.NET\Framework\v4.0.30319\webengine4.dll" preCondition="integratedMode,runtimeVersionv4.0,bitness32" />  
        <add name="ManagedEngineV4.0_64bit" image="%windir%\Microsoft.NET\Framework64\v4.0.30319\webengine4.dll" preCondition="integratedMode,runtimeVersionv4.0,bitness64" />  
        <add name="ApplicationInitializationModule" image="%windir%\System32\inetsrv\warmup.dll" />  
        <add name="ConfigurationValidationModule" image="%windir%\System32\inetsrv\validcfg.dll" />  
        <add name="HttpRedirectionModule" image="%windir%\System32\inetsrv\redirect.dll" />  
        <add name="RewriteModule" image="%SystemRoot%\system32\inetsrv\rewrite.dll" />  
    </globalModules>  

    <httpCompression directory="%SystemDrive%\inetpub\temp\IIS Temporary Compressed Files">  
        <scheme name="gzip" dll="%Windir%\system32\inetsrv\gzip.dll" />  
        <staticTypes>  
            <add mimeType="text/*" enabled="true" />  
            <add mimeType="message/*" enabled="true" />  
            <add mimeType="application/javascript" enabled="true" />  
            <add mimeType="application/atom+xml" enabled="true" />  
            <add mimeType="application/xaml+xml" enabled="true" />  
            <add mimeType="image/svg+xml" enabled="true" />  
            <add mimeType="*/*" enabled="false" />  
        </staticTypes>  
    </httpCompression>  

    <httpErrors lockAttributes="allowAbsolutePathsWhenDelegated,defaultPath">  
        <error statusCode="401" prefixLanguageFilePath="%SystemDrive%\inetpub\custerr" path="401.htm" />  
        <error statusCode="403" prefixLanguageFilePath="%SystemDrive%\inetpub\custerr" path="403.htm" />  
        <error statusCode="404" prefixLanguageFilePath="%SystemDrive%\inetpub\custerr" path="404.htm" />  
        <error statusCode="405" prefixLanguageFilePath="%SystemDrive%\inetpub\custerr" path="405.htm" />  
        <error statusCode="406" prefixLanguageFilePath="%SystemDrive%\inetpub\custerr" path="406.htm" />  
        <error statusCode="412" prefixLanguageFilePath="%SystemDrive%\inetpub\custerr" path="412.htm" />  
        <error statusCode="500" prefixLanguageFilePath="%SystemDrive%\inetpub\custerr" path="500.htm" />  
        <error statusCode="501" prefixLanguageFilePath="%SystemDrive%\inetpub\custerr" path="501.htm" />  
        <error statusCode="502" prefixLanguageFilePath="%SystemDrive%\inetpub\custerr" path="502.htm" />  
    </httpErrors>  

    <httpLogging dontLog="false" />  

    <httpProtocol>  
        <customHeaders>  
            <clear />  
            <add name="X-Powered-By" value="ASP.NET" />  
        </customHeaders>  
        <redirectHeaders>  
            <clear />  
        </redirectHeaders>  
    </httpProtocol>  

    <httpRedirect enabled="false" />  

    <httpTracing />  

    <isapiFilters>  
        <filter name="ASP.Net_2.0.50727-64" path="%windir%\Microsoft.NET\Framework64\v2.0.50727\aspnet_filter.dll" enableCache="true" preCondition="runtimeVersionv2.0,bitness64" />  
        <filter name="ASP.Net_2.0.50727.0" path="%windir%\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll" enableCache="true" preCondition="runtimeVersionv2.0,bitness32" />  
        <filter name="ASP.Net_4.0_32bit" path="%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_filter.dll" enableCache="true" preCondition="runtimeVersionv4.0,bitness32" />  
        <filter name="ASP.Net_4.0_64bit" path="%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_filter.dll" enableCache="true" preCondition="runtimeVersionv4.0,bitness64" />  
    </isapiFilters>  

    <odbcLogging />  

    <security>  

        <access sslFlags="None" />  

        <applicationDependencies />  

        <authentication>  

            <anonymousAuthentication enabled="true" userName="IUSR" />  

            <basicAuthentication enabled="false" />  

            <clientCertificateMappingAuthentication />  

            <digestAuthentication />  

            <iisClientCertificateMappingAuthentication />  

            <windowsAuthentication enabled="false" authPersistNonNTLM="true">  
                <providers>  
                    <add value="Negotiate" />  
                    <add value="NTLM" />  
                </providers>  
            </windowsAuthentication>  

        </authentication>  

        <authorization />  

        <ipSecurity />  

        <isapiCgiRestriction>  
            <add path="%windir%\Microsoft.NET\Framework64\v2.0.50727\aspnet_isapi.dll" allowed="true" groupId="ASP.NET v2.0.50727" description="ASP.NET v2.0.50727" />  
            <add path="%windir%\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll" allowed="true" groupId="ASP.NET v2.0.50727" description="ASP.NET v2.0.50727" />  
            <add path="%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_isapi.dll" allowed="true" groupId="ASP.NET v4.0.30319" description="ASP.NET v4.0.30319" />  
            <add path="%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_isapi.dll" allowed="true" groupId="ASP.NET v4.0.30319" description="ASP.NET v4.0.30319" />  
        </isapiCgiRestriction>  

        <requestFiltering>  
            <fileExtensions allowUnlisted="true" applyToWebDAV="true">  
                <add fileExtension=".asax" allowed="false" />  
                <add fileExtension=".ascx" allowed="false" />  
                <add fileExtension=".master" allowed="false" />  
                <add fileExtension=".skin" allowed="false" />  
                <add fileExtension=".browser" allowed="false" />  
                <add fileExtension=".sitemap" allowed="false" />  
                <add fileExtension=".config" allowed="false" />  
                <add fileExtension=".cs" allowed="false" />  
                <add fileExtension=".csproj" allowed="false" />  
                <add fileExtension=".vb" allowed="false" />  
                <add fileExtension=".vbproj" allowed="false" />  
                <add fileExtension=".webinfo" allowed="false" />  
                <add fileExtension=".licx" allowed="false" />  
                <add fileExtension=".resx" allowed="false" />  
                <add fileExtension=".resources" allowed="false" />  
                <add fileExtension=".mdb" allowed="false" />  
                <add fileExtension=".vjsproj" allowed="false" />  
                <add fileExtension=".java" allowed="false" />  
                <add fileExtension=".jsl" allowed="false" />  
                <add fileExtension=".ldb" allowed="false" />  
                <add fileExtension=".dsdgm" allowed="false" />  
                <add fileExtension=".ssdgm" allowed="false" />  
                <add fileExtension=".lsad" allowed="false" />  
                <add fileExtension=".ssmap" allowed="false" />  
                <add fileExtension=".cd" allowed="false" />  
                <add fileExtension=".dsprototype" allowed="false" />  
                <add fileExtension=".lsaprototype" allowed="false" />  
                <add fileExtension=".sdm" allowed="false" />  
                <add fileExtension=".sdmDocument" allowed="false" />  
                <add fileExtension=".mdf" allowed="false" />  
                <add fileExtension=".ldf" allowed="false" />  
                <add fileExtension=".ad" allowed="false" />  
                <add fileExtension=".dd" allowed="false" />  
                <add fileExtension=".ldd" allowed="false" />  
                <add fileExtension=".sd" allowed="false" />  
                <add fileExtension=".adprototype" allowed="false" />  
                <add fileExtension=".lddprototype" allowed="false" />  
                <add fileExtension=".exclude" allowed="false" />  
                <add fileExtension=".refresh" allowed="false" />  
                <add fileExtension=".compiled" allowed="false" />  
                <add fileExtension=".msgx" allowed="false" />  
                <add fileExtension=".vsdisco" allowed="false" />  
                <add fileExtension=".rules" allowed="false" />  
            </fileExtensions>  
            <verbs allowUnlisted="true" applyToWebDAV="true" />  
            <hiddenSegments applyToWebDAV="true">  
                <add segment="web.config" />  
                <add segment="bin" />  
                <add segment="App_code" />  
                <add segment="App_GlobalResources" />  
                <add segment="App_LocalResources" />  
                <add segment="App_WebReferences" />  
                <add segment="App_Data" />  
                <add segment="App_Browsers" />  
            </hiddenSegments>  
        </requestFiltering>  

    </security>  

    <serverRuntime />  

    <serverSideInclude />  

    <staticContent lockAttributes="isDocFooterFileName">  
        <mimeMap fileExtension=".323" mimeType="text/h323" />  
        <mimeMap fileExtension=".3g2" mimeType="video/3gpp2" />  
        <mimeMap fileExtension=".3gp2" mimeType="video/3gpp2" />  
        <mimeMap fileExtension=".3gp" mimeType="video/3gpp" />  
        <mimeMap fileExtension=".3gpp" mimeType="video/3gpp" />  
        <mimeMap fileExtension=".aaf" mimeType="application/octet-stream" />  
        <mimeMap fileExtension=".aac" mimeType="audio/aac" />  
        <mimeMap fileExtension=".aca" mimeType="application/octet-stream" />  
        <mimeMap fileExtension=".accdb" mimeType="application/msaccess" />  
        <mimeMap fileExtension=".accde" mimeType="application/msaccess" />  
        <mimeMap fileExtension=".accdt" mimeType="application/msaccess" />  
        <mimeMap fileExtension=".acx" mimeType="application/internet-property-stream" />  
        <mimeMap fileExtension=".adt" mimeType="audio/vnd.dlna.adts" />  
        <mimeMap fileExtension=".adts" mimeType="audio/vnd.dlna.adts" />  
        <mimeMap fileExtension=".afm" mimeType="application/octet-stream" />  
        <mimeMap fileExtension=".ai" mimeType="application/postscript" />  
        <mimeMap fileExtension=".aif" mimeType="audio/x-aiff" />  
        <mimeMap fileExtension=".aifc" mimeType="audio/aiff" />  
        <mimeMap fileExtension=".aiff" mimeType="audio/aiff" />  
        <mimeMap fileExtension=".appcache" mimeType="text/cache-manifest" />  
        <mimeMap fileExtension=".application" mimeType="application/x-ms-application" />  
        <mimeMap fileExtension=".art" mimeType="image/x-jg" />  
        <mimeMap fileExtension=".asd" mimeType="application/octet-stream" />  
        <mimeMap fileExtension=".asf" mimeType="video/x-ms-asf" />  
        <mimeMap fileExtension=".asi" mimeType="application/octet-stream" />  
        <mimeMap fileExtension=".asm" mimeType="text/plain" />  
        <mimeMap fileExtension=".asr" mimeType="video/x-ms-asf" />  
        <mimeMap fileExtension=".asx" mimeType="video/x-ms-asf" />  
        <mimeMap fileExtension=".atom" mimeType="application/atom+xml" />  
        <mimeMap fileExtension=".au" mimeType="audio/basic" />  
        <mimeMap fileExtension=".avi" mimeType="video/avi" />  
        <mimeMap fileExtension=".axs" mimeType="application/olescript" />  
        <mimeMap fileExtension=".bas" mimeType="text/plain" />  
        <mimeMap fileExtension=".bcpio" mimeType="application/x-bcpio" />  
        <mimeMap fileExtension=".bin" mimeType="application/octet-stream" />  
        <mimeMap fileExtension=".bmp" mimeType="image/bmp" />  
        <mimeMap fileExtension=".c" mimeType="text/plain" />  
        <mimeMap fileExtension=".cab" mimeType="application/vnd.ms-cab-compressed" />  
        <mimeMap fileExtension=".calx" mimeType="application/vnd.ms-office.calx" />  
        <mimeMap fileExtension=".cat" mimeType="application/vnd.ms-pki.seccat" />  
        <mimeMap fileExtension=".cdf" mimeType="application/x-cdf" />  
        <mimeMap fileExtension=".chm" mimeType="application/octet-stream" />  
        <mimeMap fileExtension=".class" mimeType="application/x-java-applet" />  
        <mimeMap fileExtension=".clp" mimeType="application/x-msclip" />  
        <mimeMap fileExtension=".cmx" mimeType="image/x-cmx" />  
        <mimeMap fileExtension=".cnf" mimeType="text/plain" />  
        <mimeMap fileExtension=".cod" mimeType="image/cis-cod" />  
        <mimeMap fileExtension=".cpio" mimeType="application/x-cpio" />  
        <mimeMap fileExtension=".cpp" mimeType="text/plain" />  
        <mimeMap fileExtension=".crd" mimeType="application/x-mscardfile" />  
        <mimeMap fileExtension=".crl" mimeType="application/pkix-crl" />  
        <mimeMap fileExtension=".crt" mimeType="application/x-x509-ca-cert" />  
        <mimeMap fileExtension=".csh" mimeType="application/x-csh" />  
        <mimeMap fileExtension=".css" mimeType="text/css" />  
        <mimeMap fileExtension=".csv" mimeType="application/octet-stream" />  
        <mimeMap fileExtension=".cur" mimeType="application/octet-stream" />  
        <mimeMap fileExtension=".dcr" mimeType="application/x-director" />  
        <mimeMap fileExtension=".deploy" mimeType="application/octet-stream" />  
        <mimeMap fileExtension=".der" mimeType="application/x-x509-ca-cert" />  
        <mimeMap fileExtension=".dib" mimeType="image/bmp" />  
        <mimeMap fileExtension=".dir" mimeType="application/x-director" />  
        <mimeMap fileExtension=".disco" mimeType="text/xml" />  
        <mimeMap fileExtension=".dll" mimeType="application/x-msdownload" />  
        <mimeMap fileExtension=".dll.config" mimeType="text/xml" />  
        <mimeMap fileExtension=".dlm" mimeType="text/dlm" />  
        <mimeMap fileExtension=".doc" mimeType="application/msword" />  
        <mimeMap fileExtension=".docm" mimeType="application/vnd.ms-word.document.macroEnabled.12" />  
        <mimeMap fileExtension=".docx" mimeType="application/vnd.openxmlformats-officedocument.wordprocessingml.document" />  
        <mimeMap fileExtension=".dot" mimeType="application/msword" />  
        <mimeMap fileExtension=".dotm" mimeType="application/vnd.ms-word.template.macroEnabled.12" />  
        <mimeMap fileExtension=".dotx" mimeType="application/vnd.openxmlformats-officedocument.wordprocessingml.template" />  
        <mimeMap fileExtension=".dsp" mimeType="application/octet-stream" />  
        <mimeMap fileExtension=".dtd" mimeType="text/xml" />  
        <mimeMap fileExtension=".dvi" mimeType="application/x-dvi" />  
        <mimeMap fileExtension=".dvr-ms" mimeType="video/x-ms-dvr" />  
        <mimeMap fileExtension=".dwf" mimeType="drawi

Answer 5

For what it's worth, I'll offer up some thoughts based on my IIS experience.

Let's start by doing what I'll call a "level set" because at this point, it's not clear to me what problem you are trying to solve. Please correct me where I am wrong and help all of us to understand your environment.

You have one server, correct? How many IP addresses does it have? Do you have 2 IP addresses, one for your local intranet and one that is exposed to the internet? Or do you just have one IP and internet based machines access the server thru a reverse proxy/firewall/NAT?

How many web sites are involved with this issue? In your image you show www.obama.com, but in the config it shows www.obama.work in the bindings. Both show an http binding for 20.0.0.8, so something can't be right.

What are you trying to accomplish with www.obama.com and www.obama.work? If you are using HTTPS, you will need a certificate that matches the web site address. I think it would make more sense to use a generic certificate (*.obama.com) and use a web address of https://work.obama.com that would also process https://www.obama.com requests. Assuming that you want to have one web site process all of the requests.

If www.obama.com on every machine on the planet resolves to the same IP address, then everything should work as long as they have internet access. The machines on your private intranet will have an extra network hop because they won't go directly to the server, the network traffic will need to be routed out to the internet, and then back to your server.

You could eliminate that extra network hop on your private network machines by having www.obama.com resolve to the IP that your server uses for the intranet. That would also fix the problem where you have private network machines that do not have internet access. That would be the DNS split-brain solution that Dave posted. (Instead of creating a HOSTS file entry on every internal device.)

If you have 2 different web sites, one for external users that reference www.obama.com and another site for internal users who access www.obama.work, and you have 2 different certificates for each site, then that should work.