This is my web.config which has some tags for blocking Ipaddress
...
Try this outside System.Webserver tag