can you limit access to your IIS server according to MAC address and IP address? is it different for each version of IIS? if so, which versions are capable of doing this?

With server editions of IIS you have the ability to restrict access by IP, but not with workstation versions. It seems to me you'd be better off letting your firewall do this kind of restriction.