IP Addresses

[Mike Hildner]

Not sure if this is exactly ASP.NET, but that's the technology I'm using.

Just got handed a project, one of the requirements is that I verify the IP address of the user against a table of possible addresses. This I can do with SERVER_ADDR, but, I don't think that's exactly what they mean.

For example, if the client site dials an ISP, it could be a range of addresses. I think they expect that only certain machines on their site can access my web site. Someone told me it could "NAT out" to their address, but unsure how to do this this or if it's even really feasible.

Anyone know what I'm talking about and have any suggestions? Can I really tell their original location, or is that hidden from me? If so, I'll be happy telling them that I can only see the IP address as revealed to me, but would just like to know if it's possible to "drill down".

Thanks,
Mike

[Danial]

You cant do much about that, if a user is accessing the internet from a network you will only see their router IP adress the one they are connected throug. The client machine have their own internal IP adress which is kind of useless to you anyway. So the answer is no.

As for dyanamic IP well in most cases IP checks are done so no one from outside a network/domain can acess the site from extranal location. In this case you need to check if the IP range matches if not deny access.

Even if you knew the IP adress of those users on the network there are ways you can hide your actual IP easily. So only fool proof way is to allow known IP adress acess to your site.

Hope this helps.

[Mike Hildner]

Thanks for the clarification, kinda what I thought. Things like this is what happens when the sales guy goes and sells without checking with anybody. I guess on the client's end, the network admin could disallow access to a certain site, which is what he promised.

This same sales guy put in the contract "...we'll be hosting the site so we needs funds for an Exchange server". Hmm.

[Danial]

I guess on the client's end, the network admin could disallow access to a certain site, which is what he promised.

Simplay have a way where the admin can specify specific IP adress or range of IP adress which can/can not access the site. Admin can add delete this list as he wish. I use this approach for this similar requirements.. Then simply check if those IP adress before allowing disallowing users access to the site..