Security :: Limit Access Based On Source IP Address Oin IIS?
May 31, 2010
I created a website and i restrired the website such a way that i can be acessed from a IP i configured.I did this as shown in below steps which i got from:
http://support.microsoft.com/kb/324274
Under IP Address and Domain Name Restrictions, click Edit.
Do one of the following:To deny access, click Granted Access, and then click Add. In the Deny Access On dialog box that appears, specify the option that you want, and then click OK.The computer, group of computers, or domain that you specified is added to the list.
To grant access, click Denied Access, and then click Add. In the Grant Access On dialog box that appears, select the option that you want, and then click OK.
The computer, group of computers, or domain that you selected is added to the list. Click OK.
But its not working . I am able to browse from other machine which have a different ohter IP. Do i have to configure somewhere else ?
View 3 Replies
Similar Messages:
Dec 10, 2010
For some reason, I changed something today while installing an instance of SQL Server. And now if I try to use the i.p. address of the machine instead of the name of the machine in DATASource of my sqlconnection string, I get an error. It worked fine before.Also, what exactly is "networkService" as an option for security when creating an instance of SQl Server?
View 3 Replies
May 19, 2010
In one online application, like online exam, If two users are on same IP address series then I need to generate questions that are completely different.
I am having no idea what approach should I follow.
View 1 Replies
May 6, 2010
I know I can use [assembly: FileIOPermission(SecurityAction.RequestRefuse, Unrestricted = true)] to limit user to access disk files, now I hope to limit user to access database and web.config file, how can I do?
View 2 Replies
Feb 5, 2010
I am unsure how to go about my task. I need to get the email property from asp.net's profile class.
I am loading a formview based on username stored in an sql table. I want to get the email address from the users profile based on the matching username fields
In pseudo code:
Get profile.emailaddress where username.text = profile.username
View 2 Replies
Mar 9, 2010
I have an application where in the User Authentication is from the AD useing Directory services.
If i type in the address of a valid page from the application into the Address Bar, it throws me to the Login Page.
However if i am logged in and i type in the address of a valid webpage, the application takes me to the page. Is there any way that this can be restricted.
If i type in the URL into the address bar the application should throw me to the Home page of the application.
View 1 Replies
Oct 27, 2010
I have implemented role based security in my asp.net 2.0 vb.net application using windows authentication and the windowstokenroleprovider and limiting access to certain pages using the location tag to specific active directory groups.
The issue is that when a user tries to access a page they are not authorized to view it brings up a login prompt and when it does not pass it takes them to the default page that tells them they are not authorized to view the page. I am wondering if there is a way to throw up a custom page that tells them they are not athorized to view the page that I can incorporate into the site itself with the header and so forth? if this page could come up in lieu of the sign in box popping up as well.
View 2 Replies
Apr 24, 2010
[ASP.NET 3.5, FormsAuthentication, SQL Server]
In the Roles table there is Role, and RoleType.
I have 3different roles, 2 of which have sub-roles.
Example
Role----------------------Type
Adminstrator
Subscriber---Basic
Subscriber---Business
I need to implement Code Access Security, and URL based security using the roles & types...
For instance, the (Subscriber/Basic) would need to view a different set of pages, and have different access to things then a (Subscriber/Business).
I think I can handle the Code Access security with a custom attribute, but I am unsure to how enforce a User be apart of 2 roles in the URL Authorization.
I am currently using the web.config to deny/allow access to the directories/pages.
e.g.
/Areas/Admin/web.config
[Code]....
Is it possible to force the user to be apart of 2 roles with this technique?
View 1 Replies
May 19, 2010
I am new to developing asp.net. I have a Microsoft Access database file (.mdb) I am including as a data source on a form. This populates a drop down list on the page. When I run the page in a browser it immediately asks for authentication. If I put in my windows username and password the page pulls up fine, and the drop down is populated with the data. If I don't, it just give me a 403 error and says I'm not authorized. I cannot figure out how to make this page stop requiring authentication. I have only tried one thing. In the web.config file there is an attribute called authentication. It was set to "Windows" I tried setting it to "None" but that did not appear to have any effect. It still asked for my username and password. How can I make an asp web page using a Microsoft Access data source not reqire user authentication to view the web page?
View 1 Replies
Jun 9, 2010
I am using MailAddressCollection object to send the mail for multiple email addresses through SMTP.
How many emails address can be use in BCC and CC field, to send the mail ?
View 2 Replies
Jun 26, 2010
i am working in asp.net and csharp, we have 10 user, but certain user only need to put dataentry. how to enable and disable based on the user to access certain form ,like add, modify view options.
View 1 Replies
Jan 28, 2010
The extent of my ability is in vba and asp. I'm interested in consuming a SOAP web service from Excel or Access, mostly because it's easier for me. I've also got the wsdls for the web service which is using ws-security. Is this even possible? From what I've read, .net is my logical option, but there's obviously a gap in my skill.
View 1 Replies
Mar 12, 2010
I have several pages or views in my application which are essentially the same for both authenticated users and anonymous users. I'd like to limit the insert/update/delete actions in formviews and gridviews to authenticated users only, and allow read access for both authed and anon users.
I'm using the asp.net configuration system for handling authentication and roles. This system limits access based on path so I've been creating duplicate pages for authed and anon paths.The solution that comes to mind immediately is to check roles in the appropriate event handlers, limiting what possible actions are displayed (insert/update/delete buttons) and also limiting what actions are performed (for users that may know how to perform an action in the absence of a button.) However, this solution doesn't eliminate duplication - I'd be duplicating security code on a series of pages rather than duplicating pages and limiting access based on path; the latter would be significantly less complicated.I could always build some controls that offered role-based configuration, but I don't think I have time for that kind of commitment right now.Is there a relatively easy way to do this (do such controls exist?) or should I just stick to path-based access and duplicate pages?
Does it even make sense to use two methods of authorization? There are still some pages which are strictly for either role so I'll be making use of path-based authorization anyway.Finally, would using something other than path-based authorization be contrary to typical asp.net design practices, at least in the context of using the asp.net configuration system?
View 3 Replies
Mar 26, 2010
I have a detailsview form which passes data to a sql database. What I'd like to do is present a message when the number of rows in the destination table exceeds a specified number (40) or redirect the user to another page.
View 1 Replies
Jun 18, 2010
Basically I want to take the following:And make it match the styling of the rest of the application.I am creating a custom error page in my C# based project and I want it to be able to show the same information that is displayed in the ASP.NET default error page. From fiddling with reflector I can see that this is generated through HttpException.GetHtmlErrorMessage() but when I try to use this in my exception it returns null.
View 3 Replies
Apr 30, 2010
I'm sure it was discussed hundred of times, but maybe this time will elucidate some new points )
The question is: do I need to limit number of selected rows in data source for GridView?
When I use paging in GridView does limiting selected rows make GridView work faster?
Now I use ObjectDataSource with Linq in functions.
[Code]....
Does this make sense or I can just use LinqDataSource without thinking of selected rows?
View 2 Replies
Sep 6, 2010
I have created a backend that allows me to update my site content. I am using fckeditor to pull the data from my table in the database. The problem I am having is this: i need to create paging of content so that when the height restriction is met a next btn or numbering system displays to allow the user to click to the next page of content.
View 3 Replies
Jan 21, 2010
This is a corporate site so Private. We want to limit access by IP address to USA/Canada or North America. Based on IP range, would allow user/pwd to get in otherwise -'no access'. Just trying to limit hack exposure from anything overseas.
View 3 Replies
Feb 2, 2010
I need to redirect some users based on their ip address to specific page else they would be redirected to another page my code is as below.
string myIP = HttpContext.Current.Request.UserHostAddress.ToString();
switch(myIP)
{ [code]....
View 2 Replies
Jul 12, 2011
I have a simple intranet site. It has a role based authorization in the web.config file.
Any user's in a specific role called as "Apr-Sales-Writers" will be authorized to use those pages. If not, they will not be authorized. So far so good. Works fine. But we added additional functionality where a new active directory group (means new role) has to be added and user's belonging to this new AD group should be given access to only specific .aspx pages on the intranet site. I am using a web.sitemap and it looks like this.
If the user's belong to say AD group "Apr-Sales-Writers", they should access only default.aspx and salesData.aspx pages. User's belonging to new AD group (which I did not include in the web.config file below), should have access to other .aspx pages.
[CODE]<?xml version="1.0" encoding="utf-8" ?>
<siteMap xmlns="http://schemas.microsoft.com/AspNet/SiteMap-File-1.0" >
<siteMapNode url="default.aspx" title="Home" description="Home">
<siteMapNode title="sales Data" description="sales Data">
<siteMapNode url="salesData.aspx" title="sales Data" description="sales Data" />
[Code] ....
View 7 Replies
Nov 9, 2010
Is it possible to programmatically set the session timeout for a user-session based on the user's IP address?
Example: if IP address is in the range of 192.0.X then set session timeout to 6 hours. Otherwise, leave at default set in web.config (or set to 30 minutes).
Presumably this would be done in Global.asax:Session_Start. For now I would be ok with just using the IP address of the user's first request in a session (allowing for the fact that a user could change IP addresses mid-session).
ASP.net 3.5, IIS 7
View 3 Replies
Aug 26, 2010
I am looking into making a voting system for an event.
I would like to base the voting system off of MAC addresses. I would like to get the voters mac address, check to see if they have voted within the last 5 minutes, if they have not, let them vote and add their mac address and current date-time to a table as a record. If they have voted within the last 5 minutes, i would then inform them and tell them to try again later. If it has been longer then 5 minutes, i would clear their record from the database, let them vote and add a new record with their mac address and date-time.
The problem with using IP, is that most of the people voting will be on the same network (large organization) and i believe the ip the website would pickup would be the same.
View 1 Replies
Feb 12, 2011
How to find geolocation details based on IP Address for visitor details?
View 2 Replies
Oct 21, 2010
I am makiing a web application and this application will run only in LAN enviorement.what i want to do is-
there is a textbox and a button start. in this textbox i want to give IP address and on button click i want to run a exe on the particluer system ( ip given). and on stop click i want to stop the exe.
View 5 Replies
Jan 23, 2011
how do I write a regular expression to filter out email adresses in asp.net mvc? I would like in example to allow users registering email adresses only if coming from [URL] domain.
View 1 Replies
