Restricting access to a website by IP address range / domain

Posted by test on Stack Overflow See other posts from Stack Overflow or by test
Published on 2009-10-09T16:46:28Z Indexed on 2010/03/24 16:03 UTC
Read the original article Hit count: 218

Filed under:
|
|
|
|

Hi,

I would like advice on the best way to restrict access to a weba pplication (using .net 2.0 and II6) based on the clients IP address. The two ways I am considering:

1) Through the server side code - check the client I.P against a list of IP addresses within the web.config.

2) Through IIS by creating a virtual directory and restricting the I.P addresses on this virtual directory.

My question is if I go the virtual directory route there are a lot of users that access this website and I have read reverse domain lookups made during each client request can be very expensive on server resources. How much of a risj is this?

Any other suggestions /ideas to doing this would be much appreciated

Thanks advance,

© Stack Overflow or respective owner

Related posts about iis6

Related posts about .NET