Restricting access to a website by IP address range / domain
        Posted  
        
            by test
        on Stack Overflow
        
        See other posts from Stack Overflow
        
            or by test
        
        
        
        Published on 2009-10-09T16:46:28Z
        Indexed on 
            2010/03/24
            16:03 UTC
        
        
        Read the original article
        Hit count: 291
        
Hi,
I would like advice on the best way to restrict access to a weba pplication (using .net 2.0 and II6) based on the clients IP address. The two ways I am considering:
1) Through the server side code - check the client I.P against a list of IP addresses within the web.config.
2) Through IIS by creating a virtual directory and restricting the I.P addresses on this virtual directory.
My question is if I go the virtual directory route there are a lot of users that access this website and I have read reverse domain lookups made during each client request can be very expensive on server resources. How much of a risj is this?
Any other suggestions /ideas to doing this would be much appreciated
Thanks advance,
© Stack Overflow or respective owner