Solved

Block access to URL

Posted on 2006-06-12
6
257 Views
Last Modified: 2010-04-07
We need to build a web application that another company will use.  They will link to the site directly from their own intranet.  What I want to know is if there is a way that our web site can confirm that the user is coming from their intranet and not typing the url directly into a browser?  I am exploring this to see if there is a way to not let users access the site unless they are originating from their company intranet. (Only one company will be using the site.)  Thanks.
0
Comment
Question by:snyperj
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 8

Accepted Solution

by:
radnor earned 250 total points
ID: 16885393
Can you block everyone except them via the .htaccess file?

http://www.javascriptkit.com/howto/htaccess5.shtml
0
 
LVL 33

Expert Comment

by:shalomc
ID: 16886245
As far as your web site is concerned, their intranet is a network having very specific IP addresses.
Your web application, regardless of the technology involved, can be configured to accept incoming requests only from the allowed IP.
Check with your customer's IT and networking people what is their IP.
The actual implementation you have to do depends on your environment: IIS? Apache? virtual hosting?


ShalomC
0
 

Author Comment

by:snyperj
ID: 16886381
Thanks for the info.  Our web server uses IIS, in a nutshell, what will that mean for implementation?  (I won't be doing the work but would like to be able to speak "somewhat" intelligently in meetings as to what needs to happen to satisfy this concern.)

Thanks again..
0
Don't Cry: How Liquid Web is Ensuring Security

WannaCry is just the start. Read how Liquid Web is protecting itself and its customers against new threats.

 
LVL 8

Expert Comment

by:radnor
ID: 16886415
Limiting Access by IP Address
http://support.microsoft.com/kb/324064/EN-US
0
 
LVL 8

Expert Comment

by:radnor
ID: 16886424
Limiting Access by IP Address
The .Htaccess file uses the Order, Allow, and Deny directives to limit access by Internet Protocol (IP) address or domain name.

To limit access according to IP address or domain name in IIS:
1.      Right-click the folder, the existing file, or the Web site, and then click Properties.
2.      Click either File Security or Directory Security.
3.      Click Edit in the IP Address and Domain Name restrictions section.
0
 
LVL 33

Assisted Solution

by:shalomc
shalomc earned 250 total points
ID: 16886619
I'd like to suggest another level of security.
1. Configure your firewall to allow inbound requests to your web application on  ports 80 and 443 ONLY to the customer.
2. Create a VPN between you and your customer.
3. Place a leased line between you and your customer. Today frame relay does not cost that much..

ShalomC
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When deciding to adopt any help desk solutions many factors should be explored before taking decisions. This will change from business to another but in general there are some kind of rule of thumb. Here are some quick tips: Do we need only ticket…
Turn A Profile Picture Into A Cartoon Using Photoshop And Illustrator This tutorial will teach you how to make a cartoon style image out of a regular picture. I have tried to keep the tutorial as simple as possible. I used Adobe CS4 for this tuto…
The purpose of this video is to demonstrate how to reset a WordPress password if you are locked out and cannot reset the password. A typical use would be if you cannot access the email to which WordPress would send the password recovery email to…
The purpose of this video is to demonstrate how to integrate Mailchimp with WordPress, by placing a Mailchimp signup form on a WordPress Page or Post. This will be demonstrated using a Windows 8 PC. Mailchimp will be used. Log into your Mailchi…

690 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question