Solved

Block access to URL

Posted on 2006-06-12
6
253 Views
Last Modified: 2010-04-07
We need to build a web application that another company will use.  They will link to the site directly from their own intranet.  What I want to know is if there is a way that our web site can confirm that the user is coming from their intranet and not typing the url directly into a browser?  I am exploring this to see if there is a way to not let users access the site unless they are originating from their company intranet. (Only one company will be using the site.)  Thanks.
0
Comment
Question by:snyperj
  • 3
  • 2
6 Comments
 
LVL 8

Accepted Solution

by:
radnor earned 250 total points
ID: 16885393
Can you block everyone except them via the .htaccess file?

http://www.javascriptkit.com/howto/htaccess5.shtml
0
 
LVL 32

Expert Comment

by:shalomc
ID: 16886245
As far as your web site is concerned, their intranet is a network having very specific IP addresses.
Your web application, regardless of the technology involved, can be configured to accept incoming requests only from the allowed IP.
Check with your customer's IT and networking people what is their IP.
The actual implementation you have to do depends on your environment: IIS? Apache? virtual hosting?


ShalomC
0
 

Author Comment

by:snyperj
ID: 16886381
Thanks for the info.  Our web server uses IIS, in a nutshell, what will that mean for implementation?  (I won't be doing the work but would like to be able to speak "somewhat" intelligently in meetings as to what needs to happen to satisfy this concern.)

Thanks again..
0
What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 8

Expert Comment

by:radnor
ID: 16886415
Limiting Access by IP Address
http://support.microsoft.com/kb/324064/EN-US
0
 
LVL 8

Expert Comment

by:radnor
ID: 16886424
Limiting Access by IP Address
The .Htaccess file uses the Order, Allow, and Deny directives to limit access by Internet Protocol (IP) address or domain name.

To limit access according to IP address or domain name in IIS:
1.      Right-click the folder, the existing file, or the Web site, and then click Properties.
2.      Click either File Security or Directory Security.
3.      Click Edit in the IP Address and Domain Name restrictions section.
0
 
LVL 32

Assisted Solution

by:shalomc
shalomc earned 250 total points
ID: 16886619
I'd like to suggest another level of security.
1. Configure your firewall to allow inbound requests to your web application on  ports 80 and 443 ONLY to the customer.
2. Create a VPN between you and your customer.
3. Place a leased line between you and your customer. Today frame relay does not cost that much..

ShalomC
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Suggested Solutions

When deciding to adopt any help desk solutions many factors should be explored before taking decisions. This will change from business to another but in general there are some kind of rule of thumb. Here are some quick tips: Do we need only ticket…
When setting up new project requests for our site, one of the most powerful tools our team has available to use is Axure (http://www.axure.com/). It’s a tool for creating software and web prototypes that can function and interact as if it were the a…
The purpose of this video is to demonstrate how to create a Printer Friendly PDF on a WordPress Page. This will be demonstrated using a Windows 8 PC. Tools Used are Photoshop, Awesome Screenshot” Google Chrome Extension, and SmallPDF.com Log…
The purpose of this video is to demonstrate how to automatically show related posts at the bottom of a blog post in WordPress. This will be demonstrated using a Windows 8 PC. Plugin “Yet Another Related Posts Plugin” will be used. Go to your…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now