CODEWITHSUNDEEP
authenticationiis-7windows-server-2008mac-address
Richard Gale
Richard Gale

Reputation: 1952

IIS7 Restrict website access by MAC address?

Is it possible to restrict access to a website in IIS7 using MAC address rather than IP address?

We are wanting to restrict access to our website to only known PCs as mentioned here: link text. These PCs will be external to our network, but because some users could be remote, we would rather do this on MAC address rather than IP address.

II7, Windows Server 2008, asp.net

Thankyou in advance

Richard

Upvotes: 1

Views: 11380

Answers (4)

Joel Etherton
Joel Etherton

Reputation: 37543

The ISAPI extensions will not provide access to network layer information from the client end. This information has to be polled directly from the other end. Also MAC address is extremely unreliable as it can be spoofed more easily than an IP address can be.

Upvotes: 0

Svisstack
Svisstack

Reputation: 16656

You can't restrict access by MAC address because MAC address is using only in local network to communicate devices and behind any router information about ARP table can't be recognited.

Upvotes: 3

Brian
Brian

Reputation: 4984

It's not possible. You'd have to have some kind of application installed on the client machine such as an ActiveX control to get that information.

Perhaps you should consider having the website setup like an intranet and setup a VPN for the remote viewers. Look at Logmein's Hamachi. It's a super simple VPN setup and free to try.

Upvotes: 0

Mad Scientist
Mad Scientist

Reputation: 18550

That is a bad idea because MAC addresses can easily be spoofed. If you need authentication from multiple unknown locations you should use passwords or certificates.

And of course, as mentioned in another answer, over the Internet the MAC adress is not visible, it would only be possible inside your own network.

Upvotes: 1

Related Questions