CODEWITHSUNDEEP
asp.netsecuritynetwork-programmingwindows-server-2008windows-server-2003
Mohamed Kamal
Mohamed Kamal

Reputation: 2352

is there a way to programmatically prevent certain mac address from accessing my web application

i am using windows server 2003 and 2008

i am about to install a web application on a server that is connected to other computers using simple wired network i.e. no active directory, no domain controller etc..

my question is:

is there a way to prevent mac addresses outside my specified list from accessing my application ? should it be through IIS or Web.config or should i put certain code in the page load events.

another concern: if i use an SSL to secure my application, is it enough along with a reputable anti virus to prevent a virus to access my server through any network computer using my web application

Upvotes: 1

Views: 1656

Answers (3)

statmaster
statmaster

Reputation: 1219

the simplest way to secure a network (also minimum requirement, else considered non-secure network)

1-get CISCO switches and router or (multilayer switch)

2-change native VLAN then create and configure VLANs for example 10, 20, 30 and put ranges of IP for each VLAN

3-enable port security: set max number of mac addresses and enable MAC address "sticky"

4-configure routing protocol to allow switches to "talk" to each other

good luck

Upvotes: 1

awj
awj

Reputation: 7959

I don't think this is possible.

If you visualise the route from the client to your server; along this route there are 'hops', i.e., routers and switches which route the client's request down one of multiple paths.

At each hop a different MAC address is inserted into the packet - this is the MAC address of the next hop on the route.

So although the IP address always stays the same throughout the entire route (hence you can use the server variables or such like to determine the client's IP address) the MAC that you receive at the server after the final hop is actually the MAC address of the last networking device that the request was directed through.

The only way you'd be able to accurately use this MAC address for some sort of access control is if you had no routing or switching hardware between you and all the clients.

Upvotes: 5

n8wrl
n8wrl

Reputation: 19765

What if routing is involved - the MAC address you'd like to exclude is on another network? In that case you'll never see the MAC address. Using IIS you CAN filter specific IP addresses.

Upvotes: 4

Related Questions