asp.net - IP address accessing protected folder -
is possible unallowed ip address access protected area using "ipv4 address , domain restriction" ?
i have protected subdomain on server allow few ip addresses access , alert me through email after every successful visit, got email alerting me unlisted ip address have visited protected folder.is possible?
it depends on how ip address of client. example if 1 of client come behind proxy or load balancer, client's requets contain x-forwarded-for in http header. if asp.net codes gets information instead of real ip address can lead bypass ip protection. in order sure impact application must sure way of grabbing ip address of user.
you see details of trying explain. how pass http_x_forwarded_for aspx pages iis
in conclusion, frameworks or method can return x-forwarded-for or similar header variables instead of real ip address. need sure these mechanism.
Comments
Post a Comment