如何在ASP.NET中识别用户是否在我的网络内部或外部

时间:2013-07-29 14:04:59

标签: c# asp.net security

我必须确定访问是来自我的本地网络(我的服务器的同一网络)还是来自互联网。 (使用ASP.NET)

我打算创建一个额外的安全性。我的意思是,如果访问来自外部,我将“仅允许”特定用户。

我试图在网上搜索,但我一无所获。

提前致谢。

1 个答案:

答案 0 :(得分:0)

你可以做这样的事情(虚拟代码)

  private bool IsInSameSubnet(IPAddress address, IPAddress address2, IPAddress subnetMask) {
            bool isInSameSubnet = false;
            IPAddress network1 = GetNetworkAddress(address, subnetMask);
            IPAddress network2 = GetNetworkAddress(address2, subnetMask);
            if (network1 != null && network2 != null) {
                isInSameSubnet = network1.Equals(network2);
            }
            return isInSameSubnet;
        }
    private IPAddress GetNetworkAddress(IPAddress address, IPAddress subnetMask) {

        byte[] ipAdressBytes = address.GetAddressBytes();
        byte[] subnetMaskBytes = subnetMask.GetAddressBytes();

        if (ipAdressBytes.Length != subnetMaskBytes.Length)
            return null;
        //throw new ArgumentException("Lengths of IP address and subnet mask do not match.");

        byte[] broadcastAddress = new byte[ipAdressBytes.Length];
        for (int i = 0; i < broadcastAddress.Length; i++) {
            broadcastAddress[i] = (byte)(ipAdressBytes[i] & (subnetMaskBytes[i]));
        }
        return new IPAddress(broadcastAddress);
    }

其中IsInSameSubnet地址检查它是否在同一网络中

示例:

string computerIP = getIP();

            IPAddress ip1 = IPAddress.Parse(computerIP);
            IPAddress ip2 = IPAddress.Parse("192.168.0.0");
            IPAddress subnetMask = IPAddress.Parse("255.255.0.0");

getIp方法

 public static string getIP() {
            //if user behind proxy this should get it
            string ip = HttpContext.Current.Request.ServerVariables["HTTP_X_FORWARDED_FOR"];
            if (ip != null && ip.Split(',').Count() > 1) {
                //if (ip.Split(',').Count() > 1)
                ip = ip.Split(',')[0];
            }

            //if user not behind proxy this should do it
            if (ip == null)
                ip = HttpContext.Current.Request.ServerVariables["REMOTE_ADDR"];
            return ip;
        }