Programming Forums > Web Development and Design > PHP

zdb · Nov 20th, 2004, 4:52 AM

Quote:

Originally posted by tempest@Nov 19 2004, 12:49 AM
Add to top of all pages...

(Toggle Plain Text)

<?php * *include("ipCheck.php"); ?>

<?php * *include("ipCheck.php"); ?>

ipCheck.php

(Toggle Plain Text)

// * is random... you get the idea $ips = "192.168.1.*"; $access = 1; $rm = explode(".", $_SERVER['REMOTE_ADDR']); foreach(explode(".", $ips) as $col => $ip) { * *if($ip != "*") * * * *if($ip != $rm[$col]) $access = 0; } if(!$access) { * *header("HTTP/1.0 403 Not Authorized"); * *die(); }

// * is random... you get the idea $ips = "192.168.1.*"; $access = 1; $rm = explode(".", $_SERVER['REMOTE_ADDR']); foreach(explode(".", $ips) as $col => $ip) { * *if($ip != "*") * * * *if($ip != $rm[$col]) $access = 0; } if(!$access) { * *header("HTTP/1.0 403 Not Authorized"); * *die(); }

Could I not install a package that interacts with the server from the client's pc? Basically take over is browser and kill any sessions not processed by the sever first? Then I could use this code well!

zdb · Nov 20th, 2004, 4:55 AM

Quote:

Originally posted by Pizentios+Nov 18 2004, 04:35 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Pizentios @ Nov 18 2004, 04:35 PM)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin-zdb@Nov 18 2004, 04:45 AM
The main idea behind this IPTable firewall it to deny \ allow access to the network \ server from remote areas. We need to decline access to the network to a wireless access user that should not be able to use our server for the internet. Do you have a way that might help Pizentios?

Thanks

What about using public and private keys. Only problem with that is that thew users will have to have they're own public key on what ever computer that they want to use. [/b][/quote]
As in VeriSign public key on the server for each client? Could possibly work. I think this will have an impact on my bosses budget though.

Pizentios · Nov 22nd, 2004, 9:06 AM

you don't need to use Verisign public keys, you can make your own with the open source tools all around the net. If you are using Apache, you could install the mod_ssl and have a "free" (as in beer) way to make your pages secure. Here is a link to the mod_ssl webpage. Check it out and see if this is what you need.

zdb · Nov 23rd, 2004, 3:52 AM

Quote:

Originally posted by Pizentios@Nov 22 2004, 03:06 PM
you don't need to use Verisign public keys, you can make your own with the open source tools all around the net. If you are using Apache, you could install the mod_ssl and have a "free" (as in beer) way to make your pages secure. Here is a link to the mod_ssl webpage. Check it out and see if this is what you need.

Thanks for the link, I will check it out.
Right, I did some work over the weekend and found a way to manipulate traffic from a single IP address so that is redirects to another server using PREROUTING. This I could use!
The only thing I am still battling with is the fact that my routing does not seem to reach it's final destination (which is a Windows 2003 server) but at least the client can't get into the actual server (with that IP address at least!).

Do you know about any strange issues regarding routing to a Windows server. I am using the IPTables command in Fedora 2 with only defining the "route-to" IP address and no additional params like "this is a windows server, be careful".

Thanks :rock:

Pizentios · Nov 23rd, 2004, 8:47 AM

As far as i know, there should be no problem routing to a windows box witha IPtables firewall. However there might be somthing wrong on the windows box that is preventing traffic coming from that box....or somthing. A quick run down of your settings might turn up somthing.

Nov 22nd, 2004, 9:06 AM	#13
Pizentios Programming Guru Join Date: May 2004 Location: Brandon, Manitoba, Canada Posts: 2,023 Rep Power: 7	you don't need to use Verisign public keys, you can make your own with the open source tools all around the net. If you are using Apache, you could install the mod_ssl and have a "free" (as in beer) way to make your pages secure. Here is a link to the mod_ssl webpage. Check it out and see if this is what you need. __________________ Profanity is the one language that all programmers understand. Check out my Blog <---updated Nov 30 2007!

Nov 23rd, 2004, 8:47 AM	#15
Pizentios Programming Guru Join Date: May 2004 Location: Brandon, Manitoba, Canada Posts: 2,023 Rep Power: 7	As far as i know, there should be no problem routing to a windows box witha IPtables firewall. However there might be somthing wrong on the windows box that is preventing traffic coming from that box....or somthing. A quick run down of your settings might turn up somthing. __________________ Profanity is the one language that all programmers understand. Check out my Blog <---updated Nov 30 2007!

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Programming Forums > Web Development and Design > PHP

Iptable Filtering