RE: User/IP Restriction

[Chris Whisonant <chris.whisonant@xxxxxxxxxxxxx>]

Thank you for the suggestions. I am looking into NAT with our network
administrator.

Chris Whisonant

-----Original Message-----
From: midrange-l-admin@midrange.com
[mailto:midrange-l-admin@midrange.com]On Behalf Of Fritz Hayes
Sent: Thursday, February 07, 2002 12:52 PM
To: midrange-l@midrange.com
Subject: RE: User/IP Restriction


Just a crazy idea:  can you take advantage of the NAT feature on the IP
ethernet?  Assign a special IP address for the communication, NAT it
into the 400 filtering all but the required ports, identify only the Web
server as being permited to use the NAT, and then lock down the allowed
activities of the user.


Best Regards

Fritz Hayes
Atwater Associates
<snip>
|
|This may not be possible (without coding), but I was asked to
|help restrict a user and IP address. Basically, we will have a
|non-400 webserver allowing our clients to look at their bills
|(read-only) that reside on our 400. We will have the one user
|profile doing this from this one machine. Is there a way to
|limit this user profile from only accessing the system from
|this one IP address?
|
|What I'm thinking we may have to do is rely on resource
|security and user profile parameters for the user profile and
|not worry about limiting it to the single IP. As far as the IP
|address goes, I'm seeing that we may have to use exit points
|(we have Powerlock) to reject that IP address on ALL servers
|one by one (ftp, telnet, etc.) except the server that we will
|use to retrieve the data.
|


_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.