This is a corporate site so Private. We want to limit access by IP address to USA/Canada or North America. Based on IP range, would allow user/pwd to get in otherwise -'no access'. Just trying to limit hack exposure from anything overseas.
+1
A:
Anybody who could get past your password security could easily get past any IP filtering security (and it may even be seen as a challenge, thus increasing the risk of overseas hacking). I think the premise of your question is flawed.
Skilldrick
2010-01-21 17:17:48
Agree 100%, but this kind of thing tends to come down from highly-placed executives who assume it's possible because "all the big companies have this information" and won't hear anything else, even the truth that it's only an easily-circumvented approximation.
Joel Coehoorn
2010-01-21 17:22:07
@Joel - Fair point.
Skilldrick
2010-01-21 17:23:10
+2
A:
If your main aim is to prevent unauthorized access to your website by IP... that will never ever work. Its so easy to bypass that. a user/pwd would be a more secure option.
To answer your question, if you have certain features or a complete website block that you want to do, this is a tutorial:
http://blog.newagesolution.net/2008/11/how-to-block-country-and-ip-addresses.html
Shawn Mclean
2010-01-21 17:24:52