C# MVC: Use Attribute to create Request IP constraint

Answer 1

This is an example of a problem that can be solved with an AOP (Aspect-Oriented Programming) solution. For this type of thing I usually recommend PostSharp.

Basically what PostSharp allows you to do is create attributes that you can use as markers for places in your code that you wish to insert boilerplate code.

Answer 2

A similar post has been answered here

http://stackoverflow.com/questions/473687/restrict-access-to-a-specific-controller-by-ip-address-in-asp-net-mvc-beta

Answer 3

You could create a custom filter attribute:

public class InternalOnly : FilterAttribute
{
    public void OnAuthorization (AuthorizationContext filterContext)
    {
     if (!IsIntranet (filterContext.HttpContext.Request.UserHostAddress))
     {
      throw new HttpException ((int)HttpStatusCode.Forbidden, "Access forbidden.");
     }
    }

    private bool IsIntranet (string userIP)
    {
     // match an internal IP (ex: 127.0.0.1)
     return !string.IsNullOrEmpty (userIP) && Regex.IsMatch (userIP, "^127");
    }
}