If you are not that attached to the .config file you could use the SocketPermissionAttribute or the SocketPermission class to specify the IP addresses that you are willing to accept. If you wanted to still have the flexibility of a configuration file you could add use entries in the config file and programmatically accept or deny IP addresses.
Kevin Burton .NET Common Language Runtime Unleashed -----Original Message----- From: Marsh, Drew [mailto:[EMAIL PROTECTED]] Sent: Monday, April 22, 2002 1:53 PM To: [EMAIL PROTECTED] Subject: Re: [DOTNET] Authorize users based on IP Address Nischal Chitta [mailto:[EMAIL PROTECTED]] wrote: > Now my question, Is there a way I can specify in the *.config > file that gives access to my site from only particular IP > Addresses or should I be implementing as my own. This is usually handled at the web server level (i.e. IIS). You *could* write an ASP.NET module that enables this behavior as well, but I see no reason to do this if the web server your running on already provides this functionality for you. HTH, Drew You can read messages from the DOTNET archive, unsubscribe from DOTNET, or subscribe to other DevelopMentor lists at http://discuss.develop.com. You can read messages from the DOTNET archive, unsubscribe from DOTNET, or subscribe to other DevelopMentor lists at http://discuss.develop.com.