extra ip security

Classic Servoy
1

Hi,

I want to add some extra security for a customer in our SaaS solution.
The customer wants to able to connect to our solution from only a few ip-adresses. (the company WAN-ip-address, and some home-WAN-ipaddress) The tools plugin of IT2BE provides a function, where we can detect ip-adresses, but those are only internal(LAN) ip-adresses.

I want to detect, the outside (WAN) ip-address, of a client, so we can add a complete internal LAN.

I found this topic: http://forum.servoy.com/viewtopic.php?t=2452
but the download link is broken, and I’m not sure, of this plugin can detect the WAN address.

Anyone solved this allready??

2

I’d highly recommend that you implement at the firewall level – either on the network equipment, or in the server’s IP tables – unless there’s a compelling reason to do otherwise.

greg.

3

that’s not possible. We have a SaaS solution, which can be accessed from all over the world. Some customers want to limit access to there section only from certain ip-addresses, so I don’t have control of there firewalls.

4

Harjoke!

Try the following:

var theipurl = plugins.http.GetPageData(‘http://www.whatismyip.com’)
Filter out the IP! (It’s somewhere in the html "Your IP is…')

HTH

Stef

5

Hi Stef,

yes, that’s what I thought also, but I’m not sure to depend my login, to a website of an other company.

Do you use it??

6

I use it succesfully!
I didn’t find any other way to realise this.

whatismyip.com exists for many years with the same html structure, but you’re right, one day it can change or disappear…

Stef

7

Harjo, do I understand correctly that the problem with Marcel’s plugin is that you only get the LAN address of the remote PC (a private IP) and not the address that is used by the router (or DSL modem)?

How about using MAC addresses?

8

yes, you are right, I’ll only get the internal LAN ip-address.
Mac addresses, is a lot more work, (also in managing) because we have to add EVERY machine separately. So I/we prefer, to add only the outside WAN address of a whole company and some home WAN addresses of sales guys that don’t come to the office offen.

9

Harjo asked me the method:

var thepagedata = plugins.http.getPageData('http://www.whatismyip.com');
var theip = utils.stringMiddle(thepagedata, utils.stringPosition(thepagedata, 'Your IP Is ', 1, 1) + 11, 20)
theip = utils.stringLeft(theip, utils.stringPosition(theip, '</h1>', 1, 1)-1)

Line 2 and 3 can be combined, but do not do this! The page header has already changed in the past!

HTH
Stef

10

Thanks Stef! :D