Is it possible to do it in code? e.g. after receiving an allowable IP address, place it somewhere in a config file?

I’m developing a .NET/C# application software for an instrument which has a built-in PC (Core 2 CPU/2.66GZ/4GB RAM) and will have access to the Internet from behind the facility IT firewall. To support remote device maintenance via Intetnet using browser, I want to run a web site locally IIS hosted on the instrument PC. Apparently, this site is for authorized user only (could be anywhere on the Inernet). I know security is the major problem to deal with in this scenario. To reduce the surface of attach, can I lock down the allowable IP range to just one IP address where the service user is? This one IP address will be made configurable. Is this a viable approach to secure the web site with the least cost? Just googled that .htaccess file can be created in webroot to block IP ranges. Will this still allow scripts to access the site Sorry, .htaccess is available on Apache server only. What's equivalent on IIS?

modified on Saturday, June 19, 2010 10:19 PM