Search code examples
authenticationiis-7windows-server-2008mac-address

IIS7 Restrict website access by MAC address?

Is it possible to restrict access to a website in IIS7 using MAC address rather than IP address?

We are wanting to restrict access to our website to only known PCs as mentioned here: link text. These PCs will be external to our network, but because some users could be remote, we would rather do this on MAC address rather than IP address.

II7, Windows Server 2008, asp.net

Thankyou in advance

Richard

Solution

  • That is a bad idea because MAC addresses can easily be spoofed. If you need authentication from multiple unknown locations you should use passwords or certificates.

    And of course, as mentioned in another answer, over the Internet the MAC adress is not visible, it would only be possible inside your own network.