Need a fixed IP address

Conor_3

weegie.geek wrote: »

In what way is locking down security in this way not doing the job properly?

Because of the way it is being done. If it were being done properly, the connecting IP address would be irrelevent. By restricting it to a single IP address, you're excluding the majority of internet users in the UK from being able to access it as most are on dynamic IP addresses.

Using IP addresses as a method of security is completely pointless due to the ease in which IP addresses can be spoofed. All you're doing is creating a needless headache for your clients.

esuhl

I work for a very large, global (nameless, but well-known) company that provides authenticated access to web sites. I'm not saying that it's big or clever, but one of the several authentication methods available to our customers is via IP recognition. The services are only available to large businesses, so we can accept a written statement that they are using a fixed IP address that they control.

As for IP spoofing, is it really likely to be a threat? The spoofer would have to know which IP addresses would be accepted, wouldn't he?

[Deleted User]

esuhl wrote: »

I work for a very large, global (nameless, but well-known) company that provides authenticated access to web sites. I'm not saying that it's big or clever, but one of the several authentication methods available to our customers is via IP recognition. The services are only available to large businesses, so we can accept a written statement that they are using a fixed IP address that they control.

As for IP spoofing, is it really likely to be a threat? The spoofer would have to know which IP addresses would be accepted, wouldn't he?

Without knowing the specifics of the project that is going on, I don't think a fixed IP for verification could ever be a 'silver bullet' solution to security. Not being an area of speciality of mine, but would it be used in combination with something else like a RSA SecurID style device to lock down access?

Conor_3

esuhl wrote: »

I work for a very large, global (nameless, but well-known) company that provides authenticated access to web sites. I'm not saying that it's big or clever, but one of the several authentication methods available to our customers is via IP recognition. The services are only available to large businesses, so we can accept a written statement that they are using a fixed IP address that they control.

As for IP spoofing, is it really likely to be a threat? The spoofer would have to know which IP addresses would be accepted, wouldn't he?

It's as much a threat as the programmer perceives someone getting the log in details to be.

robert_harper_2000

Hello, sorry but I'm just not getting it lol. So would the companies suggested be of use?
http://www.no-ip.com/
http://www.technopagan.org/dynamic/#TheList
http://www.dynip.com/
I've taken abit longer getting back to him but could do with some more help! Cheers

mdbarber

easies approach m8 is too contact your isp see if they can offer you one, some smaller business orientated isp's used to do this as standard so may not be an issue at all

albertross_2

If the 2 pc's aren't connected to the same NAT router at work, the company should be using a vpn, problem solved.

If they are, they probably have an internal address, 192.168.x.x, or 10.x.x.x anyway. These can be made static by reserving the ip by allocating it to a mac address on the router.

More information on the nature of the connections is needed to help. Is the source an destination on an internal network, or between two different companies, or something else?

Having a static external address actually weakens security.

mdbarber

albertross wrote: »

The company should be using a vpn, problem solved.

Having a static address actually weakens security.

agreed! "a sitting duck" etc but that is their choice

robert_harper_2000

Wish I could be more technical but basically I have a router which I've connected up one ethernet to the upstairs computer and a longer ethernet cable to the downstairs computer. Erm... what do I need to find out for you? well for me
Cheers

albertross wrote: »

If the 2 pc's aren't connected to the same NAT router at work, the company should be using a vpn, problem solved.

If they are, they probably have an internal address, 192.168.x.x, or 10.x.x.x anyway. These can be made static by reserving the ip by allocating it to a mac address on the router.

More information on the nature of the connections is needed to help. Is the source an destination on an internal network, or between two different companies, or something else?

Having a static external address actually weakens security.

DatabaseError

is this fixed IP just for 2 PCs networked together with wires? Nothing to do with remote access over the internet, or similar? Quite possibly we've all been barking up the wrong tree and overcomplicating things,,, if yes, operating system and router model required