block access based on referer

I would like to restrict (block) access to my site if a request uses a
specific referer. I know that this would not be 100% efficient, still it
looks like something very usefull.


If this can't be done with "just" IIS, maybe a 3rd party?


dirk.

Keith
Wed Mar 03 08:56:59 CST 2004

You can do this using ASP, ASP.Net, PHP, etc. Just check the HTTP_REFERRER
value in the HTTP request headers and block if it doesn't match the
string(s) that you provide.

"Dirk" <dirk@nospam_to_remove_ofcourse.woodstone.nu> wrote in message
news:uLhqc$QAEHA.444@TK2MSFTNGP11.phx.gbl...
> I would like to restrict (block) access to my site if a request uses a
> specific referer. I know that this would not be 100% efficient, still it
> looks like something very usefull.
>
>
> If this can't be done with "just" IIS, maybe a 3rd party?
>
>
> dirk.
>
>

Dirk
Wed Mar 03 09:21:30 CST 2004

This means that we have to do this on a per "page" level. while we would
like to do this on a site level.


dirk;

"Keith W. McCammon" <km@km.com> wrote in message
news:u%23dyw%23SAEHA.392@TK2MSFTNGP12.phx.gbl...
> You can do this using ASP, ASP.Net, PHP, etc. Just check the
HTTP_REFERRER
> value in the HTTP request headers and block if it doesn't match the
> string(s) that you provide.
>
> "Dirk" <dirk@nospam_to_remove_ofcourse.woodstone.nu> wrote in message
> news:uLhqc$QAEHA.444@TK2MSFTNGP11.phx.gbl...
> > I would like to restrict (block) access to my site if a request uses a
> > specific referer. I know that this would not be 100% efficient, still
it
> > looks like something very usefull.
> >
> >
> > If this can't be done with "just" IIS, maybe a 3rd party?
> >
> >
> > dirk.
> >
> >
>
>

Dan
Wed Mar 03 10:17:35 CST 2004


"Dirk" <dirk@nospam_to_remove_ofcourse.woodstone.nu> wrote in message
news:ODsT2MTAEHA.2308@tk2msftngp13.phx.gbl...
> This means that we have to do this on a per "page" level. while we would
> like to do this on a site level.
>
>
> dirk;

Put the code in your global.asa (or equivalent) file and then put it in the
Session_OnStart event.

That should automatically check every new user to the site, irrespective of
which page they enter into.

Dirk
Wed Mar 03 11:20:59 CST 2004

do you have an example for that?

dirk.

"Dan" <ms_groups@crossdata.co.uk> wrote in message
news:%23%2360LsTAEHA.3824@TK2MSFTNGP09.phx.gbl...
>
> "Dirk" <dirk@nospam_to_remove_ofcourse.woodstone.nu> wrote in message
> news:ODsT2MTAEHA.2308@tk2msftngp13.phx.gbl...
> > This means that we have to do this on a per "page" level. while we
would
> > like to do this on a site level.
> >
> >
> > dirk;
>
> Put the code in your global.asa (or equivalent) file and then put it in
the
> Session_OnStart event.
>
> That should automatically check every new user to the site, irrespective
of
> which page they enter into.
>
>
>