blocks|key|3468570|text|您应该有权访问要对其执行限制的控制器中的请求对象中的UserHostAddress。我建议您可以扩展AuthorizeAttribute并在其上添加IP地址限制，这样您就可以简单地修饰需要这种保护的任何方法或控制器。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|3468571|entityMap^0|Q|F|1E|I|22|2|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]|$9|K|A|L|B|C]|$9|M|A|N|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|O|8|@]|D|@]|E|$]]]|G|$]]

You should have access to the <code>UserHostAddress</code> in the Request object in your controller to do the restriction on. I'd suggest that you may want to extend the <code>AuthorizeAttribute</code> and add your <code>IP</code> address restrictions on it so that you can simply decorate any methods or controllers that need this protection.

blocks|key|3255411|text|我知道这是一个古老的问题，但我今天需要这个功能，所以我实现了它，并考虑在这里发布它。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3255412|在这里使用IPList类(http://www.codeproject.com/KB/IP/ipnumbers.aspx)|offset|length|3255413|过滤器属性FilterIPAttribute.cs:|style|BOLD|3255414|using+System;
using+System.Collections.Generic;
using+System.Linq;
using+System.Web;
using+System.Web.Http;
using+System.Security.Principal;
using+System.Configuration;

namespace+Miscellaneous.Attributes.Controller
{

++++///+<summary>
++++///+Filter+by+IP+address
++++///+</summary>
++++public+class+FilterIPAttribute+:+AuthorizeAttribute
++++{

++++++++#region+Allowed
++++++++///+<summary>
++++++++///+Comma+seperated+string+of+allowable+IPs.+Example+"10.2.5.41,192.168.0.22"
++++++++///+</summary>
++++++++///+<value></value>
++++++++public+string+AllowedSingleIPs+{+get;+set;+}

++++++++///+<summary>
++++++++///+Comma+seperated+string+of+allowable+IPs+with+masks.+Example+"10.2.0.0;255.255.0.0,10.3.0.0;255.255.0.0"
++++++++///+</summary>
++++++++///+<value>The+masked+I+ps.</value>
++++++++public+string+AllowedMaskedIPs+{+get;+set;+}

++++++++///+<summary>
++++++++///+Gets+or+sets+the+configuration+key+for+allowed+single+IPs
++++++++///+</summary>
++++++++///+<value>The+configuration+key+single+I+ps.</value>
++++++++public+string+ConfigurationKeyAllowedSingleIPs+{+get;+set;+}

++++++++///+<summary>
++++++++///+Gets+or+sets+the+configuration+key+allowed+mmasked+IPs
++++++++///+</summary>
++++++++///+<value>The+configuration+key+masked+I+ps.</value>
++++++++public+string+ConfigurationKeyAllowedMaskedIPs+{+get;+set;+}

++++++++///+<summary>
++++++++///+List+of+allowed+IPs
++++++++///+</summary>
++++++++IPList+allowedIPListToCheck+=+new+IPList();
++++++++#endregion

++++++++#region+Denied
++++++++///+<summary>
++++++++///+Comma+seperated+string+of+denied+IPs.+Example+"10.2.5.41,192.168.0.22"
++++++++///+</summary>
++++++++///+<value></value>
++++++++public+string+DeniedSingleIPs+{+get;+set;+}

++++++++///+<summary>
++++++++///+Comma+seperated+string+of+denied+IPs+with+masks.+Example+"10.2.0.0;255.255.0.0,10.3.0.0;255.255.0.0"
++++++++///+</summary>
++++++++///+<value>The+masked+I+ps.</value>
++++++++public+string+DeniedMaskedIPs+{+get;+set;+}


++++++++///+<summary>
++++++++///+Gets+or+sets+the+configuration+key+for+denied+single+IPs
++++++++///+</summary>
++++++++///+<value>The+configuration+key+single+I+ps.</value>
++++++++public+string+ConfigurationKeyDeniedSingleIPs+{+get;+set;+}

++++++++///+<summary>
++++++++///+Gets+or+sets+the+configuration+key+for+denied+masked+IPs
++++++++///+</summary>
++++++++///+<value>The+configuration+key+masked+I+ps.</value>
++++++++public+string+ConfigurationKeyDeniedMaskedIPs+{+get;+set;+}

++++++++///+<summary>
++++++++///+List+of+denied+IPs
++++++++///+</summary>
++++++++IPList+deniedIPListToCheck+=+new+IPList();
++++++++#endregion


++++++++///+<summary>
++++++++///+Determines+whether+access+to+the+core+framework+is+authorized.
++++++++///+</summary>
++++++++///+<param+name="actionContext">The+HTTP+context,+which+encapsulates+all+HTTP-specific+information+about+an+individual+HTTP+request.</param>
++++++++///+<returns>
++++++++///+true+if+access+is+authorized;+otherwise,+false.
++++++++///+</returns>
++++++++///+<exception+cref="T:System.ArgumentNullException">The+<paramref+name="httpContext"/>+parameter+is+null.</exception>
++++++++protected+override+bool+IsAuthorized(HttpActionContext+actionContext)
++++++++{
++++++++++++if+(actionContext+==+null)
++++++++++++++++throw+new+ArgumentNullException("actionContext");

++++++++++++string+userIpAddress+=+((HttpContextWrapper)actionContext.Request.Properties["MS_HttpContext"]).Request.UserHostName;

++++++++++++try
++++++++++++{
++++++++++++++++//+Check+that+the+IP+is+allowed+to+access
++++++++++++++++bool+ipAllowed+=+CheckAllowedIPs(userIpAddress);

++++++++++++++++//+Check+that+the+IP+is+not+denied+to+access
++++++++++++++++bool+ipDenied+=+CheckDeniedIPs(userIpAddress);++++

++++++++++++++++//+Only+allowed+if+allowed+and+not+denied
++++++++++++++++bool+finallyAllowed+=+ipAllowed+&&+!ipDenied;

++++++++++++++++return+finallyAllowed;
++++++++++++}
++++++++++++catch+(Exception+e)
++++++++++++{
++++++++++++++++//+Log+the+exception,+probably+something+wrong+with+the+configuration
++++++++++++}

++++++++++++return+true;+//+if+there+was+an+exception,+then+we+return+true
++++++++}

++++++++///+<summary>
++++++++///+Checks+the+allowed+IPs.
++++++++///+</summary>
++++++++///+<param+name="userIpAddress">The+user+ip+address.</param>
++++++++///+<returns></returns>
++++++++private+bool+CheckAllowedIPs(string+userIpAddress)
++++++++{
++++++++++++//+Populate+the+IPList+with+the+Single+IPs
++++++++++++if+(!string.IsNullOrEmpty(AllowedSingleIPs))
++++++++++++{
++++++++++++++++SplitAndAddSingleIPs(AllowedSingleIPs,+allowedIPListToCheck);
++++++++++++}

++++++++++++//+Populate+the+IPList+with+the+Masked+IPs
++++++++++++if+(!string.IsNullOrEmpty(AllowedMaskedIPs))
++++++++++++{
++++++++++++++++SplitAndAddMaskedIPs(AllowedMaskedIPs,+allowedIPListToCheck);
++++++++++++}

++++++++++++//+Check+if+there+are+more+settings+from+the+configuration+(Web.config)
++++++++++++if+(!string.IsNullOrEmpty(ConfigurationKeyAllowedSingleIPs))
++++++++++++{
++++++++++++++++string+configurationAllowedAdminSingleIPs+=+ConfigurationManager.AppSettings[ConfigurationKeyAllowedSingleIPs];
++++++++++++++++if+(!string.IsNullOrEmpty(configurationAllowedAdminSingleIPs))
++++++++++++++++{
++++++++++++++++++++SplitAndAddSingleIPs(configurationAllowedAdminSingleIPs,+allowedIPListToCheck);
++++++++++++++++}
++++++++++++}

++++++++++++if+(!string.IsNullOrEmpty(ConfigurationKeyAllowedMaskedIPs))
++++++++++++{
++++++++++++++++string+configurationAllowedAdminMaskedIPs+=+ConfigurationManager.AppSettings[ConfigurationKeyAllowedMaskedIPs];
++++++++++++++++if+(!string.IsNullOrEmpty(configurationAllowedAdminMaskedIPs))
++++++++++++++++{
++++++++++++++++++++SplitAndAddMaskedIPs(configurationAllowedAdminMaskedIPs,+allowedIPListToCheck);
++++++++++++++++}
++++++++++++}

++++++++++++return+allowedIPListToCheck.CheckNumber(userIpAddress);
++++++++}

++++++++///+<summary>
++++++++///+Checks+the+denied+IPs.
++++++++///+</summary>
++++++++///+<param+name="userIpAddress">The+user+ip+address.</param>
++++++++///+<returns></returns>
++++++++private+bool+CheckDeniedIPs(string+userIpAddress)
++++++++{
++++++++++++//+Populate+the+IPList+with+the+Single+IPs
++++++++++++if+(!string.IsNullOrEmpty(DeniedSingleIPs))
++++++++++++{
++++++++++++++++SplitAndAddSingleIPs(DeniedSingleIPs,+deniedIPListToCheck);
++++++++++++}

++++++++++++//+Populate+the+IPList+with+the+Masked+IPs
++++++++++++if+(!string.IsNullOrEmpty(DeniedMaskedIPs))
++++++++++++{
++++++++++++++++SplitAndAddMaskedIPs(DeniedMaskedIPs,+deniedIPListToCheck);
++++++++++++}

++++++++++++//+Check+if+there+are+more+settings+from+the+configuration+(Web.config)
++++++++++++if+(!string.IsNullOrEmpty(ConfigurationKeyDeniedSingleIPs))
++++++++++++{
++++++++++++++++string+configurationDeniedAdminSingleIPs+=+ConfigurationManager.AppSettings[ConfigurationKeyDeniedSingleIPs];
++++++++++++++++if+(!string.IsNullOrEmpty(configurationDeniedAdminSingleIPs))
++++++++++++++++{
++++++++++++++++++++SplitAndAddSingleIPs(configurationDeniedAdminSingleIPs,+deniedIPListToCheck);
++++++++++++++++}
++++++++++++}

++++++++++++if+(!string.IsNullOrEmpty(ConfigurationKeyDeniedMaskedIPs))
++++++++++++{
++++++++++++++++string+configurationDeniedAdminMaskedIPs+=+ConfigurationManager.AppSettings[ConfigurationKeyDeniedMaskedIPs];
++++++++++++++++if+(!string.IsNullOrEmpty(configurationDeniedAdminMaskedIPs))
++++++++++++++++{
++++++++++++++++++++SplitAndAddMaskedIPs(configurationDeniedAdminMaskedIPs,+deniedIPListToCheck);
++++++++++++++++}
++++++++++++}

++++++++++++return+deniedIPListToCheck.CheckNumber(userIpAddress);
++++++++}

++++++++///+<summary>
++++++++///+Splits+the+incoming+ip+string+of+the+format+"IP,IP"+example+"10.2.0.0,10.3.0.0"+and+adds+the+result+to+the+IPList
++++++++///+</summary>
++++++++///+<param+name="ips">The+ips.</param>
++++++++///+<param+name="list">The+list.</param>
++++++++private+void+SplitAndAddSingleIPs(string+ips,IPList+list)
++++++++{
++++++++++++var+splitSingleIPs+=+ips.Split(',');
++++++++++++foreach+(string+ip+in+splitSingleIPs)
++++++++++++++++list.Add(ip);
++++++++}

++++++++///+<summary>
++++++++///+Splits+the+incoming+ip+string+of+the+format+"IP;MASK,IP;MASK"+example+"10.2.0.0;255.255.0.0,10.3.0.0;255.255.0.0"+and+adds+the+result+to+the+IPList
++++++++///+</summary>
++++++++///+<param+name="ips">The+ips.</param>
++++++++///+<param+name="list">The+list.</param>
++++++++private+void+SplitAndAddMaskedIPs(string+ips,+IPList+list)
++++++++{
++++++++++++var+splitMaskedIPs+=+ips.Split(',');
++++++++++++foreach+(string+maskedIp+in+splitMaskedIPs)
++++++++++++{
++++++++++++++++var+ipAndMask+=+maskedIp.Split(';');
++++++++++++++++list.Add(ipAndMask[0],+ipAndMask[1]);+//+IP;MASK
++++++++++++}
++++++++}

++++++++public+override+void+OnAuthorization(AuthorizationContext+filterContext)
++++++++{
++++++++++++base.OnAuthorization(filterContext);
++++++++}
++++}
}|code-block|syntax|javascript|3255415|示例用法：|3255416|1.在代码中直接指定IP|3255417|++++[FilterIP(
+++++++++AllowedSingleIPs="10.2.5.55,192.168.2.2",
+++++++++AllowedMaskedIPs="10.2.0.0;255.255.0.0,192.168.2.0;255.255.255.0"
++++)]
++++public+class+HomeController+{
++++++//+Some+code+here
++++}|3255418|2.或者，从Web.config加载配置|3255419|++++[FilterIP(
+++++++++ConfigurationKeyAllowedSingleIPs="AllowedAdminSingleIPs",
+++++++++ConfigurationKeyAllowedMaskedIPs="AllowedAdminMaskedIPs",
+++++++++ConfigurationKeyDeniedSingleIPs="DeniedAdminSingleIPs",
+++++++++ConfigurationKeyDeniedMaskedIPs="DeniedAdminMaskedIPs"
++++)]
++++public+class+HomeController+{
++++++//+Some+code+here
++++}


<configuration>
<appSettings>
++++<add+key="AllowedAdminSingleIPs"+value="localhost,127.0.0.1"/>+
++++<add+key="AllowedAdminMaskedIPs"+value="10.2.0.0;255.255.0.0"/>+
++++<add+key="DeniedAdminSingleIPs"+value=""/>++++
++++<add+key="DeniedAdminMaskedIPs"+value=""/>++++
</appSettings>
</configuration>|3255420|entityMap|0|LINK|mutability|MUTABLE|url|http://www.codeproject.com/KB/IP/ipnumbers.aspx^0|0|D|1B|0|0|0|Q|0|0|0|5|0|0|5|0|0|0|G|0|0^^$0|@$1|2|3|4|5|6|7|16|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|17|8|@]|9|@$D|18|E|19|1|1A]]|A|$]]|$1|F|3|G|5|6|7|1B|8|@$D|1C|E|1D|H|I]]|9|@]|A|$]]|$1|J|3|K|5|L|7|1E|8|@]|9|@]|A|$M|N]]|$1|O|3|P|5|6|7|1F|8|@$D|1G|E|1H|H|I]]|9|@]|A|$]]|$1|Q|3|R|5|6|7|1I|8|@$D|1J|E|1K|H|I]]|9|@]|A|$]]|$1|S|3|T|5|L|7|1L|8|@]|9|@]|A|$M|N]]|$1|U|3|V|5|6|7|1M|8|@$D|1N|E|1O|H|I]]|9|@]|A|$]]|$1|W|3|X|5|L|7|1P|8|@]|9|@]|A|$M|N]]|$1|Y|3|-4|5|6|7|1Q|8|@]|9|@]|A|$]]]|Z|$10|$5|11|12|13|A|$14|15]]]]

I know this is an old question, but I needed to have this functionality today so I implemented it and thought about posting it here.

Using the IPList class from here (<a href="http://www.codeproject.com/KB/IP/ipnumbers.aspx" rel="noreferrer">http://www.codeproject.com/KB/IP/ipnumbers.aspx</a>)

The filter attribute FilterIPAttribute.cs:

<pre><code>using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.Http;
using System.Security.Principal;
using System.Configuration;

namespace Miscellaneous.Attributes.Controller
{

 /// &lt;summary&gt;
 /// Filter by IP address
 /// &lt;/summary&gt;
 public class FilterIPAttribute : AuthorizeAttribute
 {

 #region Allowed
 /// &lt;summary&gt;
 /// Comma seperated string of allowable IPs. Example "10.2.5.41,192.168.0.22"
 /// &lt;/summary&gt;
 /// &lt;value&gt;&lt;/value&gt;
 public string AllowedSingleIPs { get; set; }

 /// &lt;summary&gt;
 /// Comma seperated string of allowable IPs with masks. Example "10.2.0.0;255.255.0.0,10.3.0.0;255.255.0.0"
 /// &lt;/summary&gt;
 /// &lt;value&gt;The masked I ps.&lt;/value&gt;
 public string AllowedMaskedIPs { get; set; }

 /// &lt;summary&gt;
 /// Gets or sets the configuration key for allowed single IPs
 /// &lt;/summary&gt;
 /// &lt;value&gt;The configuration key single I ps.&lt;/value&gt;
 public string ConfigurationKeyAllowedSingleIPs { get; set; }

 /// &lt;summary&gt;
 /// Gets or sets the configuration key allowed mmasked IPs
 /// &lt;/summary&gt;
 /// &lt;value&gt;The configuration key masked I ps.&lt;/value&gt;
 public string ConfigurationKeyAllowedMaskedIPs { get; set; }

 /// &lt;summary&gt;
 /// List of allowed IPs
 /// &lt;/summary&gt;
 IPList allowedIPListToCheck = new IPList();
 #endregion

 #region Denied
 /// &lt;summary&gt;
 /// Comma seperated string of denied IPs. Example "10.2.5.41,192.168.0.22"
 /// &lt;/summary&gt;
 /// &lt;value&gt;&lt;/value&gt;
 public string DeniedSingleIPs { get; set; }

 /// &lt;summary&gt;
 /// Comma seperated string of denied IPs with masks. Example "10.2.0.0;255.255.0.0,10.3.0.0;255.255.0.0"
 /// &lt;/summary&gt;
 /// &lt;value&gt;The masked I ps.&lt;/value&gt;
 public string DeniedMaskedIPs { get; set; }


 /// &lt;summary&gt;
 /// Gets or sets the configuration key for denied single IPs
 /// &lt;/summary&gt;
 /// &lt;value&gt;The configuration key single I ps.&lt;/value&gt;
 public string ConfigurationKeyDeniedSingleIPs { get; set; }

 /// &lt;summary&gt;
 /// Gets or sets the configuration key for denied masked IPs
 /// &lt;/summary&gt;
 /// &lt;value&gt;The configuration key masked I ps.&lt;/value&gt;
 public string ConfigurationKeyDeniedMaskedIPs { get; set; }

 /// &lt;summary&gt;
 /// List of denied IPs
 /// &lt;/summary&gt;
 IPList deniedIPListToCheck = new IPList();
 #endregion


 /// &lt;summary&gt;
 /// Determines whether access to the core framework is authorized.
 /// &lt;/summary&gt;
 /// &lt;param name="actionContext"&gt;The HTTP context, which encapsulates all HTTP-specific information about an individual HTTP request.&lt;/param&gt;
 /// &lt;returns&gt;
 /// true if access is authorized; otherwise, false.
 /// &lt;/returns&gt;
 /// &lt;exception cref="T:System.ArgumentNullException"&gt;The &lt;paramref name="httpContext"/&gt; parameter is null.&lt;/exception&gt;
 protected override bool IsAuthorized(HttpActionContext actionContext)
 {
 if (actionContext == null)
 throw new ArgumentNullException("actionContext");

 string userIpAddress = ((HttpContextWrapper)actionContext.Request.Properties["MS_HttpContext"]).Request.UserHostName;

 try
 {
 // Check that the IP is allowed to access
 bool ipAllowed = CheckAllowedIPs(userIpAddress);

 // Check that the IP is not denied to access
 bool ipDenied = CheckDeniedIPs(userIpAddress); 

 // Only allowed if allowed and not denied
 bool finallyAllowed = ipAllowed &amp;&amp; !ipDenied;

 return finallyAllowed;
 }
 catch (Exception e)
 {
 // Log the exception, probably something wrong with the configuration
 }

 return true; // if there was an exception, then we return true
 }

 /// &lt;summary&gt;
 /// Checks the allowed IPs.
 /// &lt;/summary&gt;
 /// &lt;param name="userIpAddress"&gt;The user ip address.&lt;/param&gt;
 /// &lt;returns&gt;&lt;/returns&gt;
 private bool CheckAllowedIPs(string userIpAddress)
 {
 // Populate the IPList with the Single IPs
 if (!string.IsNullOrEmpty(AllowedSingleIPs))
 {
 SplitAndAddSingleIPs(AllowedSingleIPs, allowedIPListToCheck);
 }

 // Populate the IPList with the Masked IPs
 if (!string.IsNullOrEmpty(AllowedMaskedIPs))
 {
 SplitAndAddMaskedIPs(AllowedMaskedIPs, allowedIPListToCheck);
 }

 // Check if there are more settings from the configuration (Web.config)
 if (!string.IsNullOrEmpty(ConfigurationKeyAllowedSingleIPs))
 {
 string configurationAllowedAdminSingleIPs = ConfigurationManager.AppSettings[ConfigurationKeyAllowedSingleIPs];
 if (!string.IsNullOrEmpty(configurationAllowedAdminSingleIPs))
 {
 SplitAndAddSingleIPs(configurationAllowedAdminSingleIPs, allowedIPListToCheck);
 }
 }

 if (!string.IsNullOrEmpty(ConfigurationKeyAllowedMaskedIPs))
 {
 string configurationAllowedAdminMaskedIPs = ConfigurationManager.AppSettings[ConfigurationKeyAllowedMaskedIPs];
 if (!string.IsNullOrEmpty(configurationAllowedAdminMaskedIPs))
 {
 SplitAndAddMaskedIPs(configurationAllowedAdminMaskedIPs, allowedIPListToCheck);
 }
 }

 return allowedIPListToCheck.CheckNumber(userIpAddress);
 }

 /// &lt;summary&gt;
 /// Checks the denied IPs.
 /// &lt;/summary&gt;
 /// &lt;param name="userIpAddress"&gt;The user ip address.&lt;/param&gt;
 /// &lt;returns&gt;&lt;/returns&gt;
 private bool CheckDeniedIPs(string userIpAddress)
 {
 // Populate the IPList with the Single IPs
 if (!string.IsNullOrEmpty(DeniedSingleIPs))
 {
 SplitAndAddSingleIPs(DeniedSingleIPs, deniedIPListToCheck);
 }

 // Populate the IPList with the Masked IPs
 if (!string.IsNullOrEmpty(DeniedMaskedIPs))
 {
 SplitAndAddMaskedIPs(DeniedMaskedIPs, deniedIPListToCheck);
 }

 // Check if there are more settings from the configuration (Web.config)
 if (!string.IsNullOrEmpty(ConfigurationKeyDeniedSingleIPs))
 {
 string configurationDeniedAdminSingleIPs = ConfigurationManager.AppSettings[ConfigurationKeyDeniedSingleIPs];
 if (!string.IsNullOrEmpty(configurationDeniedAdminSingleIPs))
 {
 SplitAndAddSingleIPs(configurationDeniedAdminSingleIPs, deniedIPListToCheck);
 }
 }

 if (!string.IsNullOrEmpty(ConfigurationKeyDeniedMaskedIPs))
 {
 string configurationDeniedAdminMaskedIPs = ConfigurationManager.AppSettings[ConfigurationKeyDeniedMaskedIPs];
 if (!string.IsNullOrEmpty(configurationDeniedAdminMaskedIPs))
 {
 SplitAndAddMaskedIPs(configurationDeniedAdminMaskedIPs, deniedIPListToCheck);
 }
 }

 return deniedIPListToCheck.CheckNumber(userIpAddress);
 }

 /// &lt;summary&gt;
 /// Splits the incoming ip string of the format "IP,IP" example "10.2.0.0,10.3.0.0" and adds the result to the IPList
 /// &lt;/summary&gt;
 /// &lt;param name="ips"&gt;The ips.&lt;/param&gt;
 /// &lt;param name="list"&gt;The list.&lt;/param&gt;
 private void SplitAndAddSingleIPs(string ips,IPList list)
 {
 var splitSingleIPs = ips.Split(',');
 foreach (string ip in splitSingleIPs)
 list.Add(ip);
 }

 /// &lt;summary&gt;
 /// Splits the incoming ip string of the format "IP;MASK,IP;MASK" example "10.2.0.0;255.255.0.0,10.3.0.0;255.255.0.0" and adds the result to the IPList
 /// &lt;/summary&gt;
 /// &lt;param name="ips"&gt;The ips.&lt;/param&gt;
 /// &lt;param name="list"&gt;The list.&lt;/param&gt;
 private void SplitAndAddMaskedIPs(string ips, IPList list)
 {
 var splitMaskedIPs = ips.Split(',');
 foreach (string maskedIp in splitMaskedIPs)
 {
 var ipAndMask = maskedIp.Split(';');
 list.Add(ipAndMask[0], ipAndMask[1]); // IP;MASK
 }
 }

 public override void OnAuthorization(AuthorizationContext filterContext)
 {
 base.OnAuthorization(filterContext);
 }
 }
}
</code></pre>

Example usage:

1. Directly specifying the IPs in the
 code

<pre><code> [FilterIP(
 AllowedSingleIPs="10.2.5.55,192.168.2.2",
 AllowedMaskedIPs="10.2.0.0;255.255.0.0,192.168.2.0;255.255.255.0"
 )]
 public class HomeController {
 // Some code here
 }
</code></pre>

2. Or, Loading the configuration from the Web.config

<pre><code> [FilterIP(
 ConfigurationKeyAllowedSingleIPs="AllowedAdminSingleIPs",
 ConfigurationKeyAllowedMaskedIPs="AllowedAdminMaskedIPs",
 ConfigurationKeyDeniedSingleIPs="DeniedAdminSingleIPs",
 ConfigurationKeyDeniedMaskedIPs="DeniedAdminMaskedIPs"
 )]
 public class HomeController {
 // Some code here
 }


&lt;configuration&gt;
&lt;appSettings&gt;
 &lt;add key="AllowedAdminSingleIPs" value="localhost,127.0.0.1"/&gt; &lt;!-- Example "10.2.80.21,192.168.2.2" --&gt;
 &lt;add key="AllowedAdminMaskedIPs" value="10.2.0.0;255.255.0.0"/&gt; &lt;!-- Example "10.2.0.0;255.255.0.0,192.168.2.0;255.255.255.0" --&gt;
 &lt;add key="DeniedAdminSingleIPs" value=""/&gt; &lt;!-- Example "10.2.80.21,192.168.2.2" --&gt;
 &lt;add key="DeniedAdminMaskedIPs" value=""/&gt; &lt;!-- Example "10.2.0.0;255.255.0.0,192.168.2.0;255.255.255.0" --&gt;
&lt;/appSettings&gt;
&lt;/configuration&gt;
</code></pre>

blocks|key|3255431|text|我需要一个可以处理IPv6和IP范围的MVC4解决方案来解决这个问题。此外，我需要使用白名单和黑名单进行授权，但当IP既不是白名单也不是黑名单时，还需要使用常规授权过程。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3255432|这是我从@sabbour和@Richard+Szalay(How+to+check+a+input+IP+fall+in+a+specific+IP+range)很棒的帖子中得到的解决方案，所以我把它贴回这里，无论对谁有帮助。|offset|length|3255433|public+class+MagniAuthorizeAttribute+:+FilterAttribute,+IAuthorizationFilter
{

++++#region+Allowed

++++public+bool+IsPublic+{+get;+set;+}
++++///+<summary>
++++///+Comma+seperated+string+of+allowable+IPs.+Example+"10.2.5.41,192.168.0.22"
++++///+</summary>
++++///+<value></value>++++++++
++++public+string+AllowedSingleIPs+{+get;+set;+}

++++///+<summary>
++++///+Comma+seperated+string+of+allowable+IPs+with+masks.+Example+"10.2.0.0;255.255.0.0,10.3.0.0;255.255.0.0"
++++///+</summary>
++++///+<value>The+masked+I+ps.</value>
++++public+string+AllowedIPRanges+{+get;+set;+}

++++///+<summary>
++++///+Gets+or+sets+the+configuration+key+for+allowed+single+IPs
++++///+</summary>
++++///+<value>The+configuration+key+single+I+ps.</value>
++++public+string+ConfigurationKeyAllowedSingleIPs+{+get;+set;+}

++++///+<summary>
++++///+Gets+or+sets+the+configuration+key+allowed+mmasked+IPs
++++///+</summary>
++++///+<value>The+configuration+key+masked+I+ps.</value>
++++public+string+ConfigurationKeyAllowedMaskedIPs+{+get;+set;+}

++++#endregion

++++#region+Denied
++++///+<summary>
++++///+Comma+seperated+string+of+denied+IPs.+Example+"10.2.5.41,192.168.0.22"
++++///+</summary>
++++///+<value></value>
++++public+string+DeniedSingleIPs+{+get;+set;+}

++++///+<summary>
++++///+Comma+seperated+string+of+denied+IPs+with+masks.+Example+"10.2.0.0;255.255.0.0,10.3.0.0;255.255.0.0"
++++///+</summary>
++++///+<value>The+masked+I+ps.</value>
++++public+string+DeniedIPRanges+{+get;+set;+}


++++///+<summary>
++++///+Gets+or+sets+the+configuration+key+for+denied+single+IPs
++++///+</summary>
++++///+<value>The+configuration+key+single+I+ps.</value>
++++public+string+ConfigurationKeyDeniedSingleIPs+{+get;+set;+}

++++///+<summary>
++++///+Gets+or+sets+the+configuration+key+for+denied+masked+IPs
++++///+</summary>
++++///+<value>The+configuration+key+masked+I+ps.</value>
++++public+string+ConfigurationKeyDeniedMaskedIPs+{+get;+set;+}

++++#endregion


++++///+<summary>
++++///+Checks+the+allowed+IPs.
++++///+</summary>
++++///+<param+name="userIpAddress">The+user+ip+address.</param>
++++///+<returns></returns>
++++private+bool+CheckAllowedIPs(IPAddress+userIpAddress)
++++{
++++++++List<IPAddress>+allowedIPsToCheck+=+new+List<IPAddress>();
++++++++List<IPAddressRange>+allowedIPRangesToCheck+=+new+List<IPAddressRange>();

++++++++//+Populate+the+IPList+with+the+Single+IPs
++++++++if+(!string.IsNullOrEmpty(AllowedSingleIPs))
++++++++{
++++++++++++SplitAndAddSingleIPs(AllowedSingleIPs,+allowedIPsToCheck);
++++++++}

++++++++//+Populate+the+IPList+with+the+Masked+IPs
++++++++if+(!string.IsNullOrEmpty(AllowedIPRanges))
++++++++{
++++++++++++SplitAndAddIPRanges(AllowedIPRanges,+allowedIPRangesToCheck);
++++++++}

++++++++//+Check+if+there+are+more+settings+from+the+configuration+(Web.config)
++++++++if+(!string.IsNullOrEmpty(ConfigurationKeyAllowedSingleIPs))
++++++++{
++++++++++++string+configurationAllowedAdminSingleIPs+=+ConfigurationManager.AppSettings[ConfigurationKeyAllowedSingleIPs];
++++++++++++if+(!string.IsNullOrEmpty(configurationAllowedAdminSingleIPs))
++++++++++++{
++++++++++++++++SplitAndAddSingleIPs(configurationAllowedAdminSingleIPs,+allowedIPsToCheck);
++++++++++++}
++++++++}

++++++++if+(!string.IsNullOrEmpty(ConfigurationKeyAllowedMaskedIPs))
++++++++{
++++++++++++string+configurationAllowedAdminMaskedIPs+=+ConfigurationManager.AppSettings[ConfigurationKeyAllowedMaskedIPs];
++++++++++++if+(!string.IsNullOrEmpty(configurationAllowedAdminMaskedIPs))
++++++++++++{
++++++++++++++++SplitAndAddIPRanges(configurationAllowedAdminMaskedIPs,+allowedIPRangesToCheck);
++++++++++++}
++++++++}

++++++++return+allowedIPsToCheck.Any(a+=>+a.Equals(userIpAddress))+%7C%7C+allowedIPRangesToCheck.Any(a+=>+a.IsInRange(userIpAddress));
++++}

++++///+<summary>
++++///+Checks+the+denied+IPs.
++++///+</summary>
++++///+<param+name="userIpAddress">The+user+ip+address.</param>
++++///+<returns></returns>
++++private+bool+CheckDeniedIPs(IPAddress+userIpAddress)
++++{
++++++++List<IPAddress>+deniedIPsToCheck+=+new+List<IPAddress>();
++++++++List<IPAddressRange>+deniedIPRangesToCheck+=+new+List<IPAddressRange>();

++++++++//+Populate+the+IPList+with+the+Single+IPs
++++++++if+(!string.IsNullOrEmpty(DeniedSingleIPs))
++++++++{
++++++++++++SplitAndAddSingleIPs(DeniedSingleIPs,+deniedIPsToCheck);
++++++++}

++++++++//+Populate+the+IPList+with+the+Masked+IPs
++++++++if+(!string.IsNullOrEmpty(DeniedIPRanges))
++++++++{
++++++++++++SplitAndAddIPRanges(DeniedIPRanges,+deniedIPRangesToCheck);
++++++++}

++++++++//+Check+if+there+are+more+settings+from+the+configuration+(Web.config)
++++++++if+(!string.IsNullOrEmpty(ConfigurationKeyDeniedSingleIPs))
++++++++{
++++++++++++string+configurationDeniedAdminSingleIPs+=+ConfigurationManager.AppSettings[ConfigurationKeyDeniedSingleIPs];
++++++++++++if+(!string.IsNullOrEmpty(configurationDeniedAdminSingleIPs))
++++++++++++{
++++++++++++++++SplitAndAddSingleIPs(configurationDeniedAdminSingleIPs,+deniedIPsToCheck);
++++++++++++}
++++++++}

++++++++if+(!string.IsNullOrEmpty(ConfigurationKeyDeniedMaskedIPs))
++++++++{
++++++++++++string+configurationDeniedAdminMaskedIPs+=+ConfigurationManager.AppSettings[ConfigurationKeyDeniedMaskedIPs];
++++++++++++if+(!string.IsNullOrEmpty(configurationDeniedAdminMaskedIPs))
++++++++++++{
++++++++++++++++SplitAndAddIPRanges(configurationDeniedAdminMaskedIPs,+deniedIPRangesToCheck);
++++++++++++}
++++++++}

++++++++return+deniedIPsToCheck.Any(a+=>+a.Equals(userIpAddress))+%7C%7C+deniedIPRangesToCheck.Any(a+=>+a.IsInRange(userIpAddress));
++++}

++++///+<summary>
++++///+Splits+the+incoming+ip+string+of+the+format+"IP,IP"+example+"10.2.0.0,10.3.0.0"+and+adds+the+result+to+the+IPAddress+list
++++///+</summary>
++++///+<param+name="ips">The+ips.</param>
++++///+<param+name="list">The+list.</param>
++++private+void+SplitAndAddSingleIPs(string+ips,+List<IPAddress>+list)
++++{
++++++++var+splitSingleIPs+=+ips.Split(',');
++++++++IPAddress+ip;

++++++++foreach+(string+ipString+in+splitSingleIPs)
++++++++{
++++++++++++if(IPAddress.TryParse(ipString,+out+ip))
++++++++++++++++list.Add(ip);
++++++++}
++++}

++++///+<summary>
++++///+Splits+the+incoming+ip+ranges+string+of+the+format+"IP-IP,IP-IP"+example+"10.2.0.0-10.2.255.255,10.3.0.0-10.3.255.255"+and+adds+the+result+to+the+IPAddressRange+list
++++///+</summary>
++++///+<param+name="ips">The+ips.</param>
++++///+<param+name="list">The+list.</param>
++++private+void+SplitAndAddIPRanges(string+ips,+List<IPAddressRange>+list)
++++{
++++++++var+splitMaskedIPs+=+ips.Split(',');
++++++++IPAddress+lowerIp;
++++++++IPAddress+upperIp;
++++++++foreach+(string+maskedIp+in+splitMaskedIPs)
++++++++{
++++++++++++var+ipRange+=+maskedIp.Split('-');
++++++++++++if+(IPAddress.TryParse(ipRange[0],+out+lowerIp)+&&+IPAddress.TryParse(ipRange[1],+out+upperIp))
++++++++++++++++list.Add(new+IPAddressRange(lowerIp,+upperIp));
++++++++}
++++}

++++protected+void+HandleUnauthorizedRequest(AuthorizationContext+context)
++++{
++++++++context.Result+=+new+RedirectToRouteResult(new+RouteValueDictionary+{+{+"Controller",+"Home"+},
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++{+"Action",+"Login"+},
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++{+"OriginalURL",+context.HttpContext.Request.Url.AbsoluteUri+}+});
++++}

++++protected+bool+AuthorizeCore(AuthorizationContext+context)
++++{
++++++++try
++++++++{
++++++++++++string+userIPString+=+context.HttpContext.Request.UserHostName;
++++++++++++IPAddress+userIPAddress+=+IPAddress.Parse(userIPString);

++++++++++++//+Check+that+the+IP+is+allowed+to+access
++++++++++++bool?+ipAllowed+=+CheckAllowedIPs(userIPAddress)+?+true+:+(bool?)null;

++++++++++++//+Check+that+the+IP+is+not+denied+to+access
++++++++++++ipAllowed+=+CheckDeniedIPs(userIPAddress)+?+false+:+ipAllowed;

++++++++++++if+(ipAllowed.HasValue)
++++++++++++{
++++++++++++++++return+ipAllowed.Value;
++++++++++++}

++++++++++++var+serverSession+=+context.HttpContext.Session;

++++++++++++UserSession+session+=+null;

++++++++++++//usersession+in+server+session
++++++++++++if+(serverSession[Settings.HttpContextUserSession]+!=+null)
++++++++++++{
++++++++++++++++session+=+(UserSession)serverSession[Settings.HttpContextUserSession];
++++++++++++++++Trace.TraceInformation($"[{MethodBase.GetCurrentMethod().Name}]+UserId:"+%2B+session.UserId+%2B+".+ClientId:+"+%2B+session.ClientId);
++++++++++++++++return+true;
++++++++++++}

++++++++++++//usersession+in+database+from+cookie
++++++++++++session+=+UserSession.GetSession(context.HttpContext.Request.Cookies.Get("sessionId").Value);
++++++++++++if+(session+!=+null)
++++++++++++{
++++++++++++++++Trace.TraceInformation($"[{MethodBase.GetCurrentMethod().Name}]+Session+found+for+cookie+{context.HttpContext.Request.Cookies.Get("sessionId").Value}");
++++++++++++++++serverSession[Settings.HttpContextUserSession]+=+session;
++++++++++++++++Trace.TraceInformation($"[{MethodBase.GetCurrentMethod().Name}]+UserId:"+%2B+session.UserId+%2B+".+ClientId:+"+%2B+session.ClientId);

++++++++++++++++return+true;
++++++++++++}
++++++++++++else
++++++++++++{
++++++++++++++++Trace.TraceInformation($"[{MethodBase.GetCurrentMethod().Name}]+No+session+found+for+cookie+{serverSession["cookie"]}");
++++++++++++++++return+false;
++++++++++++}

++++++++}
++++++++catch+(Exception+ex)
++++++++{
++++++++++++Trace.TraceError($"[{MethodBase.GetCurrentMethod().Name}]+exception:+{ex.Message}+-+trace+{ex.StackTrace}");
++++++++++++return+false;
++++++++}
++++}

++++public+void+OnAuthorization(AuthorizationContext+actionContext)
++++{
++++++++if+(IsPublic+==+false+&&+AuthorizeCore(actionContext)+==+false)
++++++++{
++++++++++++HandleUnauthorizedRequest(actionContext);
++++++++}
++++}
}|code-block|syntax|javascript|3255434|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/questions/2138706/how-to-check-a-input-ip-fall-in-a-specific-ip-range^0|0|T|1F|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|T|8|@]|9|@$D|U|E|V|1|W]]|A|$]]|$1|F|3|G|5|H|7|X|8|@]|9|@]|A|$I|J]]|$1|K|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]]|L|$M|$5|N|O|P|A|$Q|R]]]]

I needed a solution for this problem in MVC4 that could handle IPv6 and IP ranges. Also, I needed to use white and black-lists for authorization but also use a regular authorization process when the IP was neither.

This is the solution I came to after taking a lot from @sabbour and @Richard Szalay(<a href="https://stackoverflow.com/questions/2138706/how-to-check-a-input-ip-fall-in-a-specific-ip-range" title="How to check a input IP fall in a specific IP range">How to check a input IP fall in a specific IP range</a>) awesome posts so I post it back here for whomever it may help.

<pre><code>public class MagniAuthorizeAttribute : FilterAttribute, IAuthorizationFilter
{

 #region Allowed

 public bool IsPublic { get; set; }
 /// &lt;summary&gt;
 /// Comma seperated string of allowable IPs. Example "10.2.5.41,192.168.0.22"
 /// &lt;/summary&gt;
 /// &lt;value&gt;&lt;/value&gt; 
 public string AllowedSingleIPs { get; set; }

 /// &lt;summary&gt;
 /// Comma seperated string of allowable IPs with masks. Example "10.2.0.0;255.255.0.0,10.3.0.0;255.255.0.0"
 /// &lt;/summary&gt;
 /// &lt;value&gt;The masked I ps.&lt;/value&gt;
 public string AllowedIPRanges { get; set; }

 /// &lt;summary&gt;
 /// Gets or sets the configuration key for allowed single IPs
 /// &lt;/summary&gt;
 /// &lt;value&gt;The configuration key single I ps.&lt;/value&gt;
 public string ConfigurationKeyAllowedSingleIPs { get; set; }

 /// &lt;summary&gt;
 /// Gets or sets the configuration key allowed mmasked IPs
 /// &lt;/summary&gt;
 /// &lt;value&gt;The configuration key masked I ps.&lt;/value&gt;
 public string ConfigurationKeyAllowedMaskedIPs { get; set; }

 #endregion

 #region Denied
 /// &lt;summary&gt;
 /// Comma seperated string of denied IPs. Example "10.2.5.41,192.168.0.22"
 /// &lt;/summary&gt;
 /// &lt;value&gt;&lt;/value&gt;
 public string DeniedSingleIPs { get; set; }

 /// &lt;summary&gt;
 /// Comma seperated string of denied IPs with masks. Example "10.2.0.0;255.255.0.0,10.3.0.0;255.255.0.0"
 /// &lt;/summary&gt;
 /// &lt;value&gt;The masked I ps.&lt;/value&gt;
 public string DeniedIPRanges { get; set; }


 /// &lt;summary&gt;
 /// Gets or sets the configuration key for denied single IPs
 /// &lt;/summary&gt;
 /// &lt;value&gt;The configuration key single I ps.&lt;/value&gt;
 public string ConfigurationKeyDeniedSingleIPs { get; set; }

 /// &lt;summary&gt;
 /// Gets or sets the configuration key for denied masked IPs
 /// &lt;/summary&gt;
 /// &lt;value&gt;The configuration key masked I ps.&lt;/value&gt;
 public string ConfigurationKeyDeniedMaskedIPs { get; set; }

 #endregion


 /// &lt;summary&gt;
 /// Checks the allowed IPs.
 /// &lt;/summary&gt;
 /// &lt;param name="userIpAddress"&gt;The user ip address.&lt;/param&gt;
 /// &lt;returns&gt;&lt;/returns&gt;
 private bool CheckAllowedIPs(IPAddress userIpAddress)
 {
 List&lt;IPAddress&gt; allowedIPsToCheck = new List&lt;IPAddress&gt;();
 List&lt;IPAddressRange&gt; allowedIPRangesToCheck = new List&lt;IPAddressRange&gt;();

 // Populate the IPList with the Single IPs
 if (!string.IsNullOrEmpty(AllowedSingleIPs))
 {
 SplitAndAddSingleIPs(AllowedSingleIPs, allowedIPsToCheck);
 }

 // Populate the IPList with the Masked IPs
 if (!string.IsNullOrEmpty(AllowedIPRanges))
 {
 SplitAndAddIPRanges(AllowedIPRanges, allowedIPRangesToCheck);
 }

 // Check if there are more settings from the configuration (Web.config)
 if (!string.IsNullOrEmpty(ConfigurationKeyAllowedSingleIPs))
 {
 string configurationAllowedAdminSingleIPs = ConfigurationManager.AppSettings[ConfigurationKeyAllowedSingleIPs];
 if (!string.IsNullOrEmpty(configurationAllowedAdminSingleIPs))
 {
 SplitAndAddSingleIPs(configurationAllowedAdminSingleIPs, allowedIPsToCheck);
 }
 }

 if (!string.IsNullOrEmpty(ConfigurationKeyAllowedMaskedIPs))
 {
 string configurationAllowedAdminMaskedIPs = ConfigurationManager.AppSettings[ConfigurationKeyAllowedMaskedIPs];
 if (!string.IsNullOrEmpty(configurationAllowedAdminMaskedIPs))
 {
 SplitAndAddIPRanges(configurationAllowedAdminMaskedIPs, allowedIPRangesToCheck);
 }
 }

 return allowedIPsToCheck.Any(a =&gt; a.Equals(userIpAddress)) || allowedIPRangesToCheck.Any(a =&gt; a.IsInRange(userIpAddress));
 }

 /// &lt;summary&gt;
 /// Checks the denied IPs.
 /// &lt;/summary&gt;
 /// &lt;param name="userIpAddress"&gt;The user ip address.&lt;/param&gt;
 /// &lt;returns&gt;&lt;/returns&gt;
 private bool CheckDeniedIPs(IPAddress userIpAddress)
 {
 List&lt;IPAddress&gt; deniedIPsToCheck = new List&lt;IPAddress&gt;();
 List&lt;IPAddressRange&gt; deniedIPRangesToCheck = new List&lt;IPAddressRange&gt;();

 // Populate the IPList with the Single IPs
 if (!string.IsNullOrEmpty(DeniedSingleIPs))
 {
 SplitAndAddSingleIPs(DeniedSingleIPs, deniedIPsToCheck);
 }

 // Populate the IPList with the Masked IPs
 if (!string.IsNullOrEmpty(DeniedIPRanges))
 {
 SplitAndAddIPRanges(DeniedIPRanges, deniedIPRangesToCheck);
 }

 // Check if there are more settings from the configuration (Web.config)
 if (!string.IsNullOrEmpty(ConfigurationKeyDeniedSingleIPs))
 {
 string configurationDeniedAdminSingleIPs = ConfigurationManager.AppSettings[ConfigurationKeyDeniedSingleIPs];
 if (!string.IsNullOrEmpty(configurationDeniedAdminSingleIPs))
 {
 SplitAndAddSingleIPs(configurationDeniedAdminSingleIPs, deniedIPsToCheck);
 }
 }

 if (!string.IsNullOrEmpty(ConfigurationKeyDeniedMaskedIPs))
 {
 string configurationDeniedAdminMaskedIPs = ConfigurationManager.AppSettings[ConfigurationKeyDeniedMaskedIPs];
 if (!string.IsNullOrEmpty(configurationDeniedAdminMaskedIPs))
 {
 SplitAndAddIPRanges(configurationDeniedAdminMaskedIPs, deniedIPRangesToCheck);
 }
 }

 return deniedIPsToCheck.Any(a =&gt; a.Equals(userIpAddress)) || deniedIPRangesToCheck.Any(a =&gt; a.IsInRange(userIpAddress));
 }

 /// &lt;summary&gt;
 /// Splits the incoming ip string of the format "IP,IP" example "10.2.0.0,10.3.0.0" and adds the result to the IPAddress list
 /// &lt;/summary&gt;
 /// &lt;param name="ips"&gt;The ips.&lt;/param&gt;
 /// &lt;param name="list"&gt;The list.&lt;/param&gt;
 private void SplitAndAddSingleIPs(string ips, List&lt;IPAddress&gt; list)
 {
 var splitSingleIPs = ips.Split(',');
 IPAddress ip;

 foreach (string ipString in splitSingleIPs)
 {
 if(IPAddress.TryParse(ipString, out ip))
 list.Add(ip);
 }
 }

 /// &lt;summary&gt;
 /// Splits the incoming ip ranges string of the format "IP-IP,IP-IP" example "10.2.0.0-10.2.255.255,10.3.0.0-10.3.255.255" and adds the result to the IPAddressRange list
 /// &lt;/summary&gt;
 /// &lt;param name="ips"&gt;The ips.&lt;/param&gt;
 /// &lt;param name="list"&gt;The list.&lt;/param&gt;
 private void SplitAndAddIPRanges(string ips, List&lt;IPAddressRange&gt; list)
 {
 var splitMaskedIPs = ips.Split(',');
 IPAddress lowerIp;
 IPAddress upperIp;
 foreach (string maskedIp in splitMaskedIPs)
 {
 var ipRange = maskedIp.Split('-');
 if (IPAddress.TryParse(ipRange[0], out lowerIp) &amp;&amp; IPAddress.TryParse(ipRange[1], out upperIp))
 list.Add(new IPAddressRange(lowerIp, upperIp));
 }
 }

 protected void HandleUnauthorizedRequest(AuthorizationContext context)
 {
 context.Result = new RedirectToRouteResult(new RouteValueDictionary { { "Controller", "Home" },
 { "Action", "Login" },
 { "OriginalURL", context.HttpContext.Request.Url.AbsoluteUri } });
 }

 protected bool AuthorizeCore(AuthorizationContext context)
 {
 try
 {
 string userIPString = context.HttpContext.Request.UserHostName;
 IPAddress userIPAddress = IPAddress.Parse(userIPString);

 // Check that the IP is allowed to access
 bool? ipAllowed = CheckAllowedIPs(userIPAddress) ? true : (bool?)null;

 // Check that the IP is not denied to access
 ipAllowed = CheckDeniedIPs(userIPAddress) ? false : ipAllowed;

 if (ipAllowed.HasValue)
 {
 return ipAllowed.Value;
 }

 var serverSession = context.HttpContext.Session;

 UserSession session = null;

 //usersession in server session
 if (serverSession[Settings.HttpContextUserSession] != null)
 {
 session = (UserSession)serverSession[Settings.HttpContextUserSession];
 Trace.TraceInformation($"[{MethodBase.GetCurrentMethod().Name}] UserId:" + session.UserId + ". ClientId: " + session.ClientId);
 return true;
 }

 //usersession in database from cookie
 session = UserSession.GetSession(context.HttpContext.Request.Cookies.Get("sessionId").Value);
 if (session != null)
 {
 Trace.TraceInformation($"[{MethodBase.GetCurrentMethod().Name}] Session found for cookie {context.HttpContext.Request.Cookies.Get("sessionId").Value}");
 serverSession[Settings.HttpContextUserSession] = session;
 Trace.TraceInformation($"[{MethodBase.GetCurrentMethod().Name}] UserId:" + session.UserId + ". ClientId: " + session.ClientId);

 return true;
 }
 else
 {
 Trace.TraceInformation($"[{MethodBase.GetCurrentMethod().Name}] No session found for cookie {serverSession["cookie"]}");
 return false;
 }

 }
 catch (Exception ex)
 {
 Trace.TraceError($"[{MethodBase.GetCurrentMethod().Name}] exception: {ex.Message} - trace {ex.StackTrace}");
 return false;
 }
 }

 public void OnAuthorization(AuthorizationContext actionContext)
 {
 if (IsPublic == false &amp;&amp; AuthorizeCore(actionContext) == false)
 {
 HandleUnauthorizedRequest(actionContext);
 }
 }
}
</code></pre>

blocks|key|3255452|text|我发现sabbour的解决方案很好，但需要做两个更改才能对我的目的更有用：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3255453|如果允许的列表为空，则|3255454|允许访问。通过这种方式，您可以通过简单地更改配置(例如，用于测试部署)来允许任何IP，或者允许除明确拒绝的IP之外的所有IP。为此，我对IPList进行了扩展，使其包含一个Count属性，并将其作为CheckAllowedIPs的一部分进行检查：|ordered-list-item|3255455|3255456|_allowedIpListToCheck.CheckNumber(userIpAddress);|3255457|Override+_allowedIpListToCheck.Count+==+0+%7C%7C+return+HandleUnauthorizedRequest始终返回403。默认情况下，AuthorizeAtrribute返回401：|unordered-list-item|3255458|3255459|(AuthorizeCore((HttpContextBase)actionContext.HttpContext))+HandleUnauthorizedRequest(AuthorizationContext+OnAuthorization(AuthorizationContext+actionContext)+{如果新返回；HandleUnauthorizedRequest(actionContext)；}+protected+override+void+filterContext)+{+filterContext.Result+=新HttpStatusCodeResult(403，"IP访问被拒绝“)；}|3255460|下面是FilterIpAttribute类的完整变体：|3255461|public+class+FilterIpAttribute:AuthorizeAttribute
{

++++#region+Allowed
++++///+<summary>
++++///+Comma+seperated+string+of+allowable+IPs.+Example+"10.2.5.41,192.168.0.22"
++++///+</summary>
++++///+<value></value>
++++public+string+AllowedSingleIPs+{+get;+set;+}

++++///+<summary>
++++///+Comma+seperated+string+of+allowable+IPs+with+masks.+Example+"10.2.0.0;255.255.0.0,10.3.0.0;255.255.0.0"
++++///+</summary>
++++///+<value>The+masked+I+ps.</value>
++++public+string+AllowedMaskedIPs+{+get;+set;+}

++++///+<summary>
++++///+Gets+or+sets+the+configuration+key+for+allowed+single+IPs
++++///+</summary>
++++///+<value>The+configuration+key+single+I+ps.</value>
++++public+string+ConfigurationKeyAllowedSingleIPs+{+get;+set;+}

++++///+<summary>
++++///+Gets+or+sets+the+configuration+key+allowed+mmasked+IPs
++++///+</summary>
++++///+<value>The+configuration+key+masked+I+ps.</value>
++++public+string+ConfigurationKeyAllowedMaskedIPs+{+get;+set;+}

++++///+<summary>
++++///+List+of+allowed+IPs
++++///+</summary>
++++readonly+IpList+_allowedIpListToCheck+=+new+IpList();
++++#endregion

++++#region+Denied
++++///+<summary>
++++///+Comma+seperated+string+of+denied+IPs.+Example+"10.2.5.41,192.168.0.22"
++++///+</summary>
++++///+<value></value>
++++public+string+DeniedSingleIPs+{+get;+set;+}

++++///+<summary>
++++///+Comma+seperated+string+of+denied+IPs+with+masks.+Example+"10.2.0.0;255.255.0.0,10.3.0.0;255.255.0.0"
++++///+</summary>
++++///+<value>The+masked+I+ps.</value>
++++public+string+DeniedMaskedIPs+{+get;+set;+}


++++///+<summary>
++++///+Gets+or+sets+the+configuration+key+for+denied+single+IPs
++++///+</summary>
++++///+<value>The+configuration+key+single+I+ps.</value>
++++public+string+ConfigurationKeyDeniedSingleIPs+{+get;+set;+}

++++///+<summary>
++++///+Gets+or+sets+the+configuration+key+for+denied+masked+IPs
++++///+</summary>
++++///+<value>The+configuration+key+masked+I+ps.</value>
++++public+string+ConfigurationKeyDeniedMaskedIPs+{+get;+set;+}

++++///+<summary>
++++///+List+of+denied+IPs
++++///+</summary>
++++readonly+IpList+_deniedIpListToCheck+=+new+IpList();
++++#endregion

++++protected+override+bool+AuthorizeCore(HttpContextBase+httpContext)
++++{
++++++++if+(httpContext+==+null)
++++++++++++throw+new+ArgumentNullException("httpContext");

++++++++string+userIpAddress+=+httpContext.Request.UserIp();

++++++++try
++++++++{
++++++++++++//+Check+that+the+IP+is+allowed+to+access
++++++++++++bool+ipAllowed+=+CheckAllowedIPs(userIpAddress);

++++++++++++//+Check+that+the+IP+is+not+denied+to+access
++++++++++++bool+ipDenied+=+CheckDeniedIPs(userIpAddress);

++++++++++++//Only+allowed+if+allowed+and+not+denied

++++++++++++bool+finallyAllowed+=+ipAllowed+&&+!ipDenied;


++++++++++++return+finallyAllowed;
++++++++}
++++++++catch+(Exception+e)
++++++++{
++++++++++++//+Log+the+exception,+probably+something+wrong+with+the+configuration
++++++++}

++++++++return+true;+//+if+there+was+an+exception,+then+we+return+true
++++}

++++///+<summary>
++++///+Checks+the+allowed+IPs.
++++///+</summary>
++++///+<param+name="userIpAddress">The+user+ip+address.</param>
++++///+<returns></returns>
++++private+bool+CheckAllowedIPs(string+userIpAddress)
++++{
++++++++//+Populate+the+IPList+with+the+Single+IPs
++++++++if+(!string.IsNullOrEmpty(AllowedSingleIPs))
++++++++{
++++++++++++SplitAndAddSingleIPs(AllowedSingleIPs,+_allowedIpListToCheck);
++++++++}

++++++++//+Populate+the+IPList+with+the+Masked+IPs
++++++++if+(!string.IsNullOrEmpty(AllowedMaskedIPs))
++++++++{
++++++++++++SplitAndAddMaskedIPs(AllowedMaskedIPs,+_allowedIpListToCheck);
++++++++}

++++++++//+Check+if+there+are+more+settings+from+the+configuration+(Web.config)
++++++++if+(!string.IsNullOrEmpty(ConfigurationKeyAllowedSingleIPs))
++++++++{
++++++++++++string+configurationAllowedAdminSingleIPs+=+ConfigurationManager.AppSettings[ConfigurationKeyAllowedSingleIPs];
++++++++++++if+(!string.IsNullOrEmpty(configurationAllowedAdminSingleIPs))
++++++++++++{
++++++++++++++++SplitAndAddSingleIPs(configurationAllowedAdminSingleIPs,+_allowedIpListToCheck);
++++++++++++}
++++++++}

++++++++if+(!string.IsNullOrEmpty(ConfigurationKeyAllowedMaskedIPs))
++++++++{
++++++++++++string+configurationAllowedAdminMaskedIPs+=+ConfigurationManager.AppSettings[ConfigurationKeyAllowedMaskedIPs];
++++++++++++if+(!string.IsNullOrEmpty(configurationAllowedAdminMaskedIPs))
++++++++++++{
++++++++++++++++SplitAndAddMaskedIPs(configurationAllowedAdminMaskedIPs,+_allowedIpListToCheck);
++++++++++++}
++++++++}

++++++++return+_allowedIpListToCheck.Count+==+0+%7C%7C+_allowedIpListToCheck.CheckNumber(userIpAddress);
++++}

++++///+<summary>
++++///+Checks+the+denied+IPs.
++++///+</summary>
++++///+<param+name="userIpAddress">The+user+ip+address.</param>
++++///+<returns></returns>
++++private+bool+CheckDeniedIPs(string+userIpAddress)
++++{
++++++++//+Populate+the+IPList+with+the+Single+IPs
++++++++if+(!string.IsNullOrEmpty(DeniedSingleIPs))
++++++++{
++++++++++++SplitAndAddSingleIPs(DeniedSingleIPs,+_deniedIpListToCheck);
++++++++}

++++++++//+Populate+the+IPList+with+the+Masked+IPs
++++++++if+(!string.IsNullOrEmpty(DeniedMaskedIPs))
++++++++{
++++++++++++SplitAndAddMaskedIPs(DeniedMaskedIPs,+_deniedIpListToCheck);
++++++++}

++++++++//+Check+if+there+are+more+settings+from+the+configuration+(Web.config)
++++++++if+(!string.IsNullOrEmpty(ConfigurationKeyDeniedSingleIPs))
++++++++{
++++++++++++string+configurationDeniedAdminSingleIPs+=+ConfigurationManager.AppSettings[ConfigurationKeyDeniedSingleIPs];
++++++++++++if+(!string.IsNullOrEmpty(configurationDeniedAdminSingleIPs))
++++++++++++{
++++++++++++++++SplitAndAddSingleIPs(configurationDeniedAdminSingleIPs,+_deniedIpListToCheck);
++++++++++++}
++++++++}

++++++++if+(!string.IsNullOrEmpty(ConfigurationKeyDeniedMaskedIPs))
++++++++{
++++++++++++string+configurationDeniedAdminMaskedIPs+=+ConfigurationManager.AppSettings[ConfigurationKeyDeniedMaskedIPs];
++++++++++++if+(!string.IsNullOrEmpty(configurationDeniedAdminMaskedIPs))
++++++++++++{
++++++++++++++++SplitAndAddMaskedIPs(configurationDeniedAdminMaskedIPs,+_deniedIpListToCheck);
++++++++++++}
++++++++}

++++++++return+_deniedIpListToCheck.CheckNumber(userIpAddress);
++++}

++++///+<summary>
++++///+Splits+the+incoming+ip+string+of+the+format+"IP,IP"+example+"10.2.0.0,10.3.0.0"+and+adds+the+result+to+the+IPList
++++///+</summary>
++++///+<param+name="ips">The+ips.</param>
++++///+<param+name="list">The+list.</param>
++++private+void+SplitAndAddSingleIPs(string+ips,+IpList+list)
++++{
++++++++var+splitSingleIPs+=+ips.Split(',');
++++++++foreach+(string+ip+in+splitSingleIPs)
++++++++++++list.Add(ip);
++++}

++++///+<summary>
++++///+Splits+the+incoming+ip+string+of+the+format+"IP;MASK,IP;MASK"+example+"10.2.0.0;255.255.0.0,10.3.0.0;255.255.0.0"+and+adds+the+result+to+the+IPList
++++///+</summary>
++++///+<param+name="ips">The+ips.</param>
++++///+<param+name="list">The+list.</param>
++++private+void+SplitAndAddMaskedIPs(string+ips,+IpList+list)
++++{
++++++++var+splitMaskedIPs+=+ips.Split(',');
++++++++foreach+(string+maskedIp+in+splitMaskedIPs)
++++++++{
++++++++++++var+ipAndMask+=+maskedIp.Split(';');
++++++++++++list.Add(ipAndMask[0],+ipAndMask[1]);+//+IP;MASK
++++++++}
++++}

++++public+override+void+OnAuthorization(AuthorizationContext+actionContext)
++++{
++++++++if+(AuthorizeCore((HttpContextBase)actionContext.HttpContext))
++++++++++++return;
++++++++HandleUnauthorizedRequest(actionContext);
++++}

++++protected+override+void+HandleUnauthorizedRequest(AuthorizationContext+filterContext)
++++{
++++++++++++filterContext.Result+=+new+HttpStatusCodeResult(403,+"IP+Access+Denied");
++++}
}|code-block|syntax|javascript|3255462|一种在github上扩展获取用户IP的方法|offset|length|3255463|public+static+class+HttpUtils+{

++++public+static+string+UserIp(this+HttpRequestBase+request)
++++{
++++++++var+ip+=+request["HTTP_X_FORWARDED_FOR"];

++++++++if+(!string.IsNullOrWhiteSpace(ip))
++++++++{
++++++++++++ip+=+ip.Split(',').Last().Trim();
++++++++}

++++++++if+(string.IsNullOrWhiteSpace(ip))
++++++++{
++++++++++++ip+=+request.UserHostAddress;
++++++++}

++++++++return+ip;
++++}
}|3255464|最后是IPList修改(完整的源代码是here)：|3255465|internal+class+IpArrayList
{
++++//[...]
++++public+int+Count
++++{
++++++++get+{+return+_ipNumList.Count;+}
++++}

+}

public+class+IpList
{
++++++//[...]
+++++public+int+Count
+++++{
+++++++++get+{+return+_usedList.Count;+}
+++++}
}|3255466|entityMap|0|LINK|mutability|MUTABLE|url|https://gist.github.com/rdingwall/2028849|1|https://www.codeproject.com/Articles/2553/IP-list-Check-an-IP-number-against-a-list-in-C^0|0|0|0|0|0|0|0|0|0|0|3|6|0|0|0|J|4|1|0|0^^$0|@$1|2|3|4|5|6|7|1G|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1H|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|1I|8|@]|9|@]|A|$]]|$1|G|3|-4|5|6|7|1J|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|1K|8|@]|9|@]|A|$]]|$1|J|3|K|5|L|7|1L|8|@]|9|@]|A|$]]|$1|M|3|-4|5|6|7|1M|8|@]|9|@]|A|$]]|$1|N|3|O|5|6|7|1N|8|@]|9|@]|A|$]]|$1|P|3|Q|5|6|7|1O|8|@]|9|@]|A|$]]|$1|R|3|S|5|T|7|1P|8|@]|9|@]|A|$U|V]]|$1|W|3|X|5|6|7|1Q|8|@]|9|@$Y|1R|Z|1S|1|1T]]|A|$]]|$1|10|3|11|5|T|7|1U|8|@]|9|@]|A|$U|V]]|$1|12|3|13|5|6|7|1V|8|@]|9|@$Y|1W|Z|1X|1|1Y]]|A|$]]|$1|14|3|15|5|T|7|1Z|8|@]|9|@]|A|$U|V]]|$1|16|3|-4|5|6|7|20|8|@]|9|@]|A|$]]]|17|$18|$5|19|1A|1B|A|$1C|1D]]|1E|$5|19|1A|1B|A|$1C|1F]]]]

I found sabbour's solution excellent but needed to make two changes to be more useful for my purposes:

<ol>
<li>Allow access if the allowed list is empty. This way you can allow any IP by simply changing the config (e.g. for test deployments) or allow all IPs except explicitly denied ones. To do this I extended IPList to
include a Count property and check it as part of CheckAllowedIPs:

<pre><code>return _allowedIpListToCheck.Count == 0 || _allowedIpListToCheck.CheckNumber(userIpAddress);
</code></pre></li>
<li>Override HandleUnauthorizedRequest to always return 403. The AuthorizeAtrribute returns 401 by default: 

<pre><code>public override void OnAuthorization(AuthorizationContext actionContext)
{
 if (AuthorizeCore((HttpContextBase)actionContext.HttpContext))
 return;
 HandleUnauthorizedRequest(actionContext);
}

protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext)
{
 filterContext.Result = new HttpStatusCodeResult(403, "IP Access Denied");
}
</code></pre></li>
</ol>

Here is the full variation of the FilterIpAttribute class:

<pre><code>public class FilterIpAttribute:AuthorizeAttribute
{

 #region Allowed
 /// &lt;summary&gt;
 /// Comma seperated string of allowable IPs. Example "10.2.5.41,192.168.0.22"
 /// &lt;/summary&gt;
 /// &lt;value&gt;&lt;/value&gt;
 public string AllowedSingleIPs { get; set; }

 /// &lt;summary&gt;
 /// Comma seperated string of allowable IPs with masks. Example "10.2.0.0;255.255.0.0,10.3.0.0;255.255.0.0"
 /// &lt;/summary&gt;
 /// &lt;value&gt;The masked I ps.&lt;/value&gt;
 public string AllowedMaskedIPs { get; set; }

 /// &lt;summary&gt;
 /// Gets or sets the configuration key for allowed single IPs
 /// &lt;/summary&gt;
 /// &lt;value&gt;The configuration key single I ps.&lt;/value&gt;
 public string ConfigurationKeyAllowedSingleIPs { get; set; }

 /// &lt;summary&gt;
 /// Gets or sets the configuration key allowed mmasked IPs
 /// &lt;/summary&gt;
 /// &lt;value&gt;The configuration key masked I ps.&lt;/value&gt;
 public string ConfigurationKeyAllowedMaskedIPs { get; set; }

 /// &lt;summary&gt;
 /// List of allowed IPs
 /// &lt;/summary&gt;
 readonly IpList _allowedIpListToCheck = new IpList();
 #endregion

 #region Denied
 /// &lt;summary&gt;
 /// Comma seperated string of denied IPs. Example "10.2.5.41,192.168.0.22"
 /// &lt;/summary&gt;
 /// &lt;value&gt;&lt;/value&gt;
 public string DeniedSingleIPs { get; set; }

 /// &lt;summary&gt;
 /// Comma seperated string of denied IPs with masks. Example "10.2.0.0;255.255.0.0,10.3.0.0;255.255.0.0"
 /// &lt;/summary&gt;
 /// &lt;value&gt;The masked I ps.&lt;/value&gt;
 public string DeniedMaskedIPs { get; set; }


 /// &lt;summary&gt;
 /// Gets or sets the configuration key for denied single IPs
 /// &lt;/summary&gt;
 /// &lt;value&gt;The configuration key single I ps.&lt;/value&gt;
 public string ConfigurationKeyDeniedSingleIPs { get; set; }

 /// &lt;summary&gt;
 /// Gets or sets the configuration key for denied masked IPs
 /// &lt;/summary&gt;
 /// &lt;value&gt;The configuration key masked I ps.&lt;/value&gt;
 public string ConfigurationKeyDeniedMaskedIPs { get; set; }

 /// &lt;summary&gt;
 /// List of denied IPs
 /// &lt;/summary&gt;
 readonly IpList _deniedIpListToCheck = new IpList();
 #endregion

 protected override bool AuthorizeCore(HttpContextBase httpContext)
 {
 if (httpContext == null)
 throw new ArgumentNullException("httpContext");

 string userIpAddress = httpContext.Request.UserIp();

 try
 {
 // Check that the IP is allowed to access
 bool ipAllowed = CheckAllowedIPs(userIpAddress);

 // Check that the IP is not denied to access
 bool ipDenied = CheckDeniedIPs(userIpAddress);

 //Only allowed if allowed and not denied

 bool finallyAllowed = ipAllowed &amp;&amp; !ipDenied;


 return finallyAllowed;
 }
 catch (Exception e)
 {
 // Log the exception, probably something wrong with the configuration
 }

 return true; // if there was an exception, then we return true
 }

 /// &lt;summary&gt;
 /// Checks the allowed IPs.
 /// &lt;/summary&gt;
 /// &lt;param name="userIpAddress"&gt;The user ip address.&lt;/param&gt;
 /// &lt;returns&gt;&lt;/returns&gt;
 private bool CheckAllowedIPs(string userIpAddress)
 {
 // Populate the IPList with the Single IPs
 if (!string.IsNullOrEmpty(AllowedSingleIPs))
 {
 SplitAndAddSingleIPs(AllowedSingleIPs, _allowedIpListToCheck);
 }

 // Populate the IPList with the Masked IPs
 if (!string.IsNullOrEmpty(AllowedMaskedIPs))
 {
 SplitAndAddMaskedIPs(AllowedMaskedIPs, _allowedIpListToCheck);
 }

 // Check if there are more settings from the configuration (Web.config)
 if (!string.IsNullOrEmpty(ConfigurationKeyAllowedSingleIPs))
 {
 string configurationAllowedAdminSingleIPs = ConfigurationManager.AppSettings[ConfigurationKeyAllowedSingleIPs];
 if (!string.IsNullOrEmpty(configurationAllowedAdminSingleIPs))
 {
 SplitAndAddSingleIPs(configurationAllowedAdminSingleIPs, _allowedIpListToCheck);
 }
 }

 if (!string.IsNullOrEmpty(ConfigurationKeyAllowedMaskedIPs))
 {
 string configurationAllowedAdminMaskedIPs = ConfigurationManager.AppSettings[ConfigurationKeyAllowedMaskedIPs];
 if (!string.IsNullOrEmpty(configurationAllowedAdminMaskedIPs))
 {
 SplitAndAddMaskedIPs(configurationAllowedAdminMaskedIPs, _allowedIpListToCheck);
 }
 }

 return _allowedIpListToCheck.Count == 0 || _allowedIpListToCheck.CheckNumber(userIpAddress);
 }

 /// &lt;summary&gt;
 /// Checks the denied IPs.
 /// &lt;/summary&gt;
 /// &lt;param name="userIpAddress"&gt;The user ip address.&lt;/param&gt;
 /// &lt;returns&gt;&lt;/returns&gt;
 private bool CheckDeniedIPs(string userIpAddress)
 {
 // Populate the IPList with the Single IPs
 if (!string.IsNullOrEmpty(DeniedSingleIPs))
 {
 SplitAndAddSingleIPs(DeniedSingleIPs, _deniedIpListToCheck);
 }

 // Populate the IPList with the Masked IPs
 if (!string.IsNullOrEmpty(DeniedMaskedIPs))
 {
 SplitAndAddMaskedIPs(DeniedMaskedIPs, _deniedIpListToCheck);
 }

 // Check if there are more settings from the configuration (Web.config)
 if (!string.IsNullOrEmpty(ConfigurationKeyDeniedSingleIPs))
 {
 string configurationDeniedAdminSingleIPs = ConfigurationManager.AppSettings[ConfigurationKeyDeniedSingleIPs];
 if (!string.IsNullOrEmpty(configurationDeniedAdminSingleIPs))
 {
 SplitAndAddSingleIPs(configurationDeniedAdminSingleIPs, _deniedIpListToCheck);
 }
 }

 if (!string.IsNullOrEmpty(ConfigurationKeyDeniedMaskedIPs))
 {
 string configurationDeniedAdminMaskedIPs = ConfigurationManager.AppSettings[ConfigurationKeyDeniedMaskedIPs];
 if (!string.IsNullOrEmpty(configurationDeniedAdminMaskedIPs))
 {
 SplitAndAddMaskedIPs(configurationDeniedAdminMaskedIPs, _deniedIpListToCheck);
 }
 }

 return _deniedIpListToCheck.CheckNumber(userIpAddress);
 }

 /// &lt;summary&gt;
 /// Splits the incoming ip string of the format "IP,IP" example "10.2.0.0,10.3.0.0" and adds the result to the IPList
 /// &lt;/summary&gt;
 /// &lt;param name="ips"&gt;The ips.&lt;/param&gt;
 /// &lt;param name="list"&gt;The list.&lt;/param&gt;
 private void SplitAndAddSingleIPs(string ips, IpList list)
 {
 var splitSingleIPs = ips.Split(',');
 foreach (string ip in splitSingleIPs)
 list.Add(ip);
 }

 /// &lt;summary&gt;
 /// Splits the incoming ip string of the format "IP;MASK,IP;MASK" example "10.2.0.0;255.255.0.0,10.3.0.0;255.255.0.0" and adds the result to the IPList
 /// &lt;/summary&gt;
 /// &lt;param name="ips"&gt;The ips.&lt;/param&gt;
 /// &lt;param name="list"&gt;The list.&lt;/param&gt;
 private void SplitAndAddMaskedIPs(string ips, IpList list)
 {
 var splitMaskedIPs = ips.Split(',');
 foreach (string maskedIp in splitMaskedIPs)
 {
 var ipAndMask = maskedIp.Split(';');
 list.Add(ipAndMask[0], ipAndMask[1]); // IP;MASK
 }
 }

 public override void OnAuthorization(AuthorizationContext actionContext)
 {
 if (AuthorizeCore((HttpContextBase)actionContext.HttpContext))
 return;
 HandleUnauthorizedRequest(actionContext);
 }

 protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext)
 {
 filterContext.Result = new HttpStatusCodeResult(403, "IP Access Denied");
 }
}
</code></pre>

An extension method to get the User IP as suggested by osa on <a href="https://gist.github.com/rdingwall/2028849" rel="nofollow noreferrer">github</a>

<pre><code>public static class HttpUtils {

 public static string UserIp(this HttpRequestBase request)
 {
 var ip = request["HTTP_X_FORWARDED_FOR"];

 if (!string.IsNullOrWhiteSpace(ip))
 {
 ip = ip.Split(',').Last().Trim();
 }

 if (string.IsNullOrWhiteSpace(ip))
 {
 ip = request.UserHostAddress;
 }

 return ip;
 }
}
</code></pre>

And finally the IPList modification (full source is <a href="https://www.codeproject.com/Articles/2553/IP-list-Check-an-IP-number-against-a-list-in-C" rel="nofollow noreferrer">here</a>) :

<pre><code>internal class IpArrayList
{
 //[...]
 public int Count
 {
 get { return _ipNumList.Count; }
 }

 }

public class IpList
{
 //[...]
 public int Count
 {
 get { return _usedList.Count; }
 }
}
</code></pre>

blocks|key|3255498|text|我使用的最简单的方法|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3255499|首先：|3255500|在配置表(如果有)或任何其他表中添加一行，并将可访问的if插入到此表中。|3255501|第二：|3255502|将此操作筛选器添加到startup.cs|3255503|public+class+IpAuthAttribute+:+ActionFilterAttribute
{
++++public+override+void+OnActionExecuting(ActionExecutingContext+filterContext)
++++{
++++++++base.OnActionExecuting(filterContext);
++++++++string+ip+=+System.Web.HttpContext.Current.Request.UserHostAddress;
++++++++string+ips+=+"";
++++++++using+(var+db+=+new+DataBase())
++++++++{
++++++++++++ips+=+db.Configs.SingleOrDefault().IP;
++++++++}
++++++++if+(!ips.Contains(ip))
++++++++{
++++++++++++filterContext.Result+=+new+RedirectToRouteResult(new+System.Web.Routing.RouteValueDictionary(new
++++++++++++{
++++++++++++++++controller+=+"Account",
++++++++++++++++action+=+"OutOfRange"
++++++++++++}));
++++++++}
++++}
}|code-block|syntax|javascript|3255504|然后在你想要在你的控制器上的每个动作上使用它|3255505|[IpAuth]
public+ActionResult+Index()
{
++++return+View();
}|3255506|entityMap^0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|V|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|W|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|X|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|Y|8|@]|9|@]|A|$]]|$1|J|3|K|5|L|7|Z|8|@]|9|@]|A|$M|N]]|$1|O|3|P|5|6|7|10|8|@]|9|@]|A|$]]|$1|Q|3|R|5|L|7|11|8|@]|9|@]|A|$M|N]]|$1|S|3|-4|5|6|7|12|8|@]|9|@]|A|$]]]|T|$]]

Simplest way that im using

first: 

add one row on config table (if you have) or any other table and insert your accessible IPs to this table.

second:

add this action filter to your startup.cs

<pre><code>public class IpAuthAttribute : ActionFilterAttribute
{
 public override void OnActionExecuting(ActionExecutingContext filterContext)
 {
 base.OnActionExecuting(filterContext);
 string ip = System.Web.HttpContext.Current.Request.UserHostAddress;
 string ips = "";
 using (var db = new DataBase())
 {
 ips = db.Configs.SingleOrDefault().IP;
 }
 if (!ips.Contains(ip))
 {
 filterContext.Result = new RedirectToRouteResult(new System.Web.Routing.RouteValueDictionary(new
 {
 controller = "Account",
 action = "OutOfRange"
 }));
 }
 }
}
</code></pre>

then use this on every action you want on your controllers

<pre><code>[IpAuth]
public ActionResult Index()
{
 return View();
}
</code></pre>

I have an ASP.NET MVC project containing an AdminController class and giving me URls like these:
<blockquote>
<a href="http://example.com/admin/AddCustomer" rel="noreferrer">http://example.com/admin/AddCustomer</a>
<a href="http://examle.com/Admin/ListCustomers" rel="noreferrer">http://examle.com/Admin/ListCustomers</a>
</blockquote>
I want to configure the server/app so that URIs containing /Admin are only accessible from the 192.168.0.0/24 network (i.e. our LAN)
I'd like to restrict this controller to only be accessible from certain IP addresses.
Under WebForms, /admin/ was a physical folder that I could restrict in IIS... but with MVC, of course, there's no physical folder. Is this achievable using web.config or attributes, or do I need to intercept the HTTP request to achieve this?

Restrict access to a specific controller by IP address in ASP.NET MVC Beta

服务器

我有一个包含AdminController类的ASP.NET MVC项目，并给出了如下的URls： 我想配置服务器/应用程序，以便包含/Admin的URI只能从192.168.0.0/24网络(即我们的局域网)访问我想将此控制器限制为只能从某些IP地址访问。在WebForms下，/admin/是一个物理文件夹，我可以在...

问在ASP.NET MVC Beta中通过IP地址限制对特定控制器的访问
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问在ASP.NET MVC Beta中通过IP地址限制对特定控制器的访问EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问在ASP.NET MVC Beta中通过IP地址限制对特定控制器的访问
EN