Subject:
|
Re: Enhanced verification (was: Re: What the F.......)
|
Newsgroups:
|
lugnet.admin.general
|
Date:
|
Tue, 14 Dec 1999 21:33:37 GMT
|
Viewed:
|
174 times
|
| |
| |
On Tue, 14 Dec 1999 20:07:01 GMT, "Todd Lehman" <lehman@javanet.com>
wrote:
> In lugnet.admin.general, Eric Kingsley writes:
> > Could something check Brad's IP to ensure that his combination of Name and
> > E-mail address are coming from a known LEGO IP?
>
> Yes. But that gets pretty restrictive. Brad or other TLC employees couldn't
> use dynamic IP from home then, if they ever wanted to check in at night on a
> home dial-up modem system.
How about a bit of perl that checks for @lego.com, gets the IP, and
cross-references it with the RIPE whois database to make sure it is a
legitimate lego address? (ie, registered to the person who does the
registering for lego - which seems to be the same person for all)
It does prevent write access from home (assuming, of course, that LEGO
emplyees don't dial in to the corporate net one way or the other (VPN
or so)), but it's less restrictive than single-IP and less likely to
break.
Jasper
|
|
Message is in Reply To:
7 Messages in This Thread:
- Entire Thread on One Page:
- Nested:
All | Brief | Compact | Dots
Linear:
All | Brief | Compact
|
|
|
|