[quoted text, click to view] "Hariprasad" wrote:
> How can I get IP address of the requested client?
I'd avoid posting your real IPs to Usenet newsgroups, just in case.
I'm not sure why you feel you need the internal IPs, that seems like an
unusual need. But if you can't get the internal IPs from the HTTP headers
because they've been stripped, I believe you could probably use client-side
tools like a cookie and/or Javascript to ask the clients to send you that
information with each page request, or with the initial user login form if
there is one. Some web sites use this method to defeat anonymous proxies.
Of course, clients can disable and inhibit those responses, but you could
prevent those clients from connecting if you wanted to.
Unless those internal IPs are static IPs, which they usually aren't,
tracking the internal IP seems of limited use, if you're trying to track who
is connecting, all the way down to the individual user. If you have a
temporary DHCP IP address with a lease of 30 days, your machine starts trying
to get a new one at 15 days, and that means that in half that time, in 7
days, your logs have a 50% chance of no longer having the correct IP address.
The new IP will probably be in the same subnet, so you'll still know the
general location.
--
kind regards,
Karl Levinson, CISSP, CCSA, MCSE [MS MVP]
-------------------------
Microsoft Security FAQ:
http://www.securityadmin.info