Ip range into expression value

[avb]

Hi,

Iam using chart policy and i want to know if it is possible to set an IP range with expression value "session.clientIP" ?
For example "session.ClientIP=="192.168.1.80-192.168.1.90"
If it not possible is there another way?

thank you

[adrien]

there's the InSubnet member function of the IP address object.

Code: Select all

Session.ClientIp.InSubnet("192.168.1.0", "255.255.255.0")

Regards

Adrien

[adrien]

I'll add a InRange member as well.

Adrien

[avb]

Yes there is the subnet but I need to create different policy by IP range.
For exemple , 192.168.1.80-192.168.1.90 ---> deny web access except website in a datalist.
192.168.1.200-192.168.1.210 ---> deny web access except websites in another datalist etc ..

I know we can do it with Access rule control but I would like to know if it possible with chart policy.

thank you.

[adrien]

Hi

yes you can do it with flow chart. You can also do string-based matching if the ranges work out, e.g. using a map lookup, you could check {{Session.ClientIp}} and match against 192.168.0.8* will get 80 - 89. etc.

I added a InRange member function to the IPAddress object, so you'll be able to use ranges instead of network/mask to define ranges that don't fit nicely into subnets. This will be in the next release.

Regards

Adrien

[surajbliss]

im using binatone adsl modem = router , it also connected with switches, in my office around 20 pc, but only 3 pc are required internet access. How can i block other net work to access internet . b

[adrien]

HI

the easiest way is to just allow those IPs you want to have access, and deny every other IP. There is a tab in each web access rule that defines which IP(s) it applies to.

Regards

Adrien

[avb]

Ok thank you for the tips : 192.168.1.8* . Its works well.
But if my ip range is only 192.168.1.83 to 192.168.1.88 ( not all the 192.168.1.80 to 89 range) i have to wait the following release if i understand :)
When do you plan to release the next version?

Thank you adrien.

[adrien]

Hi

I have a build you can try if you like. If you can submit a support ticket (just email support@wingate.com) I can send you a download link.

Regards

Adrien

[avb]

Hi,

To manage an IP range I use the expression : Session.ClientIP.inRange("192.168.1.10","192.168.1.50") and i works well.
But now i need to add one thing, is it possible de add a single host in the same expression evaluator with IP range .

For example:

Session.ClientIP.inRange("192.168.1.10","192.168.1.50"),Session.ClientIP("192.168.1.116") ?

[adrien]

Hi

you can use "or" or "||"

e.g.

Session.ClientIP.InRange("192.168.1.10","192.168.1.50") OR Session.ClientIP.InRange("192.168.1.116", "192.168.1.116")

or

Session.ClientIP.InRange("192.168.1.10","192.168.1.50") OR (Session.ClientIP == "192.168.1.116")

Regards

Adrien

[avb]

Thank you very much.