C# IIS IP限制访问.doc

空间引用using System.Text;using System.Reflection;using System.DirectoryServices;using System.Text.RegularExpressions;using System.Security.Principal;using System.DirectoryServices.ActiveDirectory;using System.Security.AccessControl;/ / 拒绝访问限制,格式如:0或10.10.10.*(可带*号,值为:0-255)或0, / public static bool setIPGrant(string metabasePath, string item) ConfigIIS.SetGrantByDefault(metabasePath, GrantByDefault, false); return ConfigIIS.SetIPSecurityProperty(metabasePath, IPGrant, item); / / 拒绝访问限制,格式如:10.10.10.*(可带*号,值为:min-max) / public static bool setIPGrant(string metabasePath, string item,int min,int max) ConfigIIS.SetGrantByDefault(metabasePath, GrantByDefault, false); return ConfigIIS.SetIPSecurityProperty(metabasePath, IPGrant, item,min,max); / / 拒绝访问限制,格式如:0或10.10.10.*(可带*号,值为:0-255)或 / public static bool setIPDeny(string metabasePath, string item) ConfigIIS.SetGrantByDefault(metabasePath, GrantByDefault, false); return ConfigIIS.SetIPSecurityProperty(metabasePath, IPDeny, item); / / 拒绝访问限制,格式如:10.10.10.*(可带*号,值为:min-max) / public static bool setIPDeny(string metabasePath, string item,int min,int max) ConfigIIS.SetGrantByDefault(metabasePath, GrantByDefault, false); return ConfigIIS.SetIPSecurityProperty(metabasePath, IPDeny, item,min,max); / / 授权访问限制,格式如:0或10.10.10.*(可带*号,值为:0-255)或0, / public static bool setDomainGrant(string metabasePath, string item) ConfigIIS.SetGrantByDefault(metabasePath, GrantByDefault, true); return ConfigIIS.SetIPSecurityProperty(metabasePath, DomainGrant, item); / / 授权访问限制,格式如:10.10.10.*(可带*号,值为:min-max) / public static bool setDomainGrant(string metabasePath, string item,int min,int max) ConfigIIS.SetGrantByDefault(metabasePath, GrantByDefault, true); return ConfigIIS.SetIPSecurityProperty(metabasePath, DomainGrant, item,min,max); / / 授权访问限制,格式如:0或10.10.10.*(可带*号,值为:0-255)或 / public static bool setDomainDeny(string metabasePath, string item) ConfigIIS.SetGrantByDefault(metabasePath, GrantByDefault, true); return ConfigIIS.SetIPSecurityProperty(metabasePath, DomainDeny, item); / / 授权访问限制,格式如:10.10.10.*(可带*号,值为:min-max) / public static bool setDomainDeny(string metabasePath, string item,int min,int max) ConfigIIS.SetGrantByDefault(metabasePath, GrantByDefault, true); return ConfigIIS.SetIPSecurityProperty(metabasePath, DomainDeny, item,min,max); / / 授权访问初始化 / / public static void GrantByDefaultTrue(string metabasePath) ConfigIIS.SetGrantByDefault(metabasePath, GrantByDefault, false); ConfigIIS.SetGrantByDefault(metabasePath, GrantByDefault, true); / / 拒绝访问初始化 / / public static void GrantByDefaultFalse(string metabasePath) ConfigIIS.SetGrantByDefault(metabasePath, GrantByDefault, true); ConfigIIS.SetGrantByDefault(metabasePath, GrantByDefault, false); / / IP限制操作 / public static bool SetIPSecurityProperty(string metabasePath, string member, string item) mes = ; try if (IPGrant != member) & (IPDeny != member) & (DomainGrant != member) & (DomainDeny != member) ConfigIIS.mes += 在SetIPSecurityProperty():传参错误,该方法参数member应为 IPGrant|IPDeny|DomainGrant|DomainDeny n; return false; else List list = process(item); DirectoryEntry path = new DirectoryEntry(metabasePath); path.RefreshCache(); object ipsecObj = path.Invoke(Get, new string IPSecurity ); Type t = ipsecObj.GetType(); Array data = (Array)t.InvokeMember(member, BindingFlags.GetProperty, null, ipsecObj, null); bool exists = false; for (int i = 0; i list.Count; i+) exists = false; foreach (object dataItem in data) if (dataItem.ToString().StartsWith(listi) ConfigIIS.mes += 在SetIPSecurityProperty(): 已经存在 + listi + n; exists = true; if (!exists) object newData = new objectdata.Length + 1; data.CopyTo(newData, 0); newData.SetValue(listi, data.Length); t.InvokeMember(member, BindingFlags.SetProperty, null, ipsecObj, new object newData ); path.Invoke(Put, new object IPSecurity, ipsecObj ); path.CommitChanges(); path.RefreshCache(); ipsecObj = path.Invoke(Get, new string IPSecurity ); data = (Array)t.InvokeMember(member, BindingFlags.GetProperty, null, ipsecObj, null); return true; catch (Exception ex) if (HRESULT 0x80005006 = ex.Message) ConfigIIS.mes += 在SetIPSecurityProperty():目录不存在 + metabasePath + n; else ConfigIIS.mes += 在SetIPSecurityProperty():出现以下异常: n + ex.Message + n; return false; / / IP限制操作 / public static bool SetIPSecurityProperty(string metabasePath, string member, string item,int min,int max) mes = ; try if (IPGrant != member) & (IPDeny != member) & (DomainGrant != member) & (DomainDeny != member) ConfigIIS.mes += 在SetIPSecurityProperty():传参错误,该方法参数member应为 IPGrant|IPDeny|DomainGrant|DomainDeny n; return false; else List list = process(item,min,max); DirectoryEntry path = new DirectoryEntry(metabasePath); path.RefreshCache(); object ipsecObj = path.Invoke(Get, new string IPSecurity ); Type t = ipsecObj.GetType(); Array data = (Array)t.InvokeMember(member, BindingFlags.GetProperty, null, ipsecObj, null); bool exists = false; for (int i = 0; i list.Count; i+) exists = false; foreach (object dataItem in data) if (dataItem.ToString().StartsWith(listi) ConfigIIS.mes += 在SetIPSecurityProperty(): 已经存在 + listi + n; exists = true; if (!exists) object newData = new objectdata.Length + 1; data.CopyTo(newData, 0); newData.SetValue(listi, data.Length); t.InvokeMember(member, BindingFlags.SetProperty, null, ipsecObj, new object newData ); path.Invoke(Put, new object IPSecurity, ipsecObj ); path.CommitChanges(); path.RefreshCache(); ipsecObj = path.Invoke(Get, new string IPSecurity ); data = (Array)t.InvokeMember(member, BindingFlags.GetProperty, null, ipsecObj, null); return true; catch (Exception ex) if (HRESULT 0x80005006 = ex.Message) ConfigIIS.mes += 在SetIPSecurityProperty():目录不存在 + metabasePath + n; else ConfigIIS.mes += 在SetIPSecurityProperty():出现以下异常: n + ex.Message + n; return false; / / 默认访问设置(true为授权,false为拒绝) / public static void SetGrantByDefault(string metabasePath, string member, string item) mes = ; try if (GrantByDefault != member) ConfigIIS.mes += 在SetGrantByDefault():传参错误,该方法参数member应为 GrantByDefault n; else DirectoryEntry path = new DirectoryEntry(metabasePath); path.RefreshCache(); object ipsecObj = path.Invoke(Get, IPSecurity); Type t = ipsecObj.GetType(); bool data = (bool)t.InvokeMember(member, BindingFlags.GetProperty, null, ipsecObj, null); string GrantByDefault = ; if (item.ToLower() != data.ToString().ToLower() object a = new string item ; t.InvokeMember(member, BindingFlags.SetProperty, null, ipsecObj, a, null); path.Invoke(Put, IPSecurity, ipsecObj); path.CommitChanges(); path.RefreshCache(); ipsecObj = path.Invoke(Get, (IPSecurity); data = (bool)t.InvokeMember(member, BindingFlags.GetProperty, null, ipsecObj, null); else if (data) GrantByDefault = 授权访问; else GrantByDefault = 拒绝访问; ConfigIIS.mes += 在SetGrantByDefault():默认方式已经是 + GrantByDefault + ,没必要改变n; catch (Exception ex) if (HRESULT 0x80005006 = ex.Message) ConfigIIS.mes += 在SetGrantByDefault()目录不存在: + metabasePath + n; else ConfigIIS.mes += 在SetGrantByDefault()出现以下异常: n + ex.Message + n; / / 判断IP中是否有带*号,如带*号为0-255的值 / / IP / public static List process(string ip) List list = new List(); try if (ip = & ip.IndexOf(*) 0) return null;