> The only problem is that WEB server has been configured to allows access to > this > site based on a range of IP address. If a new organization subscribes to > this site > (flat fee, unlimited access only), their IP range is made known to the web > server (the Sys Admin's job). > > So my initial solution was for the Sys Admin to log IP address of all hits > that > were not allowed by the server, then include these in his WEB servers list > of > allowed IPs. The Sys Admin wants to include a range of IP's only (of > course why not?). Pardon me for asking what me seem like a foolish question, but if you're restricting access based on IP addresses (presumably to ensure only paying individuals have access), then are you sure you want to *automatically* add those to the list of allowed IPs? Also, if, for instance, a DSL ISP owns a large block of IPs (like a class B), and a customer of theirs (with, say, 16 addresses) accesses your site, do you want to give access to the entire DSL ISP (65000 hosts) or only 16? I would assume 16, but the arin entries would show the entire block, would they not? > So I said fine. I wrote a script that takes this IP address, queries > http://www.arin.net/whois/ > and then returns the range. -- Geoff Silver <geoff at uslinux dot net> "If Bill Gates had a nickel for every time Windows crashed... Oh wait, he does"