Question

Possible Duplicate:
Restricting WCF Service access to only localhost

I have a WCF method set up for a .NET project.

I can enable the endpoint to work over https and / or http.

However, I only want the HTTP version (bindingConfiguration="webBinding") to work on localhost. Is there a way to restrict this in the web.config?

I had very limited success setting <endpoint address="localhost/"myproj/mysvc.svc" /> but ultimately didnt work.

Answer 1

Source: Configure WCF for LOCALHOST-only listening

Try to set the BasicHttpBinding.HostNameComparisonMode Property to HostNameComparisonMode.Exact.

or in config file..

 <bindings>
          <basicHttpBinding>
            <binding name="Binding1"
                     hostNameComparisonMode ="Exact">
              <security mode="None" />
            </binding>
          </basicHttpBinding>
    </bindings>

But better is to use the named pipe binding, which should support whatever message exchange pattern you are using (it supports request-response, as well as the same concurrency and session state modes that WS supports).

From the section of MSDN titled “Choosing a Transport”

Hope this help..