Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am thinking of creating an app that only allows users connected via a cell tower. Are there IP ranges that are only used by cell towers?

I realize that it may be a 'moving target', but does anyone know of a list of the current blocks (like black lists for spammers).

I do not want to rely on headers as they can be spoofed. IP address seems to be the only true way of identifying the client is on a cell network via IP.

share|improve this question

closed as not constructive by Zoredache, Andrew M., Chopper3, EEAA, RobM Jun 7 '12 at 19:12

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

How addresses are assigned by an organization is up to that organization. Say you figure out it out today, it could be different tomorrow. – Zoredache Jun 7 '12 at 18:43
Seriously, telling people to use "secure networks" because you don't want to properly encrypt communication sounds plain wrong to me. – thejh Jun 7 '12 at 19:32

Which address? The address assigned to a phone or {3,4}G modem can be an RFC 1918 address, an unused public address, or even an IPv6 address which is proxied to v4. These typically sit behind some sort of NAT or proxy device so if you're checking the address from the server end you might be able to use a simple reverse DNS lookup or an ISP database.

To complicate matters further a lot of devices (e.g. my wife's phone) can act as an access point including another NAT layer. What happens when she tethers her iPad to her phone via 3G?

share|improve this answer
the second part of your statemnt throws more of a damper on my hope for this implementation. thanks for the reminder... – roberthuttinger Jun 7 '12 at 18:52

There's no such thing as "cell tower IP ranges," especially since that cell tower could be on any provider, on any tower, or even WiFi in some cases. The point is, you should never NEED to rely on this information.

If you want to display a mobile version of the site to visitors, parse the user agent string to figure this out. If a user spoofs their information and views a non-mobile friendly version, then that user is a power user and can do whatever he or she wants. Otherwise, there is zero reason to restrict anything based on their IP.

share|improve this answer

Yes, but you'd have to identify the netblock for every cellular provider you wish you allow. A better way would be to code your phone application to detect for data connectivity without a WiFi AP being associated.

share|improve this answer
it is a web based app. I cant rely on headers as they can be spoofed... – roberthuttinger Jun 7 '12 at 18:44
Then you need to code based on the User Agent String. – jfalcon Jun 7 '12 at 18:46
Hate to break it to you but even 3G/4G networks are susceptible to 'sniffing'. Look at OpenBTS/OpenBSC. It takes next to nothing to simulate a cell tower, disable all encryption on the phone and sniff everything across the 'wire'. If you're concern about 'sniffing' then you should utilize SSL between the browser and the site. – jfalcon Jun 7 '12 at 18:55
+1 @jfalcon : If you're worried about sniffing, use SSL. – mfinni Jun 7 '12 at 18:58
This is like a bank only allowing customers who bring their own armed guard. The bank should provide it so that it's invisible to the customers. – David Schwartz Jun 7 '12 at 23:02

Not the answer you're looking for? Browse other questions tagged or ask your own question.