>> can I test for allowed IP address's as access is requested,
You can, but it would really slow things down. Here's some (untested) possible code;
In WebHandler procedure,
ProcessRequest method
before the parent call
self.RequestData = p_String
if allowed(self.requestdata.fromip) = false
return
end
Cheers
Bruce