Allow only one web app to call a web service
<p>How to configure that a web service only be called by one specific web application? Both ones are in the same IIS server. 
Framework: 2.0</p>

<p>I think that setting web.config of web service would be enough. 
On this example, I'm setting web.config of web service. Web service will be called only by one IP address (127.0.0.1 is IP of IIS Server):</p>

<pre><code>&lt;location path="resources"&gt;
  &lt;system.webServer&gt;
    &lt;security&gt;
      &lt;ipSecurity allowUnlisted="false"&gt;
        &lt;clear/&gt;
        &lt;add ipAddress="127.0.0.1"/&gt;
      &lt;/ipSecurity&gt;
    &lt;/security&gt;
  &lt;/system.webServer&gt;
&lt;/location&gt;
</code></pre>

<p>Would it be ok?</p>
