限制MsSql Ip地址访问

ALTER TRIGGER [tr_connection_limit]
ON ALL SERVER WITH EXECUTE AS 'sa'
FOR LOGON
AS
BEGIN

IF ORIGINAL_LOGIN()= 'sa'
--允许sa在本机和下面的IP登录
AND
(SELECT EVENTDATA().value('(/EVENT_INSTANCE/ClientHost)[1]', 'NVARCHAR(15)'))
NOT IN('<local machine>','127.0.0.1')
     ROLLBACK;
END