Security restriction in WCF (To expose specific binding and end point in client config when service is consumed by any client.)

See more:

WCF

Dear Team...
1) I have created a WCF Service using VS 2010 with multiple binding and multiple end points.
2) WCF service is deployed in IIS 5.1 with Windows XP OS.
When I try to consume the service in client .config multiple Binding and end point are exposed which is a security concern to me.
So how can I restrict this thing? If Customer wants basicHttpBinding then only basicHttpBinding endpoint should be available in client .config not all .
These things also apply for other like wsHttpBinding, wsFederationHttpBinding, wsDualHttpBinding or netTcpBinding.

Can anyone give me idea or any useful url how to resolve the problem.

Client Config Sample Code:-

<system.serviceModel>
    <bindings>
      <basicHttpBinding>

        <binding name="XX1" closeTimeout="00:01:00"
          openTimeout="00:01:00" receiveTimeout="00:10:00" sendTimeout="00:01:00"
          allowCookies="false" bypassProxyOnLocal="false" hostNameComparisonMode="StrongWildcard"
          maxBufferSize="65536" maxBufferPoolSize="524288" maxReceivedMessageSize="65536"
          messageEncoding="Text" textEncoding="utf-8" transferMode="Buffered"
          useDefaultWebProxy="true">
          <readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="16384"
            maxBytesPerRead="4096" maxNameTableCharCount="16384" />
          <security mode="None">
            <transport clientCredentialType="None" proxyCredentialType="None"            realm="" />
            <message clientCredentialType="UserName" algorithmSuite="Default" />
          </security>
        </binding>
      </basicHttpBinding>

      <wsDualHttpBinding>
        <binding name="XX2" closeTimeout="00:01:00"
          openTimeout="00:01:00" receiveTimeout="00:10:00" sendTimeout="00:01:00"
          bypassProxyOnLocal="false" transactionFlow="false" hostNameComparisonMode="StrongWildcard"
          maxBufferPoolSize="524288" maxReceivedMessageSize="65536" messageEncoding="Text"
          textEncoding="utf-8" useDefaultWebProxy="true">
          <readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="16384"
            maxBytesPerRead="4096" maxNameTableCharCount="16384" />
          <reliableSession ordered="true" inactivityTimeout="00:10:00" />
          <security mode="None">
            <message clientCredentialType="Windows" negotiateServiceCredential="true" />
          </security>
        </binding>
      </wsDualHttpBinding>

      <wsHttpBinding>
        <binding name="XX" closeTimeout="00:01:00"
          openTimeout="00:01:00" receiveTimeout="00:10:00" sendTimeout="00:01:00"
          bypassProxyOnLocal="false" transactionFlow="false" hostNameComparisonMode="StrongWildcard"
          maxBufferPoolSize="524288" maxReceivedMessageSize="65536" messageEncoding="Text"
          textEncoding="utf-8" useDefaultWebProxy="true" allowCookies="false">
          <readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="16384"
            maxBytesPerRead="4096" maxNameTableCharCount="16384" />
          <reliableSession ordered="true" inactivityTimeout="00:10:00"
            enabled="false" />
          <security mode="None">
            <transport clientCredentialType="Windows" proxyCredentialType="None"
              realm="" />
            <message clientCredentialType="Windows" negotiateServiceCredential="true" />
          </security>
        </binding>

        <binding name="XX3" closeTimeout="00:01:00"
          openTimeout="00:01:00" receiveTimeout="00:10:00" sendTimeout="00:01:00"
          bypassProxyOnLocal="false" transactionFlow="false" hostNameComparisonMode="StrongWildcard"
          maxBufferPoolSize="524288" maxReceivedMessageSize="65536" messageEncoding="Text"
          textEncoding="utf-8" useDefaultWebProxy="true" allowCookies="false">
          <readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="16384"
            maxBytesPerRead="4096" maxNameTableCharCount="16384" />
          <reliableSession ordered="true" inactivityTimeout="00:10:00"
            enabled="false" />
          <security mode="None">
            <transport clientCredentialType="Windows" proxyCredentialType="None"
              realm="" />
            <message clientCredentialType="Windows" negotiateServiceCredential="true" />
          </security>
        </binding>
      </wsHttpBinding>
    </bindings>

    <client>
      <endpoint address="http://YYY/ZZZ/AAA.svc"
        binding="wsHttpBinding" bindingConfiguration="AAA"
        contract="SVC_AAA.IAAA"
        name="AAA" />
      <endpoint address=" http://YYY/ZZZ/AAA.svc /secure"
        binding="basicHttpBinding" bindingConfiguration="AAA1"
        contract="SVC_AAA.IAAA"
        name="AAA1" />
      <endpoint address=" http://YYY/ZZZ/AAA.svc /wsDual"
        binding="wsDualHttpBinding" bindingConfiguration="FujiFilmBusinessAccess2"
        contract="SVC_AAA.IAAA"
        name="AAA2" />
      <endpoint address="http://YYY/ZZZ/AAA.svc /wsFeder"
        binding="wsHttpBinding" bindingConfiguration="AAA3"
        contract="SVC_AAA.IAAA"
        name="AAA3" />
    </client>
  </system.serviceModel>

Your support/suggestions is highly appreciated and welcome.
Thank's
Prasanta Kumar Pradhan
http://www.acuvate.com