Re: Prevent Repeated Requests?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: John Cesta (support_at_serverautomationtools.com)
Date: 02/16/04 

Date: Mon, 16 Feb 2004 22:30:23 GMT

On Mon, 16 Feb 2004 17:06:42 -0500, "Glen Davis, Jr."
<gdavisjr@poboxes.com> wrote:

>Is there a way for IIS to block an IP address for a specified length of time
>if it receives repeated requests for the same page? We have had situations
>recently where one address requests the same page hundreds of times per
>minute for hours. It's irritating to have to clean up the web report, but
>I'm sure it also slows the response time of the IIS server. If IIS can't do
>this, can a Cisco PIX 515e firewall?

Any firewall can do it. Just put the IP in and have it reject any
requests from the IP.

You could also use Win2ks tcpip security to reject requests from an
IP.

John Cesta

---------------------------------
The CPU Checker - Maximize Server Uptime
LogFileManager - The only IIS Logfile Management Tool
DomainReportIt PRO - Helps Convert IIS Installs
http://www.serverautomationtools.com

>
>Thanks!
>Glen
>

Relevant Pages

  • Re: I was hacked
    ... Only me noticing that the requests seemed to come from a LAN? ... To secure IIS somewhat, remove all the virtual directories even if they are ... > Do you have some kind of application level firewall on this machine? ... a series of attempts to attack IIS that the IIS log claimed were coming ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS Warm Up Period
    ... With stable web components, IIS will run ... > Is there a way to tell the IIS to start accepting the requests only after ... >> website, though. ... The load time for those settings is about 3 ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: IIS Warm Up Period
    ... With stable web components, IIS will run ... > Is there a way to tell the IIS to start accepting the requests only after ... >> website, though. ... The load time for those settings is about 3 ...
    (microsoft.public.inetserver.iis)
  • Re: IIS Vulnerability Content-Type overflow
    ... > vulnerability i found that a specially malformed http request to an IIS ... > Webserver can allow a buffer overflow. ... > and requests are not being logged by IIS. ...
    (Vuln-Dev)
  • Re: Multiple instances of app under IIs and global com object - is it a problem?
    ... beware that storing objects in Session variables ... this multiplicity of Module-level data means that you ... Module-level data is only useful in an IIS context for fixed ... >> requests. ...
    (microsoft.public.vb.general.discussion)