Re: Filtering IIS

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Paul Lynch (paul.lynch_at_nospam.com)
Date: 06/04/04 

Date: Fri, 04 Jun 2004 14:28:32 +0100

On Fri, 4 Jun 2004 15:15:17 +0200, "Fabrizio Maccarrone" <fabrizio
(at) 7mates (punto) com> wrote:

>Hallo,
>
>I 'm pretty sure that, in some cases, my 500 sites IIS 5 - w2k server sp4
>is under DDOS.
>
>How can I do to monitor, manage and filter traffic IN and OUT from IIS?
>
>Please any help MUCH MUCH appreciated. :-\
>
>Best regards.
>
>--
>Fabrizio Maccarrone

Pretty much the only thing you can do is to contact your ISP and ask
them to configure ingress filtering on your connection.

There's a good article on the whole issue of DDos attacks here :

http://www.linuxsecurity.com/resource_files/intrusion_detection/ddos-faq.html

and some equally useful stuff here (in my opinion thatis, I'm not
getting into that whole Steve Gibson debate again !)

http://grc.com/dos/

Regards,

Paul Lynch
MCSE

Relevant Pages

  • Filtering IIS
    ... is under DDOS. ... How can I do to monitor, manage and filter traffic IN and OUT from IIS? ... Best regards. ...
    (microsoft.public.inetserver.iis)
  • Ban permanently user agent
    ... can u tell me the way to ban *for ever* some user agents from ALL my IIS? ... Regards ... Fabrizio Maccarrone ...
    (microsoft.public.inetserver.iis)
  • RE: Intrusion prevention and dDos protection
    ... In terms of dropping traffic on the edge, again a DDOS can overwhelm the ... Regards ... >> technical IT security event. ... >> sponsors. ...
    (Focus-IDS)
  • Re: Email constantly sending
    ... Did you get the email I sent as requested and the POP3 details? ... I haven't touched the IIS etc, ... Regards ... >> In the meantime I was looking to uninstall the ILS and SMTP. ...
    (microsoft.public.windows.server.sbs)
  • Re: FoxPro 6.0 and ODBC
    ... Remote access? ... > are the same version with regards to the System DSN i created, ... > believe it is an issue with IIS 5.1. ... user IIS especially ASP is running. ...
    (microsoft.public.data.odbc)