Re: IIS 6 - Possible to limit connections by IP address?

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 01/15/05 

Date: Fri, 14 Jan 2005 23:28:16 -0800

There is no IIS configuration for that feature, but the feature to do that
can be implemented. Some folks have asked this question before and
implemented an ISAPI filter to do that. I have no idea of its availability,
though.

However, your proposal has a problem -- please tell me how to distinguish
all those users who use the same proxy server to access the Internet. 100
different people can be making one request each to your website, and you
will think one IP is making 100 requests and possibly blocking legitimate
requests from many users who made only one request to your website.

Until you can answer that question, the scheme must be implemented by the
individual because it is their tolerance in question. 

-- 
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
<TeamKaeru@gmail.com> wrote in message
news:1105721645.479025.275640@c13g2000cwb.googlegroups.com...
Hello, it seems that while it is possible to throttle the bandwidth and
to limit the number of concurrent connections to a website in IIS6 /
Server 2003 it is not possible to restrict number of connections by an
IP address.
You can remove an IP address' access completely, but you cannot tell it
to allow IPs to only connect a certain number of times an hour / minute
etc.
So what if you have one or a few IP addresses that are flooding your
server with requests? How do you deal with that kind of traffic?
It would be great to be able to set it up so the website looks at how
many times any given IP accessed its pages in an hour and said "Hey,
you've been here too much, go away now"
Any possibilities?
TIA

Relevant Pages

  • Re: How to check fake requests
    ... > What negative effects do you expect from people hitting your website with ... > server has already fielded the request and initialized PHP. ... So unless their requests automatically invoke some very ... what should I code in my website that will perform IP detection and checking ...
    (comp.lang.php)
  • Publish Website problem
    ... I used the deploy feature of VS 2008 to deploy my website ... to another server. ... After googling around I find that this happens to a lot of other people also ...
    (microsoft.public.dotnet.framework.aspnet)
  • With FrontPage 2003 can I add a button to email a whole page usin.
    ... While it is possible to use a server side email service, ... We want the user of the website to use their own email ... IE5 offers an "email" this page feature, but most users do not see it so we ...
    (microsoft.public.frontpage.programming)
  • Re: What doesnt lend itself to OO?
    ... > system design within that context seriously). ... >>The first line exists in the server. ... > objects between client and server i.e. as far as the client code is ... the message data packet data in the server between requests, ...
    (comp.object)
  • Re: [patch 00/13] Syslets, "Threadlets", generic AIO support, v3
    ... I have an embedded server I ... I/O, audio, and child processes that handle VoIP signaling protocols ... want to throttle the concurrency of requests at the kernel level *for ...
    (Linux-Kernel)