Possible DoS Not Sure?

From: Joe (Joe_at_discussions.microsoft.com)
Date: 05/30/05

  • Next message: Adam White: "Oops, broke ASPNET on IIS6" 
    Date: Sun, 29 May 2005 19:42:02 -0700

    This message is posted in the Server security groups also I was directed to
    come here. It is posted exactly the same and with the ecaxt same title.

    Hello,

    I have never been under attack before however I am getting this in my W2k3
    event viewer

    The server has detected a potential Denial-of-Service attack caused by
    consuming all the work-items. Some connections were disconnected to protect
    against this. If this is not the case, please raise the MaxWorkItems for the
    server or disable DoS detection. This event will not be logged again for 24
    hours.

    The event ID is 2027

    I do not know if I am my webs are up and accessible. What is MaxWorkItems?
    Thank you
    Joe

  • Next message: Adam White: "Oops, broke ASPNET on IIS6"

    Relevant Pages

    • Possible DoS Not sure?
      ... The server has detected a potential Denial-of-Service attack caused by ... If this is not the case, please raise the MaxWorkItems for the ... server or disable DoS detection. ...
      (microsoft.public.security)
    • Re: Possible DoS Not sure?
      ... > You may also want to post in the IIS security newsgroup. ... > means your server dropped some connections because it was under heavy load ... MaxWorkItems refers to a registry ...
      (microsoft.public.security)