Hello Jenny,
According to your description, what you need is to limiting requests per
client IP. If I misunderstood anything here, please correct me.
DOS attack is a common issue in IIS world. In general, what we need is to
add an extra layer of defense between the internet and web server (For
example: ISA has such DOS protection built in).
Another option: because limiting feature is not included in IIS, we have
to do this in our code. You may have a look at the following do***ent.
http://msmvps.com/blogs/omar/archive/2007/03/24/prevent-denial-of-service-do
s-attacks-in-your-web-application.aspx
[Prevent Denial of Service (DOS) attacks in your web application]
Hope this helps. Please let me know if you have any more concern or there
is anything unclear. It's my pleasure to assist you.
Have a great day,
Best regards,
Wen Yuan
Microsoft Online Community Sup****t
==================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.


|