Microsoft has this great module for IIS server:
The Dynamic IP Restrictions (DIPR) module for IIS 7.0 and above provides protection against denial of service and brute force attacks on web servers and web sites. The module temporarily blocks IP addresses of HTTP clients that make an unusually high number of concurrent requests or that make a large number of requests over small period of time.
The default values are:
- Deny IP address for 5 concurrent requests
- Deny IP address for 20 requests in 200 milliseconds
I was wondering if anyone has any recommendations on these values? I'm not a server admin, I'm a developer without any security background...
PS. By the way, when a browser requests a web page, doesn't it make concurrent requests? For all the images/css/js fils on the page...
THANKS!
0 Answers