Hello Everyone,
Ive been doing some research lately on web security and ive been trying to tighten up my site.
Ive been reading in my ASP.Net security book, and some examples online about preventing denial of service attacks at application level.
I understand that my firewall will handle most dos attacks but I also know that having some sort of mechanism on my site would be a good idea.
My problem is this..
I have reviewed the code provided in the book, and many articles online..
They all use the requesting users ip address.. Well, what happens when you have a bunch of people behind a proxy trying to access your site?
Wouldnt that deny them service?
If someone could please provide some input or sample code of how this can be done another way I would be very grateful.
Thanks!
~Matt
...
Go to the complete details ...