Handle user auto-repeating refresh in browser

[Jordan Marton]

Why would your users keep their finger on F5???

Thats like saying how do I disable Ctrl-Alt-Del so users won't accidently
restart their system...

Jordan

"Neil Kimber" <neil.kimber@flytxt.com> wrote in message
news:O9V9sYpVDHA.1832@TK2MSFTNGP09.phx.gbl...

> If I create a test page, run it and press F5 (refresh) and leave my finger
> on the F5 button, eventually the browser hangs and stops responding.

Either

> this is IIS hanging or the IE. In either case, what is the best approach

for

> handling mischevious users who leave their finger on F5?
>
> Regards,
> Neil
>
>

[Neil Kimber]

Well, they may want to swamp my webserver with requests if they are
malicious. In effect, I'm asking what different strategies work best for DoS
attacks.

"Jordan Marton" <JMarton@HAHAmarketaxess.com> wrote in message
news:eFxGVfpVDHA.3332@tk2msftngp13.phx.gbl...

> Why would your users keep their finger on F5???
>
> Thats like saying how do I disable Ctrl-Alt-Del so users won't accidently
> restart their system...
>
> Jordan
>
> "Neil Kimber" <neil.kimber@flytxt.com> wrote in message
> news:O9V9sYpVDHA.1832@TK2MSFTNGP09.phx.gbl...

> > If I create a test page, run it and press F5 (refresh) and leave my

finger

> > on the F5 button, eventually the browser hangs and stops responding.

> Either

> > this is IIS hanging or the IE. In either case, what is the best approach

> for

> > handling mischevious users who leave their finger on F5?
> >
> > Regards,
> > Neil
> >
> >

>
>

[Yan-Hong Huang[MSFT]]

Hello Neil,

Thanks for posting here.

When we install VS.NET on the system, it will install one tool named Microsoft Application Center Test. By using this tool, we
can simular milllions of web request. However, I don't observer IIS hangs when using it. So I think the hang that you observed
should happen on client side, not server side.

Besides, in order to prevent Dos attack, we could do some actions in server side. For an example, revising
MaxClientRequestBuffer registry value in IIS server machine. Please refer to "Description of the MaxClientRequestBuffer
Registry Value"
[url]http://support.microsoft.com:80/support/kb/articles/q260/6/94.asp[/url]

You could also protect web server in firewall level. Please refer to [url]http://www.toplayer.com/content/resource/faq.jsp[/url] for
some ideas in this area.

Did I answer your question?

Best regards,
Yanhong Huang
Microsoft Online Partner Support

Get Secure! - [url]www.microsoft.com/security[/url]
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
!Reply-To: "Neil Kimber" <neil.kimber@flytxt.com>
!From: "Neil Kimber" <neil.kimber@flytxt.com>
!References: <O9V9sYpVDHA.1832@TK2MSFTNGP09.phx.gbl> <eFxGVfpVDHA.3332@tk2msftngp13.phx.gbl>
!Subject: Re: Handle user auto-repeating refresh in browser
!Date: Wed, 30 Jul 2003 13:47:47 +0100
!Lines: 31
!Organization: Flytxt
!X-Priority: 3
!X-MSMail-Priority: Normal
!X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
!X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
!Message-ID: <#f6ZJjpVDHA.2016@TK2MSFTNGP09.phx.gbl>
!Newsgroups: microsoft.public.dotnet.framework.aspnet
!NNTP-Posting-Host: 212.161.95.49
!Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTN GP09.phx.gbl
!Xref: cpmsftngxa06.phx.gbl microsoft.public.dotnet.framework.aspnet:163341
!X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet
!
!Well, they may want to swamp my webserver with requests if they are
!malicious. In effect, I'm asking what different strategies work best for DoS
!attacks.
!
!"Jordan Marton" <JMarton@HAHAmarketaxess.com> wrote in message
!news:eFxGVfpVDHA.3332@tk2msftngp13.phx.gbl...
!> Why would your users keep their finger on F5???
!>
!> Thats like saying how do I disable Ctrl-Alt-Del so users won't accidently
!> restart their system...
!>
!> Jordan
!>
!> "Neil Kimber" <neil.kimber@flytxt.com> wrote in message
!> news:O9V9sYpVDHA.1832@TK2MSFTNGP09.phx.gbl...
!> > If I create a test page, run it and press F5 (refresh) and leave my
!finger
!> > on the F5 button, eventually the browser hangs and stops responding.
!> Either
!> > this is IIS hanging or the IE. In either case, what is the best approach
!> for
!> > handling mischevious users who leave their finger on F5?
!> >
!> > Regards,
!> > Neil
!> >
!> >
!>
!>
!
!
!