Count 403.7, and 403.8 errors in IIS logs, if you use the default settings (not 404 error code). You may parse out such rows and check from which IP addresses the requests come.
Does it mean there are no event log entries and it doesn't produce any special entries to IIS log? So because there are several options to deny requests including closing connections there is no universal way to count blocked requests?
That's a valid feature request, as if you are using a tool such System Center Operation Manager, then monitoring event logs is easier than IIS logs. But since it is already an RC, not very likely Microsoft will add any new feature to this release.
You might comment under this blog post to see if the author can respond on your feature request,
Leonid Shirm...
3 Posts
Dynamic IP Restrictions RC - How to count the blocked requests?
Apr 04, 2012 10:19 AM|LINK
Dynamic IP Restrictions
lextm
4489 Posts
Re: Dynamic IP Restrictions RC - How to count the blocked requests?
Apr 04, 2012 01:09 PM|LINK
Count 403.7, and 403.8 errors in IIS logs, if you use the default settings (not 404 error code). You may parse out such rows and check from which IP addresses the requests come.
http://learn.iis.net/page.aspx/548/using-dynamic-ip-restrictions/
403.7 and 403.8 are special for dynamic IP restriction module (each matches a rule category). So counting them in IIS logs is enough.
http://lextm.com
---------------------------
This posting is provided "AS IS" with no warranties, and confers no rights.
Leonid Shirm...
3 Posts
Re: Dynamic IP Restrictions RC - How to count the blocked requests?
Apr 05, 2012 01:31 PM|LINK
lextm
4489 Posts
Re: Dynamic IP Restrictions RC - How to count the blocked requests?
Apr 06, 2012 07:41 AM|LINK
http://lextm.com
---------------------------
This posting is provided "AS IS" with no warranties, and confers no rights.
Leonid Shirm...
3 Posts
Re: Dynamic IP Restrictions RC - How to count the blocked requests?
Apr 06, 2012 09:14 AM|LINK
lextm
4489 Posts
Re: Dynamic IP Restrictions RC - How to count the blocked requests?
Apr 06, 2012 12:33 PM|LINK
That's a valid feature request, as if you are using a tool such System Center Operation Manager, then monitoring event logs is easier than IIS logs. But since it is already an RC, not very likely Microsoft will add any new feature to this release.
You might comment under this blog post to see if the author can respond on your feature request,
http://blogs.iis.net/shauneagan/archive/2012/04/02/release-candidates-for-dynamic-ip-restrictions-and-application-initialization-now-available.aspx
http://lextm.com
---------------------------
This posting is provided "AS IS" with no warranties, and confers no rights.