Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have a Windows 2008 web server on running IIS 7 with about 25 websites. One of those sites is an SaaS application that is accessed constantly throughout the day. However, one particular client keeps getting blocked from my server. They will be using the service, and then all of a sudden they cannot access the program, or any other site on the server. The entire office of 4 users is blocked from accessing anything on the web server. A trace route reveals they get all the way to the server before they are blocked. However, they can access a linux server that is a different VM with a different IP on the same physical server. Also, when they are blocked from their office, they can still access the site from their mobile phone or local Starbucks. They can also occasionally reset the router and gain access to the web server again as they are on a dynamic IP address.

I checked IIS and allow all IPs to access the server. There is nothing in the logs the says anything about a user being banned. I really have no idea what is causing this? Could it be a virus on their end? I have even moved the SaaS to a completely new server in a different location, and they were working fine for about a month, and then the problem started occurring again.

Are there any hidden blacklists in IIS? Or is it a routing issue on their end?

share|improve this question

2 Answers 2

It looks like IPS / Firewall / requests limit per duration issue. You might have IPS/Firewall rules that prevent same user from making more then m requests every n minutes. It could be a hardware firewall / software firewall rule or even some kind of IIIS configuration.

If you clarify client being blocked by exactly specifying what they see 'Timeout', 'Access Denied', 'Connection Reset', etc. then we can help in narrowing down the exact cause.

share|improve this answer

They are seeing a Timeout for all sites on that server. Ping and telnet to port 80 also timeout.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.