Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a Windows 2008 server that hosts a file share in which a SQL server database is stored and accessed from another SQL server on the same network. Periodically, the database become inaccessible and when we check the event logs on the Windows 2008 file server, there is a warning logged with event ID 2025 stating that a denial of service attack was detected.

Is there a way to prevent this, other than disabling the DOS protection? Is there a way to list the SQL server as a "safe" server or something of that nature?

Can anyone point me to documentation discussing this DOS protection in more detail?

share|improve this question

I would be looking at my firewall to see what kind of DOS features it has. You could also talk to your ISP about blocking certain ranges before they even get to you if they are all coming it from some specific area or IP range.

Doing it from within Windows does not seem like the right place to me.

share|improve this answer
This file server is internal only, it's not directly exposed to the internet, but it is accessed by a web server. We did not turn anything on in Windows to make this start happening. – NYSystemsAnalyst Jun 1 '11 at 18:47
OK, I thought it was from outside. This might help you: If you don't have any real problems, you can disable the message, or reconfigure if it is. That article is for 2003, but is similar. – KCotreau Jun 1 '11 at 18:56

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.