I am administrating a Windows 2008 server (64-bit). It is being subjected to a focused set of DOS attacks where UDP packets are sent to a specific port and contain a specific string.
What I need to do is rate-limit UDP traffic to that port on a per IP basis, and specifically if I can filter by string then it will accomplish everything I want. For example, block UDP traffic from any individual IP containing string "status" if the rate from that IP is greater than 5 per sec, and allow all else.
This can be done on Linux with iptables, so is there is a way to do it on Windows, or at least get something close?