This question already has an answer here:
- I am under DDoS. What can I do? 4 answers
Is there a way to monitor number of attempted Skype connections on a specified port and dynamically firewall off the offending IPs if they break a certain threshhold within a specific time limit - in Windows 7?
On a Linux box, though it's a bit crude, I know I could use wireshark or nstat and output to a file, then cron a job to grep through and then parse the data for number of attempted connections to a specified port, add a firewall rule to iptables, then truncate the log file for the next iteration, and I'm all set. I'm a bit lost on how to go about this or something similar on a Windows 7 box.
The situation I'm trying to solve is that I have several users that need Skype access. Resolving a skype username to IP is fairly simple and this has resulted in their machines being DDOS'd on occasion. While I know I could do this upstream on a full-fledged ASA or similar device, for various networking reasons I'm trying to find a solution that can be implemented on the users computer. White-listing and blocking everybody else is not an option.
Thanks for any input or ideas on this.