DDOS Prevention
Does anyone have a preferred free / low-cost solution for DDOS prevention for Windows / IIS? Anyone have any good/bad experience with http://www.iis.net/downloads/microsoft/dynamic-ip-restrictions ? -- John Bliss - http://www.linkedin.com/in/jbliss ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358681 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: DDOS Prevention
I had issue attempting to get that IP restrictions module to work with CF 10. Seems as though the request was getting handed off to CF before hitting the IIS module. So it did not seem to work properly at least for me. I didn't put too much effort into it, as our load-balancer actually handles some of this mitigation. Any DDOS of significance would get alerted to our Network Operations team proactively where they usually mitigate the issue at the border routers, thus the LB or servers would never see the traffic. You might look into setting up a software based load balancing solution to handle this. Something like Nginx which is a good bit more configurable than IIS. There are also services that you can route your traffic through like CloudFlare, which I believe just uses Nginx in the clusters. Byron Mann Lead Engineer Architect HostMySite.com On Tue, May 27, 2014 at 11:00 AM, John M Bliss bliss.j...@gmail.com wrote: Does anyone have a preferred free / low-cost solution for DDOS prevention for Windows / IIS? Anyone have any good/bad experience with http://www.iis.net/downloads/microsoft/dynamic-ip-restrictions ? -- John Bliss - http://www.linkedin.com/in/jbliss ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358682 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: DDOS Prevention
For iis modules that don't work with cf the ususl fix is to get rid of wildcard handler and use regular handler Russ Michaels www.michaels.me.uk cfmldeveloper.com cflive.net cfsearch.com On 27 May 2014 16:22, Byron Mann byronos...@gmail.com wrote: I had issue attempting to get that IP restrictions module to work with CF 10. Seems as though the request was getting handed off to CF before hitting the IIS module. So it did not seem to work properly at least for me. I didn't put too much effort into it, as our load-balancer actually handles some of this mitigation. Any DDOS of significance would get alerted to our Network Operations team proactively where they usually mitigate the issue at the border routers, thus the LB or servers would never see the traffic. You might look into setting up a software based load balancing solution to handle this. Something like Nginx which is a good bit more configurable than IIS. There are also services that you can route your traffic through like CloudFlare, which I believe just uses Nginx in the clusters. Byron Mann Lead Engineer Architect HostMySite.com On Tue, May 27, 2014 at 11:00 AM, John M Bliss bliss.j...@gmail.com wrote: Does anyone have a preferred free / low-cost solution for DDOS prevention for Windows / IIS? Anyone have any good/bad experience with http://www.iis.net/downloads/microsoft/dynamic-ip-restrictions ? -- John Bliss - http://www.linkedin.com/in/jbliss ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358683 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: DDOS Prevention
Not to steal the thread, but I remember trying that and something else broke. I want to say the default doc wasn't working correctly, so I couldn't get http://domain.com/ to pass off to CF. May have been something else though. One of these days I'll have to give it another try. Byron Mann Lead Engineer Architect HostMySite.com On Tue, May 27, 2014 at 11:32 AM, Russ Michaels r...@michaels.me.uk wrote: For iis modules that don't work with cf the ususl fix is to get rid of wildcard handler and use regular handler Russ Michaels www.michaels.me.uk cfmldeveloper.com cflive.net cfsearch.com On 27 May 2014 16:22, Byron Mann byronos...@gmail.com wrote: I had issue attempting to get that IP restrictions module to work with CF 10. Seems as though the request was getting handed off to CF before hitting the IIS module. So it did not seem to work properly at least for me. I didn't put too much effort into it, as our load-balancer actually handles some of this mitigation. Any DDOS of significance would get alerted to our Network Operations team proactively where they usually mitigate the issue at the border routers, thus the LB or servers would never see the traffic. You might look into setting up a software based load balancing solution to handle this. Something like Nginx which is a good bit more configurable than IIS. There are also services that you can route your traffic through like CloudFlare, which I believe just uses Nginx in the clusters. Byron Mann Lead Engineer Architect HostMySite.com On Tue, May 27, 2014 at 11:00 AM, John M Bliss bliss.j...@gmail.com wrote: Does anyone have a preferred free / low-cost solution for DDOS prevention for Windows / IIS? Anyone have any good/bad experience with http://www.iis.net/downloads/microsoft/dynamic-ip-restrictions ? -- John Bliss - http://www.linkedin.com/in/jbliss ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358684 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
not getting identity value from insert
Can you spot where I am off? Please help... GO insert into #request.sqlobjectprefix#TblEmailRecovery ( guid, emailaddress ) VALUES ( cfqueryparam cfsqltype=cf_sql_varchar value=#variables.newguid#, cfqueryparam cfsqltype=cf_sql_varchar value=#qry_emailToPK.emailaddress# ); GO SELECT @@IDENTITY AS 'Identity'; GO ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358685 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: not getting identity value from insert
On Tue, May 27, 2014 at 1:34 PM, Matthew Smith chedders...@gmail.comwrote: SELECT @@IDENTITY AS 'Identity' You might try using IDENT_CURRENT('#request.sqlobjectprefix# TblEmailRecovery') http://msdn.microsoft.com/en-us/library/ms175098.aspx Otherwise, what are you looking for? Until Later! C. Hatton Humphrey http://www.eastcoastconservative.com Every cloud does have a silver lining. Sometimes you just have to do some smelting to find it. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358686 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
RE: not getting identity value from insert
Actually the issue here is the GO between the insert and the select @@identity. Using go between them makes them in to two separate unrelated batches. Steve -Original Message- From: C. Hatton Humphrey [mailto:chumph...@gmail.com] Sent: Tuesday, May 27, 2014 1:39 PM To: cf-talk Subject: Re: not getting identity value from insert On Tue, May 27, 2014 at 1:34 PM, Matthew Smith chedders...@gmail.comwrote: SELECT @@IDENTITY AS 'Identity' You might try using IDENT_CURRENT('#request.sqlobjectprefix# TblEmailRecovery') http://msdn.microsoft.com/en-us/library/ms175098.aspx Otherwise, what are you looking for? Until Later! C. Hatton Humphrey http://www.eastcoastconservative.com Every cloud does have a silver lining. Sometimes you just have to do some smelting to find it. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358687 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: not getting identity value from insert
still not working. hmm... cfif qry_emailToPK.recordcount cfset variables.newguid = CreateUUID() cfquery name=qry_CREATETOKEN datasource=#variables.datasource# insert into #request.sqlobjectprefix#TblEmailRecovery ( guid, emailaddress ) VALUES ( cfqueryparam cfsqltype=cf_sql_varchar value=#variables.newguid#, cfqueryparam cfsqltype=cf_sql_varchar value=#qry_emailToPK.emailaddress# ); SELECT IDENT_CURRENT('#request.sqlobjectprefix# TblEmailRecovery') as mynewidentity; go /cfquery cfelse cfoutputSorry, your email was not found.a href=/index.cfm/fuseaction/authentication.go/cfid/#cfid#/cftoken/cftoken/index.cfmPlease click here to create an account./a/cfoutput /cfif On Tue, May 27, 2014 at 2:13 PM, DURETTE, STEVEN J sd1...@att.com wrote: Actually the issue here is the GO between the insert and the select @@identity. Using go between them makes them in to two separate unrelated batches. Steve -Original Message- From: C. Hatton Humphrey [mailto:chumph...@gmail.com] Sent: Tuesday, May 27, 2014 1:39 PM To: cf-talk Subject: Re: not getting identity value from insert On Tue, May 27, 2014 at 1:34 PM, Matthew Smith chedders...@gmail.com wrote: SELECT @@IDENTITY AS 'Identity' You might try using IDENT_CURRENT('#request.sqlobjectprefix# TblEmailRecovery') http://msdn.microsoft.com/en-us/library/ms175098.aspx Otherwise, what are you looking for? Until Later! C. Hatton Humphrey http://www.eastcoastconservative.com Every cloud does have a silver lining. Sometimes you just have to do some smelting to find it. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358688 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: not getting identity value from insert
still not working. hmm... cfif qry_emailToPK.recordcount cfset variables.newguid = CreateUUID() cfquery name=qry_CREATETOKEN datasource=#variables.datasource# insert into #request.sqlobjectprefix#TblEmailRecovery ( guid, emailaddress ) VALUES ( cfqueryparam cfsqltype=cf_sql_varchar value=#variables.newguid#, cfqueryparam cfsqltype=cf_sql_varchar value=#qry_emailToPK.emailaddress# ); SELECT IDENT_CURRENT('#request.sqlobjectprefix# TblEmailRecovery') as mynewidentity; go /cfquery Are you sure this table even has an identity column? If so, why do you also need a GUID? Normally, you'd have one or the other, but not both. Dave Watts, CTO, Fig Leaf Software 1-202-527-9569 http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358689 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: not getting identity value from insert
I am sorry. The email address was not in there and I had the code improperly nested. Thank you all for the help. I am sorry for the carelessness. Good day. On Tue, May 27, 2014 at 3:25 PM, Dave Watts dwa...@figleaf.com wrote: still not working. hmm... cfif qry_emailToPK.recordcount cfset variables.newguid = CreateUUID() cfquery name=qry_CREATETOKEN datasource=#variables.datasource# insert into #request.sqlobjectprefix#TblEmailRecovery ( guid, emailaddress ) VALUES ( cfqueryparam cfsqltype=cf_sql_varchar value=#variables.newguid#, cfqueryparam cfsqltype=cf_sql_varchar value=#qry_emailToPK.emailaddress# ); SELECT IDENT_CURRENT('#request.sqlobjectprefix# TblEmailRecovery') as mynewidentity; go /cfquery Are you sure this table even has an identity column? If so, why do you also need a GUID? Normally, you'd have one or the other, but not both. Dave Watts, CTO, Fig Leaf Software 1-202-527-9569 http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358690 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: DDOS Prevention
It will hreak things that rely on the wildcard handler to resolve servlet mappings, such as flash remoting. But you can get around this by creating those as empty folders. Checkout this article which shows you how using boncode. The same would apply using the standard connector though. http://www.michaels.me.uk/post.cfm/running-railo-and-coldfusion-10-side-by-side-with-boncode Russ Michaels www.michaels.me.uk cfmldeveloper.com cflive.net cfsearch.com On 27 May 2014 17:33, Byron Mann byronos...@gmail.com wrote: Not to steal the thread, but I remember trying that and something else broke. I want to say the default doc wasn't working correctly, so I couldn't get http://domain.com/ to pass off to CF. May have been something else though. One of these days I'll have to give it another try. Byron Mann Lead Engineer Architect HostMySite.com On Tue, May 27, 2014 at 11:32 AM, Russ Michaels r...@michaels.me.uk wrote: For iis modules that don't work with cf the ususl fix is to get rid of wildcard handler and use regular handler Russ Michaels www.michaels.me.uk cfmldeveloper.com cflive.net cfsearch.com On 27 May 2014 16:22, Byron Mann byronos...@gmail.com wrote: I had issue attempting to get that IP restrictions module to work with CF 10. Seems as though the request was getting handed off to CF before hitting the IIS module. So it did not seem to work properly at least for me. I didn't put too much effort into it, as our load-balancer actually handles some of this mitigation. Any DDOS of significance would get alerted to our Network Operations team proactively where they usually mitigate the issue at the border routers, thus the LB or servers would never see the traffic. You might look into setting up a software based load balancing solution to handle this. Something like Nginx which is a good bit more configurable than IIS. There are also services that you can route your traffic through like CloudFlare, which I believe just uses Nginx in the clusters. Byron Mann Lead Engineer Architect HostMySite.com On Tue, May 27, 2014 at 11:00 AM, John M Bliss bliss.j...@gmail.com wrote: Does anyone have a preferred free / low-cost solution for DDOS prevention for Windows / IIS? Anyone have any good/bad experience with http://www.iis.net/downloads/microsoft/dynamic-ip-restrictions ? -- John Bliss - http://www.linkedin.com/in/jbliss ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358691 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Dynamic Query Name in Custom Tag?
Hi all, I'm attempting to create a dynamic query name inside a Custom Tag. It seems to get created fine, but referencing it seems to be the problem. Here's where I set it up: cfquery name=ConvertedFields_#attributes.QueryName# dbtype=query So, yes, it's a Query of Query, if that makes a difference. But when I try to reference it later, like this: cfdump var=ConvertedFields_#attributes.QueryName# or cfdump var=#ConvertedFields_[attributes.QueryName]# or cfdump var=#ConvertedFields_['#attributes.QueryName#']# It always errors out with Variable CONVERTEDFIELDS_ is undefined. I know I'm missing something simple here. My brain is not recalling how to handle these. :-) Any help is appreciated. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358692 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Dynamic Query Name in Custom Tag?
Try cfdump var=#variables[ 'ConvertedFields_' attributes.QueryName ]# On Tue, May 27, 2014 at 4:49 PM, Dan LeGate d...@legeek.com wrote: Hi all, I'm attempting to create a dynamic query name inside a Custom Tag. It seems to get created fine, but referencing it seems to be the problem. Here's where I set it up: cfquery name=ConvertedFields_#attributes.QueryName# dbtype=query So, yes, it's a Query of Query, if that makes a difference. But when I try to reference it later, like this: cfdump var=ConvertedFields_#attributes.QueryName# or cfdump var=#ConvertedFields_[attributes.QueryName]# or cfdump var=#ConvertedFields_['#attributes.QueryName#']# It always errors out with Variable CONVERTEDFIELDS_ is undefined. I know I'm missing something simple here. My brain is not recalling how to handle these. :-) Any help is appreciated. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358693 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Dynamic Query Name in Custom Tag?
I'm attempting to create a dynamic query name inside a Custom Tag. If you create anything in the scope variables, from inside a custom tag, it will be created in the custom tag scope only. You must use the caller scope, ie: cfquery name=caller.ConvertedFields_#attributes.QueryName# dbtype=query ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358694 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Dynamic Query Name in Custom Tag?
Sorry, I was too fast reading your message. If you cfdump var=ConvertedFields_#attributes.QueryName#, I suppose the CFDUMP is still inside the custom tag, so the query should be defined. But if it says Variable CONVERTEDFIELDS_ is undefined it looks like attributes.QueryName is empty. Are you sure you are in the same custom tag ? ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358695 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Dynamic Query Name in Custom Tag?
Thanks Matt! That worked for cfdump. Now I'm trying to cfif for the RecordCount and neither: cfif variables[ 'ConvertedFields_' attributes.QueryName.RecordCount' ] GT 0 nor cfif variables[ 'ConvertedFields_' attributes.QueryName '.RecordCount' ] GT 0 works. Any advice on this one? Getting Element QUERYNAMES.RECORDCOUNT is undefined in ATTRIBUTES. and Element ConvertedFields_GetLDAPInfo.RecordCount is undefined in a Java object of type class coldfusion.runtime.VariableScope referenced respectively. Thanks again. Dan On 5/27/2014 1:55 PM, Matt Quackenbush wrote: Trycfdump var=#variables[ 'ConvertedFields_' attributes.QueryName ]# On Tue, May 27, 2014 at 4:49 PM, Dan LeGated...@legeek.com wrote: Hi all, I'm attempting to create a dynamic query name inside a Custom Tag. It seems to get created fine, but referencing it seems to be the problem. Here's where I set it up: cfquery name=ConvertedFields_#attributes.QueryName# dbtype=query So, yes, it's a Query of Query, if that makes a difference. But when I try to reference it later, like this: cfdump var=ConvertedFields_#attributes.QueryName# or cfdump var=#ConvertedFields_[attributes.QueryName]# or cfdump var=#ConvertedFields_['#attributes.QueryName#']# It always errors out with Variable CONVERTEDFIELDS_ is undefined. I know I'm missing something simple here. My brain is not recalling how to handle these. :-) Any help is appreciated. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:358696 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm