I am trying to setup Dynamic IP Restrictions on IIS 8. To test the settings, I am using Fiddler to sent 50 requests very quickly. But all the requests come back as HTTP 200 and show up in the iis logs as successful(200) requests. I do not understand what I am missing.
Here are my test settings:
The website is set to deny all requests except for certain allowed IPs. I have proxy mode disabled.
For Dynamic Restrictions, I have the Deny IP Address based on Concurrent Requests checked with 1 as the maximum number. I have Deny IP Addresses on requests over a period of time checked with 1 as the maximum requests in 10000 milliseconds.
So if I am understanding the settings correctly, it should not allow more than 1 request from the same IP in 10 seconds. But that is not happening.