Try these: Internet Storm Centre - http://isc.sans.org/ SecurityFocus - http://www.securityfocus.com/ WindowsNetworking - http://www.windowsnetworking.com/ Security Forums - http://www.security-forums.com IIS Resources - http://www.iis-resources.com/ Even if you run your server behind a NAT firewall, I'd highly recommend installing a third-party software firewall that supports; Stateful Packet Inspection, SYN Flood Detection (DoS, etc. - best if you can set the threshold manually), Port Scan Detection, and most importantly; HTTP Filtering. The most important thing is to study and understand the entries in your firewall and IIS logs. If you do this and create some smart rules, you should have a relatively trouble free existence. ~~~~~~~~~~~~~~~~~~~~ |Same bucket, different syntax.| ~~~~~~~~~~~~~~~~~~~~