Protecting Axis from Denial Of Service Attacks

["Ry." <im...@yahoo.com>]

Hi, can you please let me know what are good ways to protect a web service from denial of service attacks.  For my school project I need a write a section on this and, hopefully, create handler(s) to secure my simplish Axis service.
 
>From what I've read, it seems that I should validate the schema, and check parameters are within permitted ranges.  
 
I also read that I should block unknown IP addresses, but I don't know how to do this with Axis/Tomcat. Is this a job, instead, for the firewall?
 
Should I use an XML security gateway/firewall, or rely on the application server?
 
Any info/thoughts/links, etc would be really appreciated
 
Thanks very much - have a nice day!.
Ry.

		
---------------------------------
Celebrate Yahoo!'s 10th Birthday! 
 Yahoo! Netrospective: 100 Moments of the Web