To NLB or not to NLB – protecting your webserver