Wednesday, September 19, 2007

Preventing Denial of Service (DoS) Attacks -Windows 2000/2003

http://arunonfire.blogspot.com/2007/09/preventing-denial-of-service-dos.html

Denial of Service attacks are difficult to defend against. One approach is to harden the TCP/IP stack on a Windows 2000 server or workstation to help prevent DoS attacks .
By default, the TCP/IP stack is configured to handle normal traffic and to be robust under normal working conditions. If a Windows 2000 server or workstation is going to be exposed to the Internet, the TCP/IP stack should be reconfigured to handle the various TCP/IP protocol attacks.

All of the TCP/IP parameters are located under the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

SynAttackProtect
Key: Tcpip\Parameters
Value Type: REG_DWORD—Boolean
Valid Range: 0, 1, 2
Default: 0


When enabled, this parameter causes TCP to adjust the retransmission of SYN-ACKS to cause connection responses to time out more quickly if it appears that there is a SYN-ATTACK in progress. This determination is based on the TcpMaxPortsExhausted parameter.

Parameters:
0: Default Value – Normal protection against SYN Attacks.

1: Better Protection - This parameter causes TCP to adjust the retransmission of SYN-ACKS to cause connection responses to time out more quickly if it appears that there is a SYN-ATTACK in progress. This determination is based on the TcpMaxPortsExhausted, TCPMaxHalfOpen, and TCPMaxHalfOpenRetried.

2: Best Protection – Adds in additional delays to connection indications to quickly timeout TCP connection requests when a SYN=Attack is in progress. This is the recommended setting. Note: When using this setting, the following socket options will no longer work: Scalable windows (RFC 1323) and per adapter configured TCP parameters (Initial RTT, window size).

Arun

4 comments:

oakleyses said...

christian louboutin uk, nike free, polo outlet, oakley sunglasses, nike free run, longchamp outlet, longchamp pas cher, christian louboutin outlet, oakley sunglasses, burberry pas cher, ugg boots, louis vuitton outlet, longchamp outlet, christian louboutin shoes, nike air max, louboutin pas cher, oakley sunglasses wholesale, michael kors pas cher, longchamp outlet, jordan pas cher, louis vuitton outlet, gucci handbags, ray ban sunglasses, ray ban sunglasses, oakley sunglasses, replica watches, tory burch outlet, louis vuitton, nike roshe, tiffany jewelry, louis vuitton outlet, kate spade outlet, prada handbags, polo ralph lauren outlet online, ray ban sunglasses, nike outlet, nike air max, christian louboutin, air max, prada outlet, louis vuitton, chanel handbags, uggs on sale, polo ralph lauren, replica watches, cheap oakley sunglasses, jordan shoes, ugg boots, tiffany and co

oakleyses said...

replica handbags, coach outlet, uggs outlet, true religion outlet, nike tn, mulberry uk, hollister pas cher, ray ban pas cher, nike free uk, hollister uk, michael kors outlet, timberland pas cher, true religion jeans, michael kors outlet online, nike air max, oakley pas cher, polo lacoste, hogan outlet, converse pas cher, burberry outlet, nike roshe run uk, sac vanessa bruno, coach outlet store online, uggs outlet, michael kors outlet, michael kors, north face, michael kors, nike air max uk, michael kors outlet online, ray ban uk, abercrombie and fitch uk, guess pas cher, sac hermes, lululemon canada, north face uk, nike air max uk, true religion outlet, vans pas cher, michael kors outlet online, nike blazer pas cher, burberry handbags, true religion outlet, nike air force, michael kors outlet online, ralph lauren uk, kate spade, coach purses, michael kors outlet

oakleyses said...

abercrombie and fitch, soccer jerseys, iphone cases, ralph lauren, vans outlet, converse outlet, jimmy choo outlet, mcm handbags, ferragamo shoes, lululemon, wedding dresses, hollister, new balance shoes, reebok outlet, north face outlet, soccer shoes, insanity workout, oakley, longchamp uk, nike air max, gucci, nike trainers uk, herve leger, mont blanc pens, vans, beats by dre, nfl jerseys, giuseppe zanotti outlet, valentino shoes, ray ban, nike air max, hollister clothing, p90x workout, converse, bottega veneta, babyliss, chi flat iron, instyler, hermes belt, louboutin, north face outlet, nike roshe run, baseball bats, nike huaraches, hollister, mac cosmetics, asics running shoes, timberland boots, ghd hair, celine handbags

oakleyses said...

thomas sabo, barbour uk, pandora jewelry, barbour, karen millen uk, ugg uk, canada goose, moncler, canada goose outlet, louis vuitton, ugg,ugg australia,ugg italia, pandora uk, pandora charms, louis vuitton, doudoune moncler, canada goose, louis vuitton, montre pas cher, ugg pas cher, canada goose outlet, marc jacobs, supra shoes, canada goose outlet, moncler, replica watches, canada goose jackets, louis vuitton, links of london, canada goose uk, coach outlet, moncler, juicy couture outlet, lancel, juicy couture outlet, ugg, swarovski crystal, moncler outlet, toms shoes, louis vuitton, moncler outlet, wedding dresses, canada goose, hollister, swarovski, moncler, ugg,uggs,uggs canada, pandora jewelry, moncler uk

Music...