January 29, 2002 10:29 PM

Addressing DoS Vulnerabilities

Rating: (0)
Windows IT Pro
InstantDoc ID #23918
Last month, Microsoft published an article that documents five registry modifications you can use to reduce Windows 2000's TCP vulnerability to a variety of Denial of Service (DoS) attacks. These guidelines are appropriate for Win2K systems connected to a WAN or to the Internet and for sites that operate under strict security controls.

Bec...

ARTICLE TOOLS

You must be a paid Professional Member to access this entire article.

Already a Professional Member? Please log in now:

NOT A PROFESSIONAL MEMBER? YOU CHOOSE:

Monthly or Annual

Professional Membership

VIP Membership

Compare Member Benefits

Add a Comment

Yes, the restart is required.

Anonymous User 1/4/2005 1:35:56 PM


For SynAttackprotect registry value, if I made it to 2 from 1 or 0 then system restart is required or Not ?

suhas4/25/2004 1:14:16 AM


Running Win2K Server, Service Pack 4. I conclude with the above correction in the registry hive. I presume it was a typo. Also, I had to add the extra keys such as SynAttackProtect. - Good Article.

Jagdish3/25/2004 3:24:16 PM


On my Windows 2000 Server SP2 systems, none of the registry values mentioned in this article (and in the Microsoft KBV Article Q315669 it references) were existing. I added them. For example, I added the value SynAttackProtect.

Mike1/30/2002 8:27:11 AM


The location of the hive is incorrect,
HKEY_LOCAL_MACHINE\\CurrentControlSet\\Services\\TCPIP\\Parameters

The correct location would be:
HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\TCPIP\\Parameters

Nice article though.

Denton B 1/30/2002 6:54:32 AM


Use this with extreme caution on NT servers with IIS installed. The recommended settings kills IIS in a matter of seconds. I am looking for a set of recommended settings that will protect against DoS and still allow IIS to function.

Gilbert1/30/2002 5:56:22 AM


You must log on before posting a comment.

Are you a new visitor? Register Here
Free Power Tools Brochure
Get Mark Minasi's 17-page guide today!



      

advertisement

GOOGLE LINKS
SPONSORED LINKS
FEATURED LINKS

White Papers

Your remote offices contain valuable electronic data – are they adequately protected? Learn how proven technologies can reliably and cost-effectively back up a branch office from a central location, in real time, to disk or tape, and even utilize existing backup solutions.

Downloads

PacketTrap IT is a comprehensive and affordable network management and application monitoring solution that solves problems associated with bandwidth, network and application performance, and connectivity. Gain insight into your network - try PacketTrapIT free for 21 days!

Web Seminars

IT administrators have to solve a myriad of problems. This web seminar outlines the ten most common systems management pains - including managing highly distributed systems and dealing with data theft/loss – and the best practices to address each.

eLearning Series

We bring the experts direct to you to share their real-world perspective and expertise. During each event, three sessions stream in real time, so you can learn, ask questions, and get solutions.
Upcoming event: Getting the Most with Exchange 2010 with Paul Robichaux

Subscribe to Windows IT Pro!

Windows is a trademark of the Microsoft group of companies. Windows IT Pro is used by Penton Media Inc. under license from owner.