如何阻止windows server 2003上的系统洪水攻击？

Question

如何使用windows防火墙或任何其他第三方防火墙来阻止windows server 2003上的syn洪水攻击？

Answer 1

查看如何使用加强TCP/IP协议栈的MSDN

Enable SYN Attack Protection
The named value to enable SYN attack protection is located beneath the registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TcpIp\Parameters.
Value name: SynAttackProtect
Recommended value: 2
Valid values: 0, 1, 2
Description: Causes TCP to adjust retransmission of SYN-ACKS. When you configure this value the connection responses timeout more quickly in the event of a SYN attack. A SYN attack is triggered when the values of TcpMaxHalfOpen or TcpMaxHalfOpenRetried are exceeded.

如何增强TCP/IP协议栈抵御Windows 2003中的拒绝服务攻击

将TCP/IP堆栈强化为SYN攻击