修改或者增加注册表中的相应内容 XP 2K 2K3,记得先备份。
EnableICMPRedirect – 0 – disables attacks that require the host to redirect ICMP based traffic.
SynAttackProtect – 1 or 2 -Setting the value to 1 will turn on SYN/ACK protection when the next two keys described are triggered. Setting the value to 2 will protect the host from SYN/ACK attacks by timing out open and half-open connections faster.
TCPMaxHalfOpen – 500 – This is the number of half-open connections allowed before SYN flood protection is initiated.
TCPMaxPortsExhausted – 5 -This determines how many connection requests the host can refuse before SYN flood protection is initiated.
TCPMaxDataRetransmission – 3 – This value determines how many times TCP will retransmit an unacknowledged data segment to an already existing connection.
EnableDeadGWDetect – 0 – This value dis-allows the host to determine if the default gateway is dead and allow it to change it to a backup gateway listed in the TCP/IP properties of the network adapter.
EnableDynamicBacklog – 1 – Enables the dynamic backlog
MinimumDynamicBacklog – 20 – Sets the minimum number of free connections to the Winsock endpoints.
MaximumDynamicBacklog – 20,000 – Sets the maximum limit of half-open and free connections to the Winsock endpoints
DynamicBacklogGrowthDelta – 10 – Sets the number of Winsock endpoints for an allocation pool.