Welcome to中国防火墙网
Add to Favorites | Chinese
Revise register a watch to raise Win2000 to defy serve attack ability absolutely
From;    Author:Stand originally
Speak of from DoS of correct look upon and DDoS

Believe everybody won't be opposite these two certainly this word feels unfamiliar, yes, reject to serve attack (Denial Of Service) , and distributed reject to serve attack (Distributed Denial Of Service) .

Alleged decline a service, it is to point to after specific attack happens, the object that is atttacked cannot provide due service in time, should offer a website to serve originally for example (HTTP Service) and cannot provide website service, email server (SMTP, POP3) cannot provide the function that sends and receive correspondence to wait a moment, basically, block serves attack to use many network data bag normally absolutely, with breaking down the network of the other side reachs main engine, unavailable lead plane serves the use person with make normal in time.

Distributed decline a service, the huge data parcel that say simply even if handles ability with mark of Yuan Chao look over uses up usable system, and network bandwidth, cause network service to break down.

Perhaps be the beyond the mark attention with media is concerned, doS is atttacked especially DDoS attack, it seems that between one night popular rise, the greatly little net that make is in charge of people, want a server to have trouble only, hysterical halloo “ me by DDoS! ” , as if on the face writing clinking glory and pride.

Be in actually our all round, the DDoS on real significance actually not much, the resource that mobilizes DDoS to atttack a need after all is exceedingly much, but the happening that real charge keeps again however is worn, inside this, great majority, it is common rejection serves attack. The attack of average level, how to defend, also become manager of a lot of networks most headaching problem, ask everywhere then, result often machine-made, the hardware firewall that “ buys us ” .

Hardware firewall, include special defy serving attack product absolutely is good really, but main price is very high, although the effect is good, for the angle that can invest from investment and protection, a little ham rather.

Actually from operating system angle for, itself has a lot of functions with respect to Tibet, just be to need us more very slowly go digging. If why be revised below Win2000 environment,I give everybody simple introduction here register a watch, enhance a system fight DoS ability.

Detail:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParameters]


Shut the examination of invalid gateway. Installed many gateway when the server, be illogical in the network so free when the system can try join the 2nd gateway, through shutting it to be able to optimize a network.
"EnableDeadGWDetect" =dword:00000000

Prohibit answering ICMP to weigh directional message. Possible in order to atttacks this kind of message, so the system should reject to accept ICMP to weigh directional message.
Previous12 Next

About us | Legal Notices | Sitemap | Links | Partner