Discussion About Ddos Protections

[madocter]

This prevent a little Sync flood ...

 

 

//

 

@echo off
SetLocal EnableDelayedExpansion

echo Activate anti Sync Flood parameter...

pause >nul

reg add HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v SynAttackProtect /t REG_DWORD /d 1


echo Increasing  'backlog queue' ...

pause >nul



reg add HKLM\System\CurrentControlSet\Services\AFD\Parameters /v EnableDynamicBacklog /t REG_DWORD /d 1

reg add HKLM\System\CurrentControlSet\Services\AFD\Parameters /v MinimumDynamicBacklog /t REG_DWORD /d 20

reg add HKLM\System\CurrentControlSet\Services\AFD\Parameters /v MaximumDynamicBacklog /t REG_DWORD /d 20000

reg add HKLM\System\CurrentControlSet\Services\AFD\Parameters /v DynamicBacklogGrowthDelta /t REG_DWORD /d 10
 

echo Decreasing standby connection time 'Half Open' ...

pause >nul



reg add HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v TcpMaxConnectResponseRetransmissions /t REG_DWORD /d 2

echo Reboot windows to take effect

pause >nul
 

[pto]

intresting batch script, ive heard a win server os properly configured can be rock solid agianst ddos.

[MWZ]

intresting batch script, ive heard a win server os properly configured can be rock solid agianst ddos.

 

It won't be, it will reduce the resource usage, but it can still be knocked down... We aren't speaking about nix systems here unfortunately hehe.