MSFN Forum: SYN Flood Attacks windows 2000 - MSFN Forum

Jump to content



Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

SYN Flood Attacks windows 2000 cannot go ONline Rate Topic: -----

#1 User is offline   kk123 

  • Newbie
  • Group: Members
  • Posts: 17
  • Joined: 02-June 04

Posted 06 June 2005 - 07:37 AM

Hi everyone my windows 2000 sp4 just been SYN Flood Attacked and it cannot go Online, once it go online the attack will happen again, i've already do serveral reg fix to remove this syn flood but cannot make it, my server got the most updated HF.

anyone face this problem b4 ?? pls guide me . Thx in advance

Attached File(s)




#2 User is offline   fdv 

  • MSFN Expert
  • Group: Developers
  • Posts: 1,089
  • Joined: 16-July 04
  • OS:Windows 7 x86
  • Country: Country Flag

Posted 07 June 2005 - 02:30 PM

What registry values did you tweak?

Under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services, have you added Microsoft's recommended settings?

Value Name Value (REG_DWORD)
SynAttackProtect 2
TcpMaxPortsExhausted 1
TcpMaxHalfOpen 500
TcpMaxHalfOpenRetried 400
TcpMaxConnectResponseRetransmissions 2
TcpMaxDataRetransmissions 2
EnablePMTUDiscovery 0
KeepAliveTime 300000 (5 minutes)
NoNameReleaseOnDemand 1

#3 User is offline   kk123 

  • Newbie
  • Group: Members
  • Posts: 17
  • Joined: 02-June 04

Posted 08 June 2005 - 08:54 PM

Thx for your reply

yes i have tweaked as microsoft recomemed

anyway i have found a solution to resolve the problem now my server is running smoothly

#4 User is offline   Win2k3EE 

  • Member
  • PipPip
  • Group: Members
  • Posts: 170
  • Joined: 15-May 05

Posted 09 June 2005 - 01:38 AM

kk123, on Jun 9 2005, 05:54 AM, said:

anyway i have found a solution to resolve the problem now my server is running smoothly
<{POST_SNAPBACK}>

Would you be kind to post your solution here. Maybe there are others who need your solution. ;)

#5 User is offline   kk123 

  • Newbie
  • Group: Members
  • Posts: 17
  • Joined: 02-June 04

Posted 10 June 2005 - 05:58 AM

it is a service hiding under system32 and it only will triggle once u go online if u are not ONLINE <---- join public , it's like normal if u stay in private.

identify the particural service and delete it. (unpack32.exe).

So u need to apply the microsoft recemmemed tweak as fdv posted ( there is some more ) i can found it so i think there won't be a problem for u all

Hope this help

Best Regards to u all

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users



All trademarks mentioned on this page are the property of their respective owners
Copyright © 2001 - 2011 msfn.org
Privacy Policy