Microsoft Office Professional Plus 2010 Modify the
 

one) Set the lifetime
HKEY_LOCAL_MACHINE Program CurrentControlSet Services Tcpip ParametersDefaultTTL REG_DWORD 0-0xff (0-255 decimal, default 128)
Description: Specifies the outgoing IP packets to set the default time to live (TTL) value. TTL determines the IP packet within the network before reaching the target greatest time for you to endure. It really limits the IP packet allowed to pass prior to disposal quantity of routers. occasionally use this worth to detect the remote host working program.
two) ICMP redirect messages to avoid the attack
HKEY_LOCAL_MACHINE Method CurrentControlSet Providers Tcpip
ParametersEnableICMPRedirects REG_DWORD 0x0 (default is 0x1)
Description: This parameter controls no matter whether Windows 2000 will alter its route table in response to network products (such as a router) to send ICMP redirect messages to it, are in some cases employed to do bad issues. Win2000 the default worth is 1, that response to ICMP redirect message.
three) prohibit the response to ICMP packets
route advertisement
HKEY_LOCAL_MACHINE Program CurrentControlSet Services Tcpip
Parameters Interfaces interface
PerformRouterDiscovery REG_DWORD 0x0 (default is 0x2)
Description: Therefore recommended to flip off response of circular route ICMP packets. Win2000 the default worth is two, that once the DHCP sends the router discover choice enabled.
four) to prevent SYN flood attacks
HKEY_LOCAL_MACHINE System CurrentControlSet Expert services
Tcpip ParametersSynAttackProtect REG_DWORD 0x2 (default is 0x0)
Description: SYN assault safety, which includes decreasing the quantity of SYN-ACK re-transmission, distribution of sources to minimize the retention time. Route cache entry sources allocation delayed until a connection is produced. If synattackprotect = 2, then the connection directions AFD three-way handshake continues to be delayed to total. Notice that only TcpMaxHalfOpen and TcpMaxHalfOpenRetried set from assortment, the safety measures will likely be taken.
5) prohibit the C $, D $ Default share
a class
HKEY_LOCAL_MACHINE System CurrentControlSet Expert services lanmanserver
ParametersAutoShareServer, REG_DWORD, 0x0
6) prohibit the sharing of ADMIN $ default
HKEY_LOCAL_MACHINE System CurrentControlSet Expert services lanmanserver
ParametersAutoShareWks, REG_DWORD, 0x0
seven) restrict the IPC $ default share
HKEY_LOCAL_MACHINE Method CurrentControlSet Manage
Lsarestrictanonymous REG_DWORD 0x0 default
0x1 anonymous consumers can not enumerate the local user list
0x2 anonymous consumers can't connect the device IPC $ share
Note: do not suggest the use of 2, might cause a few of your service doesn't begin, such as SQL Server
eight) do not assistance the IGMP protocol
HKEY_LOCAL_MACHINE Method CurrentControlSet Expert services Tcpip
ParametersIGMPLevel REG_DWORD 0x0 (default is 0x2)
Description: The recall under Win9x includes a bug, would be to use to ensure that other people can use IGMP blue display screen, modify the registry to repair this bug.Win2000 while not this bug, but IGMP is not essential, hence,Microsoft Office Professional Plus 2010, can nonetheless be removed. To 0 immediately after with the route print will not see that nasty phrase of 224.0.0.0.
9) set arp cache getting older time set
HKEY_LOCAL_MACHINE Program CurrentControlSet Expert services: Tcpip
ParametersArpCacheLife REG_DWORD 0-0xFFFFFFFF (seconds, default is 120 seconds)
ArpCacheMinReferencedLife REG_DWORD 0-0xFFFFFFFF (seconds, default is 600)
Observe: If ArpCacheLife higher than or equal ArpCacheMinReferencedLife, the reference or references ARP cache entries expire in ArpCacheLife seconds. If ArpCacheLife much less than ArpCacheMinReferencedLife, doesn't refer to items inside the ArpCacheLife seconds expire, and references to things inside the ArpCacheMinReferencedLife seconds period. every time the outbound packet to the entry for the IP deal with, it'll refer to ARP cache entries.
ten) prohibit the dead gateway monitoring
HKEY_LOCAL_MACHINE Program CurrentControlSet Expert services: Tcpip
ParametersEnableDeadGWDetect REG_DWORD 0x0 (default is ox1)
Observe: In the event you setup multiple gateways, then your machine has issues in coping with several connections, it is going to instantly swap to a backup gateway. Sometimes this isn't a great concept, proposed to prohibit dead gateway monitoring.
11) don't support routing
HKEY_LOCAL_MACHINE Technique CurrentControlSet Solutions: Tcpip
ParametersIPEnableRouter REG_DWORD 0x0 (default is 0x0)
Notice: the value is set to 0x1 with Win2000 routing can thus result in unnecessary troubles.
12) to accomplish NAT when converting the external port to enlarge the optimum
HKEY_LOCAL_MACHINE Technique CurrentControlSet Companies: Tcpip
ParametersMaxUserPort REG_DWORD 5000-65534 (decimal) (default 0x1388 - decimal 5000)
Description: When an software requests in the method when the quantity of out there consumer port, this parameter controls the optimum number of ports utilized. Generally, the quantity of short-term port allocation for your 1024-5000. This parameter is set towards the successful outside, it is going to use the closest legitimate worth (5000 or 65534.) recommended the worth of using the NAT amplification points.
13) modify the MAC deal with of
HKEY_LOCAL_MACHINE Technique CurrentControlSet Control Class
Assist to discover the best window for the
Increase it, in its branches underneath 0000,0001,0002 ... find LAN on Motherboard