服務器安全設置之 服務器安全和性能配置
更新時間:2012年07月18日 21:15:04 作者:
下面文本保存為: windows2000-2003服務器安全和性能注冊表自動配置文件.reg 運行即可,可抵御DDOS攻擊2-3萬包,提高服務器TCP-IP整體安全性能(效果等于軟件防火墻,節(jié)約了系統(tǒng)資源)
把下面文本保存為: windows2000-2003服務器安全和性能注冊表自動配置文件.reg 運行即可
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer]
"NoRecentDocsMenu"=hex:01,00,00,00
"NoRecentDocsHistory"=hex:01,00,00,00
[HKEY_LOCAL_MACHINE/Software/Microsoft/Windows NT/CurrentVersion/Winlogon]
"DontDisplayLastUserName"="1"
[HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/Lsa]
"restrictanonymous"=dword:00000001
[HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/lanmanserver/Parameters]
"AutoShareServer"=dword:00000000
"AutoShareWks"=dword:00000000
[HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/Tcpip/Parameters]
"EnableICMPRedirect"=dword:00000000
"KeepAliveTime"=dword:000927c0
"SynAttackProtect"=dword:00000002
"TcpMaxHalfOpen"=dword:000001f4
"TcpMaxHalfOpenRetried"=dword:00000190
"TcpMaxConnectResponseRetransmissions"=dword:00000001
"TcpMaxDataRetransmissions"=dword:00000003
"TCPMaxPortsExhausted"=dword:00000005
"DisableIPSourceRouting"=dword:00000002
"TcpTimedWaitDelay"=dword:0000001e
"TcpNumConnections"=dword:00004e20
"EnablePMTUDiscovery"=dword:00000000
"NoNameReleaseOnDemand"=dword:00000001
"EnableDeadGWDetect"=dword:00000000
"PerformRouterDiscovery"=dword:00000000
"EnableICMPRedirects"=dword:00000000
[HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/NetBT/Parameters]
"BacklogIncrement"=dword:00000005
"MaxConnBackLog"=dword:000007d0
[HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/AFD/Parameters]
"EnableDynamicBacklog"=dword:00000001
"MinimumDynamicBacklog"=dword:00000014
"MaximumDynamicBacklog"=dword:00007530
"DynamicBacklogGrowthDelta"=dword:0000000a
功能:可抵御DDOS攻擊2-3萬包,提高服務器TCP-IP整體安全性能(效果等于軟件防火墻,節(jié)約了系統(tǒng)資源)
復制代碼 代碼如下:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer]
"NoRecentDocsMenu"=hex:01,00,00,00
"NoRecentDocsHistory"=hex:01,00,00,00
[HKEY_LOCAL_MACHINE/Software/Microsoft/Windows NT/CurrentVersion/Winlogon]
"DontDisplayLastUserName"="1"
[HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/Lsa]
"restrictanonymous"=dword:00000001
[HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/lanmanserver/Parameters]
"AutoShareServer"=dword:00000000
"AutoShareWks"=dword:00000000
[HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/Tcpip/Parameters]
"EnableICMPRedirect"=dword:00000000
"KeepAliveTime"=dword:000927c0
"SynAttackProtect"=dword:00000002
"TcpMaxHalfOpen"=dword:000001f4
"TcpMaxHalfOpenRetried"=dword:00000190
"TcpMaxConnectResponseRetransmissions"=dword:00000001
"TcpMaxDataRetransmissions"=dword:00000003
"TCPMaxPortsExhausted"=dword:00000005
"DisableIPSourceRouting"=dword:00000002
"TcpTimedWaitDelay"=dword:0000001e
"TcpNumConnections"=dword:00004e20
"EnablePMTUDiscovery"=dword:00000000
"NoNameReleaseOnDemand"=dword:00000001
"EnableDeadGWDetect"=dword:00000000
"PerformRouterDiscovery"=dword:00000000
"EnableICMPRedirects"=dword:00000000
[HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/NetBT/Parameters]
"BacklogIncrement"=dword:00000005
"MaxConnBackLog"=dword:000007d0
[HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/AFD/Parameters]
"EnableDynamicBacklog"=dword:00000001
"MinimumDynamicBacklog"=dword:00000014
"MaximumDynamicBacklog"=dword:00007530
"DynamicBacklogGrowthDelta"=dword:0000000a
功能:可抵御DDOS攻擊2-3萬包,提高服務器TCP-IP整體安全性能(效果等于軟件防火墻,節(jié)約了系統(tǒng)資源)
相關文章
win2003 IIS虛擬主機網(wǎng)站防木馬、權限設置、安全配置整理
參考了網(wǎng)絡上很多關于WIN2003的安全設置以及自己動手做了一些實踐,綜合了這些安全設置文章整理而成,希望對大家有所幫助,另外里面有不足之處還請大家多多指點,然后給補上,謝謝2012-01-01如何在WindowsServer服務器上配置SQL?Server數(shù)據(jù)庫
當時買了一臺Windows Server服務器,然后安裝上SQL Server后,想通過外網(wǎng)訪問到數(shù)據(jù)庫,遇到了一些問題,查了很多資料也踩了很多坑。本文主要介紹如何配置SQL Server遠程連接?如何新增管理員用戶等等,需要的朋友可以參考下2023-08-08WIN7/win2008 r2 X64系統(tǒng)IIS 7.5 ACCESS數(shù)據(jù)庫連接故障解決方法
這篇文章主要介紹了WIN7 X64系統(tǒng)IIS 7.5 ACCESS數(shù)據(jù)庫連接故障解決方法,需要的朋友可以參考下2015-01-01虛擬機安裝Windows Server 2008操作系統(tǒng)
這篇文章主要為大家詳細介紹了虛擬機安裝Windows Server 2008操作系統(tǒng),具有一定的參考價值,感興趣的小伙伴們可以參考一下2019-08-08Windows server2022 網(wǎng)絡負載平衡NLB的實現(xiàn)
網(wǎng)絡負載平衡技術就是將訪問壓力均衡分布到多臺服務器上,以此提高整個服務器集群的響應能力,本文主要介紹了Windows server2022 網(wǎng)絡負載平衡NLB的實現(xiàn),感興趣的可以了解一下2023-09-09