SynAttackProtect
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
|
Data type
|
Range
|
Default value
|
|---|
REG_DWORD | 0 | 1 | 0 |
Description
Specifies whether the SYN flooding attack protection feature of TCP/IP is enabled. SYN flooding attack protection is enabled when the value of this entry is 1 and the value of the TcpMaxConnectResponseRetransmissions entry is at least 2 (see note below).
The SYN flooding attack protection feature of TCP detects symptoms of denial-of-service attacks (also known as SYN flooding), and it responds by reducing the time that the server spends on connection requests that it cannot acknowledge.
|
Value
|
Meaning
|
|---|
0 | SYN flooding attack protection is not enabled. |
1 | SYN flooding attack protection is enabled. |
Notes
-
This value is used only when the number of SYN-ACK retransmissions is likely to impair the server, that is, when the value of the TcpMaxConnectResponseRetransmissions entry is at least 2.
-
Windows Server 2003 does not add this entry to the registry. You can add it by using the registry editor Regedit.exe.
See Also