如何防范DDOS攻击（How to guard against DDOS attacks）.docVIP

如何防范DDOS攻击（How to guard against DDOS attacks） How to guard against DDOS attacks In the light of the infamous behavior of grand or certain despicable people, I have specifically prepared the attack against DDOS! It can definitely prevent the DDOS of big traffic from legend ports or WEB from taking on about 400 thousand packets of attacks Set protection for your legendary ports such as 80.7000.7100.7200. Then modify or add the following values by the registry below. Note that the following security settings are modified through the registry, which depends on the configuration of the server, especially the processing power of the CPU. If in accordance with the following security settings, the server uses dual Xeon 2.4G configuration, after testing, can withstand approximately 10 thousand packet attack. Then you can sit back and relax. A part of DDOS we can pass the DOS command netstat -anmore or comprehensive network analysis software: sniff etc. found related to methods of attack, such as attack a major port, or other major ports, from which other IP. In this way, we can use W2ks own remote access and routing, or IP policy, and other tools with their own to solve these attacks. As we can not use these to check the relevant data, we can also try to prevent the DDOS attack by setting up the security settings for the server. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] close invalid gateway check. When the server sets up multiple gateways, the system attempts to connect when the network is not unblocked The second gateway, by closing it, can optimize the network. EnableDeadGWDetect =dwordDo not respond to ICMP redirection messages. Such messages may be used to attack, so the system should refuse to accept ICMP redirect messages. EnableICMPRedirects =dwordNETBIOS name is not allowed. When the attacker issues a query server NETBIOS name, the server can be prevented from responding. Note that the system must be installed above