Office Professional 2010 Modify the registry under

1) Set the lifetime
HKEY_LOCAL_MACHINE System CurrentControlSet Services Tcpip ParametersDefaultTTL REG_DWORD 0-0xff (0-255 decimal, default 128)
Description: Specifies the outgoing IP packets to set the default time for you to reside (TTL) worth. TTL determines the IP packet inside the network before reaching the target greatest time to survive. It actually limits the IP packet allowed to pass before disposal quantity of routers. at times use this value to detect the remote host working technique.
two) ICMP redirect messages to stop the attack
HKEY_LOCAL_MACHINE Method CurrentControlSet Companies Tcpip
ParametersEnableICMPRedirects REG_DWORD 0x0 (default is 0x1)
Description: This parameter controls whether Windows 2000 will alter its route table in response to network units (such as a router) to send ICMP redirect messages to it, are occasionally utilised to accomplish poor issues. Win2000 the default worth is one, that response to ICMP redirect message.
three) prohibit the response to ICMP packets
route advertisement
HKEY_LOCAL_MACHINE Method CurrentControlSet Providers Tcpip
Parameters Interfaces interface
PerformRouterDiscovery REG_DWORD 0x0 (default is 0x2)
Description: Therefore advised to flip off response of circular route ICMP packets. Win2000 the default worth is 2, that when the DHCP sends the router uncover choice enabled.
4) to prevent SYN flood attacks
HKEY_LOCAL_MACHINE System CurrentControlSet Solutions
Tcpip ParametersSynAttackProtect REG_DWORD 0x2 (default is 0x0)
Description: SYN attack safety, such as decreasing the number of SYN-ACK re-transmission, distribution of assets to minimize the retention time. Route cache entry resources allocation delayed till a connection is made. If synattackprotect = 2, then the connection instructions AFD three-way handshake has become delayed to complete. Be aware that only TcpMaxHalfOpen and TcpMaxHalfOpenRetried set out of collection, the protection measures is going to be taken.
5) prohibit the C $, D $ Default share
a course
HKEY_LOCAL_MACHINE Method CurrentControlSet Solutions lanmanserver
ParametersAutoShareServer, REG_DWORD, 0x0
six) prohibit the sharing of ADMIN $ default
HKEY_LOCAL_MACHINE System CurrentControlSet Services lanmanserver
ParametersAutoShareWks, REG_DWORD, 0x0
seven) limit the IPC $ default share
HKEY_LOCAL_MACHINE Technique CurrentControlSet Manage
Lsarestrictanonymous REG_DWORD 0x0 default
0x1 anonymous people can not enumerate the nearby consumer checklist
0x2 anonymous end users can not connect the device IPC $ share
Note: do not suggest using 2, may perhaps trigger a few of your support does not start, which include SQL Server
eight) do not help the IGMP protocol
HKEY_LOCAL_MACHINE Program CurrentControlSet Expert services Tcpip
ParametersIGMPLevel REG_DWORD 0x0 (default is 0x2)
Description: The recall below Win9x includes a bug, would be to use to ensure that others can use IGMP blue display, modify the registry to fix this bug.Win2000 although not this bug, but IGMP isn't needed,Office Professional 2010, hence, can still be eliminated. To 0 immediately after with all the route print will not see that nasty term of 224.0.0.0.
9) set arp cache getting older time set
HKEY_LOCAL_MACHINE Technique CurrentControlSet Expert services: Tcpip
ParametersArpCacheLife REG_DWORD 0-0xFFFFFFFF (seconds, default is 120 seconds)
ArpCacheMinReferencedLife REG_DWORD 0-0xFFFFFFFF (seconds, default is 600)
Observe: If ArpCacheLife greater than or equal ArpCacheMinReferencedLife, the reference or references ARP cache entries expire in ArpCacheLife seconds. If ArpCacheLife less than ArpCacheMinReferencedLife, does not refer to items inside the ArpCacheLife seconds expire, and references to goods within the ArpCacheMinReferencedLife seconds interval. each time the outbound packet towards the entry from the IP deal with, it will refer to ARP cache entries.
10) prohibit the dead gateway monitoring
HKEY_LOCAL_MACHINE Program CurrentControlSet Expert services: Tcpip
ParametersEnableDeadGWDetect REG_DWORD 0x0 (default is ox1)
Notice: Should you set up several gateways, then your machine has issues in coping with numerous connections, it'll immediately change to a backup gateway. In some cases this just isn't a great notion, proposed to prohibit dead gateway monitoring.
11) do not help routing
HKEY_LOCAL_MACHINE Program CurrentControlSet Providers: Tcpip
ParametersIPEnableRouter REG_DWORD 0x0 (default is 0x0)
Observe: the value is set to 0x1 with Win2000 routing can thus result in needless issues.
12) to perform NAT when converting the exterior port to enlarge the greatest
HKEY_LOCAL_MACHINE System CurrentControlSet Services: Tcpip
ParametersMaxUserPort REG_DWORD 5000-65534 (decimal) (default 0x1388 - decimal 5000)
Description: When an software requests from the technique when the variety of obtainable person port, this parameter controls the greatest number of ports utilized. Commonly, the number of short-term port allocation for the 1024-5000. This parameter is set towards the effective outside, it will use the closest legitimate value (5000 or 65534.) suggested the value of working with the NAT amplification points.
13) modify the MAC deal with of
HKEY_LOCAL_MACHINE System CurrentControlSet Control Class
Assist to find the proper window for the
Develop it, in its branches under 0000,0001,0002 ... locate LAN on Motherboard