SP 52039: Enable the TCP “SynAttackProtect” setting in Windows
Symptom: There are many symptoms to a SYN attack. As an example, a client with hostile intent sends as many SYN packets as possible (maybe thousands per second or even much, much more) and instead of using the correct 'from address' in the SYN packet they just make one up. This is called 'address spoofing'.
Resolution: Modify the system registry settings to enable the TCP “SynAttackProtect” setting in Windows.
Additional Information: SYN Attack Protection is a special mode the operating system goes into when it identifies that it is under a SYN attack.
Category:
Security
