To the person who's getting SYN flooded;
- You need to edit and create values in your regedit to limit the time the connection is opened before it drops the connection. And for this, I'll explain how to drop the connection instead of keeping it opened for a longer time;
* First of all, you'll need to run 'regedit', you can use
Run to open it up!
* Once your registry edit is opened, you'll need to locate yourself to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services (This is in the dropdown section - Image shown below)
http://img171.imageshack.us/img171/2149/regeditb.png
* Then you have to
Right click on the
Services folder, and select
New Key and choose
DWORD, and for the name, call it
SynAttackProtect and give its value
2
- Setting this to 2, will timeout the connection faster, and it'll drop the connection, instead of keeping the connection open [Server -> User] for a long time.
* Do the same step as above, but this time the name will be
EnableDeadGWDetect and the value will be
0. This will disable the host from sending traffic to an unintended gateway.
* You will also need to repeat the process as above, but yet again you'll need to make a new one under the name
EnablePMTUDiscovery and give it a value of
0. This disables the use of high ammounts of resources used on the server, and it will help stop memory overload and crashes.
Once you've done that, you can now close regedit, and you can then reboot your server, and this will stop/slow down SYN attacks!
This tutorial was written by me, with research from Google :P
--------------------
Works for IIS!
--------------------
Also, there's no point in using resource-hungry software like this, when you can use simple programs like Peer Block & IP Restrictions & Kiwi Guard
Contact your host, the program probably blocked your IP from the server. It done that to me when I used it last time.
