The document from Symantec that you reference was written much earlier than 2010 as it still references the Windows 2000 operating system. When you take into account how much technology has advanced and the size of the pipes and amount of resources servers have today, they handle syn-attacks much better than they did previously.
We really need to reference updated material specifically for Windows 2008 servers - which isn't in abundance today.
Just wanted to give you a specific reference for some more updated information:
blogs.technet.com/b/netro/archive/2010/08/30/tcp-ip-stack-hardening-in-operating-systems-starting-with-windows-vista.aspx
mnemonyss 2 months ago
@mnemonyss
I actually make mention that the Symantec paper is older, and on the blog post I have links to 2 more recent articles from Microsoft.
1. Next Generation TCP/IP Stack in Windows Vista and Windows Server 2008
2. TCP/IP Registry Values for Microsoft Windows Vista and Windows Server 2008
I would agree there's not enough information available atm
sma92878 2 months ago
@mnemonyss
for some reason it wont let me post the links here but they are on the website in the 2nd article in this series.
sma92878 2 months ago
The document from Symantec that you reference was written much earlier than 2010 as it still references the Windows 2000 operating system. When you take into account how much technology has advanced and the size of the pipes and amount of resources servers have today, they handle syn-attacks much better than they did previously.
We really need to reference updated material specifically for Windows 2008 servers - which isn't in abundance today.
mnemonyss 2 months ago
Thanks a whole lot, spectacular sessions.
Imsun, network admin
imsun 3 months ago
Thank's for this interesting video :-)
Ebikoner0815 3 months ago