OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: NT share connection bug?
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: NT share connection bug?

  • To: NTBUGTRAQLISTSERV.NTBUGTRAQ.COM
  • Subject: Re: NT share connection bug?
  • From: "Schmidt, Jeff" <schmidtbos.ag.ohio-state.edu>
  • Date: Fri, 14 May 1999 10:31:19 -0400
  • Approved-By: Russ.CooperRC.ON.CA
  • Comments: To: Brian Steele <steele_bSPICEISLE.COM>
  • Reply-To: "Schmidt, Jeff" <schmidtbos.ag.ohio-state.edu>
  • Sender: Windows NT BugTraq Mailing List <NTBUGTRAQLISTSERV.NTBUGTRAQ.COM>
> and share permissions are set so that only the user of
> the share can access the files in the share.

Setting this value to any "low" number opens the possibility of DoS attacks,
as you've seen.  Assuming you have the security set correctly, there is
little need to limit the number of connections.

A careful balance must be made between the:
        HKLM\System\Current\Services\LanmanServer\Parameters\Autodisconnect
(which is the timeout (in minutes, I believe) before the server axes NetBIOS
connections) and the sharepoint maximum connections.  If you limit
connections to the sharepoint, make sure autodisconnect is enabled and that
it is a relatively "small" value as to avoid the potential DoS situation
you're experiencing.  Be aware that setting autodisconnect too low will
reduce performance.

Jeff Schmidt, MCSE, CISSP
Systems Developer / Engineer
The Ohio State University Extension
Voice: (614) 292-0295