Windows XP SP2 to limit Max Connections/sec

[SamBlaZ!ng]

One of the security features in SP2 is intended to help slow down the spread of Sasser type malicious programs, and SP2's stack apparently only allows 10 simultaneous connections per port, compared to the previously unlimited connections.

This has cropped up on Warp2Search:

Just found this in my event-log after starting emule: "EventID 4226 TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts"

This is what I get from a MS-Guy when i asked him why XPSP2 slows down programs like emule which open many connections to different destinations:

"Thanks very much for responding. This new feature is one of the stack's "springboards", security features designed to proactively reduce the future threat from attacks like blaster and Sasser that typically spread by opening connections to random addresses. In fact, if this feature had already been deployed, Sasser would have taken much longer to spread.

It's not likely to help stop the spread of spam unless spammers are trying to reach open email relays in the same way, by opening connections on smtp ports of random IP addresses. This is new with XP SP2 and we're trying to get it right so that it does not interfere with normal system operation or performance of normal, legitimate applications, but does slow the spread of viral code. New connection attempts over the limit for half-open connections get queued and worked off at a certain (limited rate)."

There appears to be a registry workaround to this, which can be found HERE.  

News source: Warp2Search                    

[unimatrix001]

better did have one. me eh business bout no effin worm... let de b!tch come                    

[TriniXaeno]

a good move

I'm not fond of a trillion connections too and fro my machine.

10 connections is enough, thank you very much.

emule and those apps are slow no mc for all their connections. If you could latch unto ares, kazaa or an ftp with the same content, you good to go. Speed iymc.

Bring de limit come.                    

[Evangelion_01]

SamB!-The link is dead man. Try it again.                    

[unimatrix001]

still...you must love service pack 2                    

[flŶpcŶde]

Really why, i havent installed it yet. and i'm quite sceptical really. i did a pc with it, and the firewall was a turnoff. since my preloads include the ability to reomtely control the pc, so i dont have to sit in front of them for simple problems.

so can you let me know what wonderful goodies MS has in store for me                    

[W1nTry]

SP2 works on 9 out of 10 machines its installed on, or so i've read, and I can say from first hand experience my rig was NOT one of the 9, there was an incompatibility with something on my machine (had I not been locked out and unable to boot properly after it crashed I may have found out what exactly it was) so i've staved off using it again so far... but its a definite move in the right direction as far as getting the holes fixed                    

[flŶpcŶde]

I can live with holes, depending on what they are. it all boils down to which instabilities I am prepared to accept                    

[Czar]

It's a must have as far as I'm concerned, especially for the laptop that your sis uses or the PC in the living room that your mom & pops uses...I feel much better knowing that they're running it.

I've also gone ahead and loaded it up on every other machine that I come into direct contact with at work and at friend's houses...my mission is to have everyone on SP2 that I can influence muhhahahha                    

[W1nTry]

I take it Czar doesn't fancy Linux or Unix much....                    

[Czar]

I take it Czar doesn't fancy Linux or Unix much....

Couldn't give a rat's arse really...played with Red Hat, Mandrake, Caldera and the like but as it couldn't run any of me games...I said fek em and stuck to winblows

Me and Billy boy used to pitch marbles back in the day...and in return for all the lix I hit him...I promote his software muahhahha