XPSP2 will limit your max. connections/sec

[OptiPlex]

http://www.warp2search.net/modules.php?nam...ticle&sid=19021

Hi

Just found this in my event-log after starting emule:

"EventID 4226

TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts"

This is what I get from a M$-Guy when i asked him why XPSP2 slows down programs like emule which open many connections to different destinations:

"Thanks very much for responding. This new feature is one of the stack's

"springboards", security features designed to proactively reduce the

future threat from attacks like blaster and Sasser that typically spread

by opening connections to random addresses. In fact, if this feature had

already been deployed, Sasser would have taken much longer to spread.

It's not likely to help stop the spread of spam unless spammers are

trying to reach open email relays in the same way, by opening

connections on smtp ports of random IP addresses.

This is new with XP SP2 and we're trying to get it right so that it does

not interfere with normal system operation or performance of normal,

legitimate applications, but does slow the spread of viral code. New

connection attempts over the limit for half-open connections get queued

and worked off at a certain (limited rate)."

Possible fix:

http://bink.nu/DesktopModules/ArticleDetai...?ArticleID=2208

Edited July 20, 2004 by OptiPlex

[ElliottLan]

is it possible to turn it off at all?

[scaredmogwai]

(N) :(

[OptiPlex]

is it possible to turn it off at all?

Guy said to leave comments if it is possible, so keep checking that link...

[Jason]

I see nothing worng with this at all, good security change !!

[Toxikk Veteran]

thank you for making that choice for me microsoft.

[MrCalifornia]

You better be able to turn that off pretty easily. That's stupid. Especially with the growth of P2P and the overall use of net apps and web services.

[Jason]

thank you for making that choice for me microsoft.

You all complain you want better security now you get it you compalin again :rolleyes:

[JustGeorge]

Prolly can bypass with a reg edit...I hope.

[MipScript]

They should add an on/off service for sertain programs like they do with the Port Access in the firewall settings, this is a good feature if they impliment it correctly. No doubt Worms like Blaster and Sasser in the future will attack this part of SP2 and deactivate it though

[Rudy]

You all complain you want better security now you get it you compalin again :rolleyes:

for once i agree with you

[Hankyone]

hope this will get cracked cuz that sux

[Toxikk Veteran]

You all complain you want better security now you get it you compalin again  :rolleyes:

no, im simply saying that an option would be better.

isntead of just eliminating it.

[Jason]

no, im simply saying that an option would be better.

isntead of just eliminating it.

An option could be switched off remotely somehow.

[OptiPlex]

We'll see what happens when SP2 is finalized and released. :yes:

No doubt Worms like Blaster and Sasser in the future will attack this part of SP2 and deactivate it though

yea, Microsoft needs to do a lot of work on this part. Maybe make the setting adjustable only during windows setup/sysprep mode ...

The user would definitely know something is wrong when their computer is going back to setup mode :rofl:

[Toxikk Veteran]

also, the fact that this has gone so long without being brought up... like they were trying to just sneak it in? :shifty:

[N1CK]

This will also stop port scans from operating above a certain rate and is likely to detrimentally affect machines under heavy tcp load. :crazy:

[Jason]

also, the fact that this has gone so long without being brought up... like they were trying to just sneak it in? :shifty:

Its most likely documented in the XP SP2 documentation they have released.

[FM]

More great news for Windows users...MS needs to let people run their own damn PCs.

[Raven]

You all complain you want better security now you get it you compalin again :rolleyes:

Restricting my activities on the net is NOT better security. Follow that chain of thought and M$ could just limit us to one connection and a bandwidth of 10k. That will stop the spammers and the worm people.... but we suffer. If M$ hadn't built crap-code to begin with we wouldn't be in the mess.

[Jason]

Restricting my activities on the net is NOT better security. Follow that chain of thought and M$ could just limit us to one connection and a bandwidth of 10k. That will stop the spammers and the worm people.... but we suffer. If M$ hadn't built crap-code to begin with we wouldn't be in the mess.

Security was never going to make using the PC easier.

[MipScript]

If M$ hadn't built crap-code to begin with we wouldn't be in the mess.

:laugh: So true.

[csabo2]

theres no reason they should worry about it, the only time you have a large number of connections is on P2P , which isnt legal , therefore they arent going to trouble themselfs to let you download porn... i dont blame them,

[Jason]

More great news for Windows users...MS needs to let people run their own damn PCs.

Most have no idea how to.

[OptiPlex]

hi kids