W2k3 hardening Doc: MSS section.

[bdunne]

I am implementing the CIS w2k3 hardening settings on 7 machines.

The items 65 through 84 in section 3.2.1 all refer to MSS. For example
in 3.2.1.69: MSS (disable ip source routing) IP source routing
protection level (protects against packet spoofing).

My question: Where in the OS do I implement\configure these MSS
settings? Are they maybe advanced settings of the ip protocol or
registry settings etc.

I am fairly sure CIS doc is mostly similar to other papers e.g
Microsoft so hopefully these settings are familiar to most.

Thanks in adv.

 

[Miha Pihler [MVP]]

Hi,

to apply these settings (changes) you need to modify registry.

This article should explain in detail where and how to modify these changes.
It also provides recommended values.

http://www.microsoft.com/technet/security/topics/serversecurity/tcg/tcgch10n.mspx

Feel free to post back if you have any additinal questions...