About IP Helper API and new SYN attack notification on Microsoft Windows Server 2003 Service Pack 1

Discussion in 'Windows Networking' started by Didier P, Jul 28, 2006.

  1. Didier P

    Didier P Guest

    Hi All,

    As written in the article "New Networking Features in Microsoft Windows
    Server 2003 Service Pack
    1(http://www.microsoft.com/technet/community/columns/cableguy/cg1204.mspx) ,
    it seems that the IP Helper API supports new SYN attack notification APIs
    named NotifySecurityHealthChange and CancelSecurityHealthChangeNotify.
    The information about these new APIs had not yet been published in the
    Microsoft Developer Network (MSDN) at the moment of this article.

    Does this information available now? If yes could you give me pointer to it.

    Or is it possible to know if on a server we have reached this state, or if
    the server considers that it has been attacked by a SYN attack?

    Thanks for your help.

    Didier P
     
    Didier P, Jul 28, 2006
    #1
    1. Advertisements

  2. Didier P

    pr0gr3sR Guest

    Didier,

    I have been looking for this same information for several days now.
    The only reference that I can find about it is in fact the article that
    you point out. I just downloaded the Windows 2003 Server R2 SDK and
    had a look at the iphlpapi.h file and did not see any reference to the
    NotifySecurityHealthChange function. I would assume that this function
    would be implemented in the same fashion as the NotifyAddrChange and
    NotifyRouteChange functions that are already a part of that API. I may
    be looking in the wrong place but I even just searched all the contents
    of the include files for the SDK and did not find a definition for the
    function.

    I am at a loss personally as well.

    Thanks,
    Mark
     
    pr0gr3sR, Aug 5, 2006
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.