|
|
有用的部分只是以下的一个注册表文件,所谓的补丁,就是导入了这个注册表文件,我帖出来简单说说原理:这个注册表文件,把默认的远程端口3389改成了别的端口,同时禁用了网络自动共享及在XP的防火墙中禁用了3389端口。对防止远程入侵有一点点作用,如果有需要,大家可把这个注册表文件下载下来:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\Tds\tcp]
""PortNumber""=dword:0054219D
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp]
""PortNumber""=dword:0054219D
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Control\Terminal Server\Wds\rdpwd\Tds\tcp]
""PortNumber""=dword:0054219D
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Control\Terminal Server\WinStations\RDP-Tcp]
""PortNumber""=dword:0054219D
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters]
""AutoShareWksAutoShareWks""=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\lanmanserver\parameters]
""AutoShareWksAutoShareWks""=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
""3389:TCP""="3389:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22009"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
""3389:TCP""="3389:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22009"
[ 本帖最后由 6618 于 2006-7-9 11:15 AM 编辑 ] |
|