Improving Web Application Security: Threats and - CGISecurity

762 Improving Web Application Security: Threats and CountermeasuresDo Not Forward Packets Destined for Multiple HostsMulticast packets may be responded to by multiple hosts, resulting in responses thatcan flood a network.Value: EnableMulticastForwardingRecommended value data: 0Valid range: 0 (false), 1 (true)Description: The routing service uses this parameter to control whether or not IPmulticasts are forwarded. This parameter is created by the Routing and RemoteAccess Service.Only Firewalls Forward Packets Between NetworksA multi-homed server must not forward packets between the networks it isconnected to. The obvious exception is the firewall.Value: IPEnableRouterRecommended value data: 0Valid range: 0 (false), 1 (true)Description: Setting this parameter to 1 (true) causes the system to route IP packetsbetween the networks to which it is connected.Mask Network Topology DetailsThe subnet mask of a host can be requested using ICMP packets. This disclosure ofinformation by itself is harmless; however, the responses of multiple hosts can beused to build knowledge of the internal network.Value: EnableAddrMaskReplyRecommended value data: 0Valid range: 0 (false), 1 (true)Description: This parameter controls whether the computer responds to an ICMPaddress mask request.