MSS tcp registry values in windwos 2003 server security guide



Hi,

I am currently hardening windows 2003 server SP1 O.S according to
"windows
server 2003 security guide" (version 2.1).

I noticed that there are some "MSS:" registry values that do not exist
in
this guide and existed in the previous version, such as:
1. "MSS: (AFD EnableDynamicBacklog) Enable dynamic backlog for Winsock
applications (recommended)" and all other "AFD" settings.
2. "MSS: (EnablePMTUDiscovery) Allow automatic detection of MTU size
(possible DoS by an attacker using a small MTU)".
3. "MSS: (TCPMaxPortsExhausted) How many dropped connect requests to
initiate SYN attack protection (5 is recommended)".

All these settings look important (at leat to me).

Does anyone know the reason these setting do not exist anymore in the
new
security guide?

--
RanD

.