How to disable smbv3 compression
If you want to disable Compression
to unauthenticated attackers for exploiting the vulnerability, you can block the
regedit file.
If your want to disable
open command run as Administrator type following reg file in command prompt and press enter
reg add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" /v DisableCompression /t REG_DWORD /d 0 /F
If your want to enable
reg add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" /v DisableCompression /t REG_DWORD /d 1 /F
Notes:
·
No reboot is require
after making that change.
·
This workaround solution
it not does prevent exploitation of SMB clients; that is to say, this only
stops the vulnerability in SMBv3 compression by being leveraged by SMBleed.
·
SMB Compression is not
yet used by Windows or Windows Server, and disabling SMB Compression has no
negative performance impact.
0 Comments