Reply to thread

Message

<blockquote data-quote="TairikuOkami" data-source="post: 1081899" data-attributes="member: 61892">Aside from disabling IPv6[SPOILER][CODE]rem Disable IPv6netsh int ipv6 isatap set state disablednetsh int teredo set state disablednetsh interface ipv6 6to4 set state state=disabled undoonstop=disabledreg add &quot;HKLM\Software\Policies\Microsoft\Windows\TCPIP\v6Transition&quot; /v &quot;6to4_State&quot; /t REG_SZ /d &quot;Disabled&quot; /freg add &quot;HKLM\Software\Policies\Microsoft\Windows\TCPIP\v6Transition&quot; /v &quot;ISATAP_State&quot; /t REG_SZ /d &quot;Disabled&quot; /freg add &quot;HKLM\Software\Policies\Microsoft\Windows\TCPIP\v6Transition&quot; /v &quot;Teredo_State&quot; /t REG_SZ /d &quot;Disabled&quot; /freg add &quot;HKLM\System\CurrentControlSet\Services\Tcpip6\Parameters&quot; /v &quot;DisabledComponents&quot; /t REG_DWORD /d &quot;255&quot; /freg add &quot;HKLM\System\CurrentControlSet\Services\Tcpip6\Parameters&quot; /v &quot;EnableICSIPv6&quot; /t REG_DWORD /d &quot;255&quot; /f[/CODE][/SPOILER]I would also set this:[SPOILER][CODE]rem Disable Discovery of Designated Resolvers (DDR), a mechanism for DNS clients to use DNS records to discover a resolver&#039;s encrypted DNS configurationreg add &quot;HKLM\Software\Policies\Microsoft\Windows NT\DNSClient&quot; /v &quot;EnableDdr&quot; /t REG_DWORD /d &quot;0&quot; /frem 3 - Require DoH / 2 - Allow DoH / 1 - Prohibit DoHreg add &quot;HKLM\Software\Policies\Microsoft\Windows NT\DNSClient&quot; /v &quot;DoHPolicy&quot; /t REG_DWORD /d &quot;3&quot; /frem Disable IDN (internationalized domain name)reg add &quot;HKLM\Software\Policies\Microsoft\Windows NT\DNSClient&quot; /v &quot;DisableIdnEncoding&quot; /t REG_DWORD /d &quot;1&quot; /freg add &quot;HKLM\Software\Policies\Microsoft\Windows NT\DNSClient&quot; /v &quot;EnableIdnMapping&quot; /t REG_DWORD /d &quot;0&quot; /frem 1 - Discovery of Network-designated Resolvers DNS over TLS (DoT), DNS over HTTPS (DoH), DNS over QUIC (DoQ)reg add &quot;HKLM\System\CurrentControlSet\Services\Dnscache\Parameters&quot; /v &quot;EnableDnr&quot; /t REG_DWORD /d &quot;0&quot; /frem Disable smart multi-homed name resolutionreg add &quot;HKLM\Software\Policies\Microsoft\Windows NT\DNSClient&quot; /v &quot;DisableSmartNameResolution&quot; /t REG_DWORD /d &quot;1&quot; /freg add &quot;HKLM\System\CurrentControlSet\Services\Dnscache\Parameters&quot; /v &quot;DisableParallelAandAAAA&quot; /t REG_DWORD /d &quot;1&quot; /frem Disable Multicast/mDNS repeater / https://f20.be/blog/mdnsreg add &quot;HKLM\System\CurrentControlSet\Services\Dnscache\Parameters&quot; /v &quot;EnableMDNS&quot; /t REG_DWORD /d &quot;0&quot; /freg add &quot;HKLM\Software\Policies\Microsoft\Windows NT\DNSClient&quot; /v &quot;EnableMulticast&quot; /t REG_DWORD /d &quot;0&quot; /freg add &quot;HKLM\System\CurrentControlSet\Services\Dnscache\Parameters&quot; /v &quot;EnableAutoDoh&quot; /t REG_DWORD /d &quot;2&quot; /frem 1 - Disable Domain Name Devolution (DNS AutoCorrect) / 0 - Enabled (Default)reg add &quot;HKLM\System\CurrentControlSet\Services\Tcpip\Parameters&quot; /v &quot;UseDomainNameDevolution&quot; /t REG_DWORD /d &quot;0&quot; /f[/CODE][/SPOILER]</blockquote>

[QUOTE="TairikuOkami, post: 1081899, member: 61892"] Aside from disabling IPv6 [SPOILER] [CODE]rem Disable IPv6 netsh int ipv6 isatap set state disabled netsh int teredo set state disabled netsh interface ipv6 6to4 set state state=disabled undoonstop=disabled reg add "HKLM\Software\Policies\Microsoft\Windows\TCPIP\v6Transition" /v "6to4_State" /t REG_SZ /d "Disabled" /f reg add "HKLM\Software\Policies\Microsoft\Windows\TCPIP\v6Transition" /v "ISATAP_State" /t REG_SZ /d "Disabled" /f reg add "HKLM\Software\Policies\Microsoft\Windows\TCPIP\v6Transition" /v "Teredo_State" /t REG_SZ /d "Disabled" /f reg add "HKLM\System\CurrentControlSet\Services\Tcpip6\Parameters" /v "DisabledComponents" /t REG_DWORD /d "255" /f reg add "HKLM\System\CurrentControlSet\Services\Tcpip6\Parameters" /v "EnableICSIPv6" /t REG_DWORD /d "255" /f [/CODE] [/SPOILER] I would also set this: [SPOILER][CODE]rem Disable Discovery of Designated Resolvers (DDR), a mechanism for DNS clients to use DNS records to discover a resolver's encrypted DNS configuration reg add "HKLM\Software\Policies\Microsoft\Windows NT\DNSClient" /v "EnableDdr" /t REG_DWORD /d "0" /f rem 3 - Require DoH / 2 - Allow DoH / 1 - Prohibit DoH reg add "HKLM\Software\Policies\Microsoft\Windows NT\DNSClient" /v "DoHPolicy" /t REG_DWORD /d "3" /f rem Disable IDN (internationalized domain name) reg add "HKLM\Software\Policies\Microsoft\Windows NT\DNSClient" /v "DisableIdnEncoding" /t REG_DWORD /d "1" /f reg add "HKLM\Software\Policies\Microsoft\Windows NT\DNSClient" /v "EnableIdnMapping" /t REG_DWORD /d "0" /f rem 1 - Discovery of Network-designated Resolvers DNS over TLS (DoT), DNS over HTTPS (DoH), DNS over QUIC (DoQ) reg add "HKLM\System\CurrentControlSet\Services\Dnscache\Parameters" /v "EnableDnr" /t REG_DWORD /d "0" /f rem Disable smart multi-homed name resolution reg add "HKLM\Software\Policies\Microsoft\Windows NT\DNSClient" /v "DisableSmartNameResolution" /t REG_DWORD /d "1" /f reg add "HKLM\System\CurrentControlSet\Services\Dnscache\Parameters" /v "DisableParallelAandAAAA" /t REG_DWORD /d "1" /f rem Disable Multicast/mDNS repeater / https://f20.be/blog/mdns reg add "HKLM\System\CurrentControlSet\Services\Dnscache\Parameters" /v "EnableMDNS" /t REG_DWORD /d "0" /f reg add "HKLM\Software\Policies\Microsoft\Windows NT\DNSClient" /v "EnableMulticast" /t REG_DWORD /d "0" /f reg add "HKLM\System\CurrentControlSet\Services\Dnscache\Parameters" /v "EnableAutoDoh" /t REG_DWORD /d "2" /f rem 1 - Disable Domain Name Devolution (DNS AutoCorrect) / 0 - Enabled (Default) reg add "HKLM\System\CurrentControlSet\Services\Tcpip\Parameters" /v "UseDomainNameDevolution" /t REG_DWORD /d "0" /f [/CODE][/SPOILER] [/QUOTE]

Verification