Re: TCP SYN cookies and Bug #520668
On Mon, Feb 15, 2010 at 08:53:26 +1100, Robert Collins wrote:
> On Sun, 2010-02-14 at 11:00 +0100, Florian Weimer wrote:
> > BTW, will users think that the current warning ("possible SYN flooding
> > on port %d. Sending cookies") always indicates an attack? Hopefully
> > not.
> I'm sure non sysadmins will be confused by it- but they probably don't
> look at dmesg anyhow except when asked to to gather diagnostic data for
> a sysadmin/developer.
FWIW I'd be confused by such a warning, and I look at dmesg regularly.