[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: weird tcp syn problem



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thursday 09 August 2001 08:09 am, Peter Billson wrote:
> I'm sure you have already tried all this but:
> > echo  > /proc/sys/net/ipv4/tcp_syncookies
>
>   That should be echo "1" > /proc/sys/net/ipv4/tcp_syncookies
>
> > However, after fruitlessly trying to echo /anything/
>
>   Does /proc/sys/net/ipv4/tcp_suncookies exist? It should.
>
> > got corrupt.  So, I recompiled the kernel
>
>   You need to turn Syn Cookies on during kernel configuration. Your
> /usr/src/linux/.config should show: CONFIG_SYN_COOKIES=y
>
>   Also be sure that if you are using iptables that you DO NOT have
> ipchains support compiled in your kernel also. The config utility will
> let you do this (this really should be reported as a bug) but things
> will break and weird things will happen if you do this.
>
> Pete

Okay, this is bloody weird.  It wasn't turned on.  HOWEVER, and I'm only 
shouting to stress this, I've been using this box with the 2.4.4 kernel for 
*months*.  And I just went back and looked at the source tree, and it also 
didn't have SYN defined.  So now I'm just confused, as opposed to being lost 
and confused :-)  Oh, well.  It's recompiling right now, and that will 
hopefully fix it.  I'll chalk this up to human error (much more believable 
that I screwed up somewhere than the alternative) and move on.  Thanks 
tons....

- -- 
"To me vi is Zen.  To use vi is to practice zen. Every command is
a koan. Profound to the user, unintelligible to the uninitiated.
You discover truth everytime you use it." reddy@lion.austin.ibm.com

dbishop@micron.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE7crhS14eKrYdPXKkRAvyQAJsGDMFInhBiNpOAJUa+ZQCFRgcUygCfU9JD
9lLBywOJP6qQ37mFZ2iLa/E=
=z78W
-----END PGP SIGNATURE-----



Reply to: