Bug#520667: linux-image-2.6.26-1-686: No warning when half-open TCP queue is full
On Thu, Feb 25, 2010 at 7:09 PM, Moritz Muehlenhoff <jmm@inutil.org> wrote:
> On Sat, Mar 21, 2009 at 07:47:36PM +0100, Olaf van der Spek wrote:
>> Package: linux-image-2.6.26-1-686
>> Version: 2.6.26-13lenny2
>> Severity: normal
>>
>> Hi,
>>
>> When the half-open TCP connection queue is full and syn cookies are enabled, you get a message like "kernel: possible SYN flooding on port 2710. Sending cookies."
>> However when syn cookies are disabled, you don't get any message (in kern.log), although connections to your server are timing out.
>> Could such a message be added?
>> Maybe with a suggestion to increase the size of that queue or to enable syn cookies.
>
> That should be discussed with the upstream developers, the Debian BTS is not
> the best way to change this. You can reach them at linux-net@vger.kernel.org
Hi Linux net devs,
See this issue reported in the Debian BTS.
Olaf
Reply to: