Bug#520667: linux-image-2.6.26-1-686: No warning when half-open TCP queue is full
On Thu, Feb 25, 2010 at 7:52 PM, Charlie Brady
<charlieb@budge.apana.org.au> wrote:
>
> On Thu, 25 Feb 2010, Olaf van der Spek wrote:
>
>> On Thu, Feb 25, 2010 at 7:09 PM, Moritz Muehlenhoff <jmm@inutil.org>
>> wrote:
>>>
>>> On Sat, Mar 21, 2009 at 07:47:36PM +0100, Olaf van der Spek wrote:
>>>>
>>>> Package: linux-image-2.6.26-1-686
>>>> Version: 2.6.26-13lenny2
>>>> Severity: normal
>>>>
>>>> Hi,
>>>>
>>>> When the half-open TCP connection queue is full and syn cookies are
>>>> enabled, you get a message like "kernel: possible SYN flooding on port 2710.
>>>> Sending cookies."
>>>> However when syn cookies are disabled, you don't get any message (in
>>>> kern.log), although connections to your server are timing out.
>>>> Could such a message be added?
>>>> Maybe with a suggestion to increase the size of that queue or to enable
>>>> syn cookies.
>>>
>>> That should be discussed with the upstream developers, the Debian BTS is
>>> not
>>> the best way to change this. You can reach them at
>>> linux-net@vger.kernel.org
>>
>> Hi Linux net devs,
>>
>> See this issue reported in the Debian BTS.
>
> Wrong list. You want linux-netdev.
Oops, trying again.
Olaf
Reply to: