Bug#520667: linux-image-2.6.26-1-686: No warning when half-open TCP queue is full

[Charlie Brady <charlieb@budge.apana.org.au>]

On Thu, 25 Feb 2010, Olaf van der Spek wrote:

> On Thu, Feb 25, 2010 at 7:09 PM, Moritz Muehlenhoff <jmm@inutil.org> wrote:
> > On Sat, Mar 21, 2009 at 07:47:36PM +0100, Olaf van der Spek wrote:
> > > Package: linux-image-2.6.26-1-686
> > > Version: 2.6.26-13lenny2
> > > Severity: normal
> > >
> > > Hi,
> > >
> > > When the half-open TCP connection queue is full and syn cookies are enabled, you get a message like "kernel: possible SYN flooding on port 2710. Sending cookies."
> > > However when syn cookies are disabled, you don't get any message (in kern.log), although connections to your server are timing out.
> > > Could such a message be added?
> > > Maybe with a suggestion to increase the size of that queue or to enable syn cookies.
> >
> > That should be discussed with the upstream developers, the Debian BTS is not
> > the best way to change this. You can reach them at linux-net@vger.kernel.org
>
> Hi Linux net devs,
>
> See this issue reported in the Debian BTS.

Wrong list. You want linux-netdev.