Re: tcp syn flood and /proc configuration

To: Patrick Hsieh <pahud@pahud.net>
Cc: debian-security@lists.debian.org
Subject: Re: tcp syn flood and /proc configuration
From: Vincent Hanquez <tab@crans.org>
Date: Tue, 7 May 2002 17:39:12 +0200
Message-id: <[🔎] 20020507153912.GA1184@darwin.crans.org>
In-reply-to: <[🔎] 20020507222434.3BA0.PAHUD@pahud.net>
References: <[🔎] 20020507222434.3BA0.PAHUD@pahud.net>

On Tue, May 07, 2002 at 10:26:43PM +0800, Patrick Hsieh wrote:
> Hello list,
> 
> Is there anyone having any suggestion to tune the /proc/sys/net/ipv4/*
> to avoid tcp syn flood attack?

there a kernel option "IP: TCP syncookie support" to do that
you can activate it with :

echo 1 > /proc/sys/net/ipv4/tcp_syncookies

hope it helps

-- 
Tab


-- 
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Reply to:

Follow-Ups:
- Re: tcp syn flood and /proc configuration
  - From: Patrick Hsieh <pahud@pahud.net>

References:
- tcp syn flood and /proc configuration
  - From: Patrick Hsieh <pahud@pahud.net>

Prev by Date: Re: CNAME, iptables and qmail
Next by Date: Re: RE APT-GET Problems
Previous by thread: tcp syn flood and /proc configuration
Next by thread: Re: tcp syn flood and /proc configuration
Index(es):
- Date
- Thread