Re: Protection contre un DDOS tcp open

To: Jean-Baptiste FAVRE <jean-baptiste.favre@wanadoo.fr>
Cc: debian-user-french@lists.debian.org
Subject: Re: Protection contre un DDOS tcp open
From: Stephane Bortzmeyer <stephane@sources.org>
Date: Tue, 15 May 2007 22:40:17 +0200
Message-id: <[🔎] 20070515204017.GB14916@sources.org>
In-reply-to: <[🔎] 8710548.77411179247672852.JavaMail.www@wwinf2224>
References: <[🔎] 8710548.77411179247672852.JavaMail.www@wwinf2224>

On Tue, May 15, 2007 at 06:47:53PM +0200,
 Jean-Baptiste FAVRE <jean-baptiste.favre@wanadoo.fr> wrote 
 a message of 13 lines which said:

> Donc, on a bien SYN/SYN-ACK/ACK mais rien derrière.

Les SYN cookies, sans hésiter.

"syncookies=yes" dans /etc/network/options et redémarrage (ou bien
sysctl à la main).

Reply to:

Follow-Ups:
- Re: Protection contre un DDOS tcp open
  - From: Pascal Hambourg <pascal.mail@plouf.fr.eu.org>
- Re: Protection contre un DDOS tcp open
  - From: Franck Joncourt <franck.joncourt@wanadoo.fr>

References:
- Protection contre un DDOS tcp open
  - From: Jean-Baptiste FAVRE <jean-baptiste.favre@wanadoo.fr>

Prev by Date: RE : Re: Compiler le noyau à partir de la sarge
Next by Date: Re: Protection contre un DDOS tcp open
Previous by thread: Protection contre un DDOS tcp open
Next by thread: Re: Protection contre un DDOS tcp open
Index(es):
- Date
- Thread