Date:  Tue, 19 Sep 2006 23:33:22 -0400
From:  "Darrell D. Mobley" <dmobley (at mark) uhostme.net>
Subject:  [coba-e:07102] Re: SYN Floods
To:  <coba-e (at mark) bluequartz.org>
Message-Id:  <00b301c6dc65$8641baa0$6400a8c0@YOUR4105E587B6>
In-Reply-To:  <00a401c6dc5c$7c9e7820$6400a8c0@YOUR4105E587B6>
X-Mail-Count: 07102

I have blocked three SYN_FLOOD attacks tonight alone.  Haven't had the
server overloaded yet, but it could be a long night.

 

  _____  

From: Darrell D. Mobley [mailto:dmobley (at mark) uhostme.net] 
Sent: Tuesday, September 19, 2006 10:29 PM
To: coba-e (at mark) bluequartz.org
Subject: [coba-e:07101] SYN Floods

 

I have come to the conclusion when I get the random message that the web
server is not responding that the server is experiencing a SYN flood.  I
have sshdfilter and portsentry running, and I imagine that when a
script-kiddie gets blocked, he gets pissed and unleashes a SYN flood.

 

Does BlueQuartz have capabilities for tcp_syncookies built into the kernel?


	
7102_2.html (attatchment)(tag is disabled)