[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] Re: syn_flood dos attack (Nico Meijer)



Hi Jordan,

[BTW - it's not iptables stuff]

Well, I tried using the iptables stuff- (echo 1 >
/proc/sys/net/ipv4/tcp_syncookies), and I still see the syn stuff, but I
think its working.  Apache hasn't crashed yet, which is great.  Thanks Nico,
I appreciate the info.

The SYN packets will always reach your box, of course. But if it really is someone trying to do Bad Things, you'll be more secure than you were before.

Forgot to check the IP you mentioned in your original post. Just did and it is a mindspring.com IP. This fits right in with my findings on my boxen.

Have a great one... Nico