Re: [cobalt-security] SYN attacks killing me! Please HELP!

["E.B. Dreger" <eddy+public+spam@xxxxxxxxxxxxxxxxx>]

IEPE> Date: Mon, 22 Jul 2002 17:58:30 -0500
IEPE> From: "Ing. Ernesto [ISO-8859-1] Pérez Estévez"


IEPE> I've used tcp_syn_cookies, I have tried lots of ipchains
IEPE> firewalls, and nothing seems to help. Oh, adnd yes, I've

Consider TCP intercept (Cisco term) on your border router(s) if
{ it is | they are } beefy enough.  If you're colocated, see if
your provider will do it for you.  With TCP intercept on, your
server(s) see only valid SYN requests.


Eddy
--
Brotsman & Dreger, Inc. - EverQuick Internet Division
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: +1 (785) 865-5885 Lawrence and [inter]national
Phone: +1 (316) 794-8922 Wichita

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Date: Mon, 21 May 2001 11:23:58 +0000 (GMT)
From: A Trap <blacklist@xxxxxxxxx>
To: blacklist@xxxxxxxxx
Subject: Please ignore this portion of my mail signature.

These last few lines are a trap for address-harvesting spambots.
Do NOT send mail to <blacklist@xxxxxxxxx>, or you are likely to
be blocked.