Anders,
I see those all the time. This has been discussed numerous times on this list and as
far as I know, the common opinion is, that besides increasing TCP timeout values you
can't do anything against it. But it's better to see those log entries than to disable
SYN-Defender completely and open yourself to SYN-Flood attacks. Others please correct
me, if I'm wrong.
Cheers
Ralf G.
>>> "Reed Mohn, Anders" <[EMAIL PROTECTED]> 28.08.2000 11.00 Uhr >>>
Simon,
I've included a section of our log.
This particular instance is from
an external client into our web-server.
Can anyone tell me why those "RST" (reset?)
messages are sent?
Is it safe to ignore them?
As I said, this started popping up after I enabled the
SYNDefender. If this is normal traffic, why is this picked up by it?
Cheers,
Anders :=)
P.S.
This is a little wide, lines are about 90 char, tab separated.
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
