Bug#520668: procps: Enable syn cookies by default

2010-03-05 Thread Christoph Anton Mitterer
Anything new here? I think the article you've linked to in sysctl.conf (http://lwn.net/Articles/277146/) can be seen as encouragement to enable syncookies, or not? It already says that they're only activated if the system runs into trouble, and then it's still better to have limited connections

Bug#520668: procps: Enable syn cookies by default

2009-12-03 Thread Olaf van der Spek
On Tue, May 26, 2009 at 7:04 PM, Olaf van der Spek olafvds...@gmail.com wrote: I'll have to go searching now for the reasons why it wasnt enabled. Hi Craig, Found any? Anybody home? -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe.

Bug#520668: procps: Enable syn cookies by default

2009-12-03 Thread Craig Small
On Thu, Dec 03, 2009 at 12:26:50PM +0100, Olaf van der Spek wrote: On Tue, May 26, 2009 at 7:04 PM, Olaf van der Spek olafvds...@gmail.com wrote: I'll have to go searching now for the reasons why it wasnt enabled. Hi Craig, Found any? Anybody home? yes and the answer is no.

Bug#520668: procps: Enable syn cookies by default

2009-12-03 Thread Olaf van der Spek
On Thu, Dec 3, 2009 at 11:20 PM, Craig Small csm...@debian.org wrote: On Thu, Dec 03, 2009 at 12:26:50PM +0100, Olaf van der Spek wrote: On Tue, May 26, 2009 at 7:04 PM, Olaf van der Spek olafvds...@gmail.com wrote: I'll have to go searching now for the reasons why it wasnt enabled. Hi

Bug#520668: procps: Enable syn cookies by default

2009-09-02 Thread Olaf van der Spek
Craig Small wrote: On Tue, Aug 25, 2009 at 09:32:10PM +0200, Christoph Anton Mitterer wrote: I think the best way would be if you (or someone else) could start a new discussion on this,.. either on lkml, or debian-devel,... perhaps there are some experts who can give a definite answer aboute

Bug#520668: procps: Enable syn cookies by default

2009-08-25 Thread Olaf van der Spek
tw: Olaf, have you read http://lkml.org/lkml/2008/2/5/167 ? No, and I didn't receive your email either. :( My previous argument still holds: AFAIK syn cookies only get send when the half-open TCP connection queue is full. So stuff like window scaling should work fine in normal situations.

Bug#520668: procps: Enable syn cookies by default

2009-08-25 Thread Christoph Anton Mitterer
On Tue, 2009-08-25 at 19:36 +0200, Olaf van der Spek wrote: No, and I didn't receive your email either. :( What do you mean? I haven't put you on CC before... My previous argument still holds: AFAIK syn cookies only get send when the half-open TCP connection queue is full. So stuff like

Bug#520668: procps: Enable syn cookies by default

2009-08-25 Thread Christoph Anton Mitterer
On Tue, 2009-08-25 at 15:15 +1000, Craig Small wrote: If there is no real sway the other way (ie to enable the syncookies) I will close this bug. Maybe starting an experts-discussion on this (as suggested just before) could help. Anway,.. as I wrote you in my last email,... a more detailed

Bug#520668: procps: Enable syn cookies by default

2009-08-25 Thread Olaf van der Spek
Christoph Anton Mitterer wrote: On Tue, 2009-08-25 at 19:36 +0200, Olaf van der Spek wrote: No, and I didn't receive your email either. :( What do you mean? I haven't put you on CC before... Maybe that's why. I think the best way would be if you (or someone else) could start a new

Bug#520668: procps: Enable syn cookies by default

2009-08-25 Thread Craig Small
On Tue, Aug 25, 2009 at 09:32:10PM +0200, Christoph Anton Mitterer wrote: I think the best way would be if you (or someone else) could start a new discussion on this,.. either on lkml, or debian-devel,... perhaps there are some experts who can give a definite answer aboute the best setting (if

Bug#520668: procps: Enable syn cookies by default

2009-08-24 Thread Craig Small
On Thu, Aug 13, 2009 at 11:56:02PM +0200, Christoph Anton Mitterer wrote: Anything new here? btw: Olaf, have you read http://lkml.org/lkml/2008/2/5/167 ? That thread is arguing for syncookies to be turned off, not on (or rather the patch not be included). While there seems to be little

Bug#520668: procps: Enable syn cookies by default

2009-08-13 Thread Christoph Anton Mitterer
HI. Anything new here? btw: Olaf, have you read http://lkml.org/lkml/2008/2/5/167 ? Chris. This message was sent using IMP, the Internet Messaging Program. -- To UNSUBSCRIBE, email to

Bug#520668: procps: Enable syn cookies by default

2009-05-26 Thread Olaf van der Spek
On Tue, Mar 24, 2009 at 7:00 AM, Craig Small csm...@debian.org wrote: On Sat, Mar 21, 2009 at 08:08:40PM +0100, Olaf van der Spek wrote: Could syn cookies be enabled by default? AFAIK syn cookies only get send when the half-open TCP connection queue is full. So stuff like window scaling

Bug#520668: procps: Enable syn cookies by default

2009-03-23 Thread Craig Small
On Sat, Mar 21, 2009 at 08:08:40PM +0100, Olaf van der Spek wrote: Could syn cookies be enabled by default? AFAIK syn cookies only get send when the half-open TCP connection queue is full. So stuff like window scaling should work fine in normal situations. I thought there was a reason why it

Bug#520668: procps: Enable syn cookies by default

2009-03-21 Thread Olaf van der Spek
Package: procps Version: 1:3.2.7-11 Severity: wishlist Hi, Could syn cookies be enabled by default? AFAIK syn cookies only get send when the half-open TCP connection queue is full. So stuff like window scaling should work fine in normal situations. Greetings, Olaf # Uncomment the next line