Re: SYN Attacks - how i cant stop it

2004-02-14 Thread Anton Alin-Adrian
JJB wrote: Very interesting reading about net.inet.tcp.syncookies 'knob'. Thank you for such an curious and informative reply. I am running 4.9 and net.inet.tcp.syncookies=1 is the default. I am writing an 'Harding you FBSD system' article for the local FBSD club, would you please review the fol

RE: SYN Attacks - how i cant stop it

2004-02-13 Thread JJB
February 13, 2004 11:33 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: SYN Attacks - how i cant stop it JJB wrote: > You talk about the net.inet.tcp.syncookies=1 knob, > how about an description on what it does and why you > are recommending using it. The net.inet.tcp.sy

Re: SYN Attacks - how i cant stop it

2004-02-13 Thread Anton Alin-Adrian
JJB wrote: You talk about the net.inet.tcp.syncookies=1 knob, how about an description on what it does and why you are recommending using it. The net.inet.tcp.syncookies 'knob', if set to 1, enables syn cookies. Syn cookies were invented specifically for syn flood protection. A brief description

RE: SYN Attacks - how i cant stop it

2004-02-13 Thread JJB
PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Anton Alin-Adrian Sent: Friday, February 13, 2004 10:27 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: SYN Attacks - how i cant stop it Most important, you did turn on syncookies, did you not? FreeBSD is pretty immune to syn floods. As

Re: SYN Attacks - how i cant stop it

2004-02-13 Thread Anton Alin-Adrian
n. Thanks. - Original Message - From: "Per Engelbrecht" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Saturday, February 07, 2004 5:58 PM Subject: Re: SYN Attacks - how i cant stop it Hi, all nights. Check this. Feb 6 11:54

Re: SYN Attacks - how i cant stop it

2004-02-13 Thread Spades
n. Thanks. - Original Message - From: "Per Engelbrecht" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Saturday, February 07, 2004 5:58 PM Subject: Re: SYN Attacks - how i cant stop it > Hi, > > > > all nights. Check this.