Re: TCP Syn Flooding

From: Steve Suehring (sec@braingia.org)
Date: 02/18/03

  • Next message: Trevor Cushen: "RE: Law office recommendations?" 
    Date: Tue, 18 Feb 2003 07:56:53 -0600
From: Steve Suehring <sec@braingia.org>
To: Tim Laureska <hometeam@goeaston.net>

    While I obviously can't guarantee it, I would sincerely doubt that there
    is a true syn flood taking place sourced in the doubleclick network. What
    were you doing at the time? Possibly surfing the web? Those source and
    destination ports look awfully like you were surfing the web and
    doubleclick's side tried to open a connection to you for their load
    balancing software.

    My guess would be that the netgear is picking up a false positive.

    Searching deja reveals that this may be the case after all:

    http://groups.google.com/groups?oi=djq&selm=an_523012517

    Steve

    On Sat, Feb 15, 2003 at 09:20:46AM -0500, Tim Laureska wrote:
    > OK. I just installed a Netgear firewall box between a cable modem and a
    > NT 4.0 server on a small network.. and set it up to email me attempts at
    > security breaches. I am brand new to these devices and a relative
    > neophyte to internet/internal network security. So the question is
    > this.
    >
    > I received this message a few times yesterday after I installed the box:
    >
    >
    > Fri, 02/14/2003 20:35:01 - TCP connection dropped -
    > Source:205.138.3.201, 80, WAN - Destination:69.2.167.25, 20306, LAN -
    > 'TCP:Syn Flooding' End of Log ----------
    >
    > What should I make of this?
    >
    > T.
    >
    >

    Relevant Pages

    • Re: Thin Client question
      ... without an OS it cannot be configured for the network. ... With a disk and an OS, it could be used for surfing the web however, I'm not ... "Michael Hobbs" wrote in message ... > on my home peer to peer network with static IP dsl using dhcp and nat? ...
      (microsoft.public.windowsxp.basics)
    • lease renew problem
      ... My XP SP1 home box suddenly starts having problems to renew its ... Already after a few minutes the connection ... to continue surfing is gone. ... od its own from the network address server". ...
      (microsoft.public.windowsxp.network_web)
    • Problems when surfing the net.
      ... I'm having a very weird problem with my network. ... I'm surfing in the net sometimes I get ... IE, Netscape, Opera and Mozilla Firebird and is the same ... I use Windows XP, Internet Explorer 6 and 512 DSL ...
      (microsoft.public.windows.inetexplorer.ie6.browser)
    • Problems while surfing the web.
      ... I'm having a very weird problem with my network. ... I'm surfing in the net sometimes I get ... IE, Netscape, Opera and Mozilla Firebird and is the same ...
      (microsoft.public.windowsxp.network_web)
    • Problems while surfing the web
      ... I'm having a very weird problem with my network. ... I'm surfing in the net sometimes I get ... IE, Netscape, Opera and Mozilla Firebird and is the same ...
      (microsoft.public.windows.inetexplorer.ie6.browser)