Re: HELP Under Attack
From: Jem Berkes (jb_at_users.pc9.org)
Date: 08/24/04
- Next message: Alexander Clouter: "Re: HELP Under Attack"
- Previous message: Jim G.: "Dos attack"
- In reply to: Jim G.: "HELP Under Attack"
- Next in thread: Alexander Clouter: "Re: HELP Under Attack"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 23 Aug 2004 23:02:21 GMT
> How do I stop a Dos Syn Attack. My isp has already stopped Upd
> connections from hitting my servers, but I still have 225,000
> connections to my 5 servers from a Syn attack.
Newer inux kernels have a feature that supposed to be able to reduce the
burden of SYNs flooding the TCP/IP stack. Try:
$ echo 1 > /proc/sys/net/ipv4/tcp_syncookies
$ cat /proc/sys/net/ipv4/tcp_syncookies
Should show 1 for enabled.
-- Jem Berkes http://www.sysdesign.ca/
- Next message: Alexander Clouter: "Re: HELP Under Attack"
- Previous message: Jim G.: "Dos attack"
- In reply to: Jim G.: "HELP Under Attack"
- Next in thread: Alexander Clouter: "Re: HELP Under Attack"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
