Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S261549AbTIKVaS (ORCPT ); Thu, 11 Sep 2003 17:30:18 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S261551AbTIKVaR (ORCPT ); Thu, 11 Sep 2003 17:30:17 -0400 Received: from adsl-63-194-239-202.dsl.lsan03.pacbell.net ([63.194.239.202]:23058 "EHLO mmp-linux.matchmail.com") by vger.kernel.org with ESMTP id S261549AbTIKVaG (ORCPT ); Thu, 11 Sep 2003 17:30:06 -0400 Date: Thu, 11 Sep 2003 14:30:06 -0700 From: Mike Fedyk To: Alan Cox Cc: Breno , Valdis.Kletnieks@vt.edu, Stan Bubrouski , Linux Kernel Mailing List Subject: Re: Size of Tasks during ddos Message-ID: <20030911213006.GD26618@matchmail.com> Mail-Followup-To: Alan Cox , Breno , Valdis.Kletnieks@vt.edu, Stan Bubrouski , Linux Kernel Mailing List References: <001b01c39047$d65cf580$f8e4a7c8@bsb.virtua.com.br> <20030911002755.GA13177@triplehelix.org> <3F5FD993.2060900@ccs.neu.edu> <009201c37860$f0d3c5f0$131215ac@poslab219> <200309111419.h8BEJbSo010948@turing-police.cc.vt.edu> <009f01c3788a$08b7f780$9f0210ac@forumci.com.br> <1063305670.3605.0.camel@dhcp23.swansea.linux.org.uk> <20030911212341.GB26618@matchmail.com> <1063315578.3886.9.camel@dhcp23.swansea.linux.org.uk> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1063315578.3886.9.camel@dhcp23.swansea.linux.org.uk> User-Agent: Mutt/1.5.4i Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 843 Lines: 22 On Thu, Sep 11, 2003 at 10:26:19PM +0100, Alan Cox wrote: > On Iau, 2003-09-11 at 22:23, Mike Fedyk wrote: > > On Thu, Sep 11, 2003 at 07:41:10PM +0100, Alan Cox wrote: > > > On Iau, 2003-09-11 at 18:27, Breno wrote: > > > > This is a Syn Flood DDoS > > > > > > echo "1" >/proc/sys/net/ipv4/tcp_syncookies > > > > > > End of problem. > > > > And why isn't this on by default when it's compiled in? > > Syncookies protect you from DoS stuff but they have other side > effects on efficiency when they are in use. Care to point me to a thread in the archives? I'd like to read more about this. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/