lkml.org 
[lkml]   [1998]   [Mar]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectSYN flood on [2.0.33]
                    Hello, All !

There was recently a following problem :

Kernel stop responding on 25th port, believing all income connections
are flood. There are a lot "Warning: possible SYN flood from ..." messages.
All of them came from mail relays, e.g. nic.funet.fi, portcullis.itis.com,
etc, including our local mail relays. I don't believe this was a real attack.

There are also a lot of "validated probe" messages , but I never could
reach 25th port telnetting on it. I got "connected" once, but nothing followed.
In other cases connection failed on timeout.

reboot healed this, of course.

So the question is what made such things to happen, how I can prevent this
or correct the problem without reboot()ing.

Thanx beforehand.

Bye.
--
Man is the measure of all things.
-- Protagoras

--
With best of best regards, Pawel S. Veselov (aka Black Angel)
Internet e-mail : vps@mindless.com
Web page : http://www2.math.spbu.ru/~vps/ | ICQ UIN : 5252265


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu

\
 
 \ /
  Last update: 2005-03-22 13:41    [W:0.018 / U:0.864 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site