On Tue, May 07, 2002 at 10:26:43PM +0800, Patrick Hsieh wrote:
> Hello list,
> 
> Is there anyone having any suggestion to tune the /proc/sys/net/ipv4/*
> to avoid tcp syn flood attack?

there a kernel option "IP: TCP syncookie support" to do that
you can activate it with :

echo 1 > /proc/sys/net/ipv4/tcp_syncookies

hope it helps

-- 
Tab


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to