On Tue, May 07, 2002 at 10:26:43PM +0800, Patrick Hsieh wrote: > Hello list, > > Is there anyone having any suggestion to tune the /proc/sys/net/ipv4/* > to avoid tcp syn flood attack?
there a kernel option "IP: TCP syncookie support" to do that you can activate it with : echo 1 > /proc/sys/net/ipv4/tcp_syncookies hope it helps -- Tab -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]