Zdravei > Somebody is trying to choke my network using SYN cookie attacks with IPspoofing,
You probably are referring to SYN flood attack.. > Can somebody suggest me how to reduce the affect of this attack, and the way to find > out who is doing the damage. > Most likely the attack (if at all it is one) consists of bogus packets with arbitrary addresses hence it would pretty much be impossible to track down who the culprit is without the help of your ISP (and many more if the traffic is coming from outside india) You might want to contact your ISP and in case you are running a linux machine as your gateway then enable syn cookies (not that it will save your bandwidth but just that your machine will not be overwhelmed). Can you post (or mail me) relevant packet dump for a few secs .. ? _______________________________________________ ilugd mailing list [EMAIL PROTECTED] http://frodo.hserus.net/mailman/listinfo/ilugd
