Just thinking... what would happen if i would just route packets to lets say non existing host like 10.10.10.1 insted of DROP would that help??
David On Thursday 11 April 2002 23:39, you wrote: > On Thu, Apr 11, 2002 at 10:35:13PM +0100, Sebastian Wolfgarten wrote: > > Hi, > > > > maybe portsentry of psionic.com could > > also help you or (in my opinion the better > > way) why don't you try the mirror > > flag? I mean why not sending these > > syn floods back to its origin? :-) > > If the one who's synflooding you knows what he's doing the src would be > spoofed and it only harms yourself to send back the syns to the src both > bandwidth-wise and legally... > > Ramin > > > Bye, > > Sebastian
