- To: outages-list@eskimo.com
- Subject: WWW Syn Flood
- From: Robert Dinse <nanook@eskimo.com>
- Date: Sat, 23 Sep 2000 15:08:33 -0700 (PDT)
- Resent-Date: Sat, 23 Sep 2000 15:08:36 -0700
- Resent-From: outages-list@eskimo.com
- Resent-Message-ID: <"EDWZh3.0.-C1.adIpv"@mx1>
- Resent-Sender: outages-list-request@eskimo.com
- Prev by Date: www - SYN flood denial of service attack
- Next by Date: WWW and Eskinews...
- Prev by thread: WWW Syn Flood
- Next by thread: DNS server failure in Kansas City ongoing.
- Index(es):
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
WWW Syn Flood
I was able to restore reasonable functionality while under attack by
kicking the value of tcp_max_syn_backlog up from 128 to 512. If it doesn't
cause any problems I'll change the RC scripts to set it to that value upon
boot.