Date: Tue, 8 Nov 2005 23:09:48 +0100 From: Marc Olzheim <marcolz@stack.nl> To: Lars Eggert <lars.eggert@netlab.nec.de> Cc: Marc Olzheim <marcolz@stack.nl>, net@freebsd.org Subject: Re: TCP RST handling in 6.0 Message-ID: <20051108220948.GA2602@stack.nl> In-Reply-To: <280E31B0-BA54-404A-8CD4-2EF64F767B9A@netlab.nec.de> References: <E019841F-389F-4B15-942E-F30F6745ECBF@netlab.nec.de> <20051108204603.GA2121@stack.nl> <280E31B0-BA54-404A-8CD4-2EF64F767B9A@netlab.nec.de>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On Tue, Nov 08, 2005 at 01:56:41PM -0800, Lars Eggert wrote: > On Nov 8, 2005, at 12:46, Marc Olzheim wrote: > >Being on the wrong end of a distributed tcp syn flood attack atm. > >on the > >machine I'm mailing from, is probably enough to convince me of its > >use. > > The change we are discussing is not protecting you from SYN floods, > it is supposed to protect you from spoofed RSTs. Whoops, indeed, I misread. Well then, still glad to inform you that I'm happy with the performance of the machine under a synflood attack :-P Marc [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (FreeBSD) iD8DBQFDcSIsezjnobFOgrERAuyaAJ99FFZ5VGYl0RIDr502qXYbH3nUjgCgi2IV ph1xL/8GVJPs33RCnrO77wc= =DuhM -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20051108220948.GA2602>