From owner-freebsd-hackers Wed Dec 1 19:32: 8 1999 Delivered-To: freebsd-hackers@freebsd.org Received: from atdot.dotat.org (atdot.dotat.org [150.101.89.3]) by hub.freebsd.org (Postfix) with ESMTP id BF2A814F4C for ; Wed, 1 Dec 1999 19:32:00 -0800 (PST) (envelope-from newton@atdot.dotat.org) Received: (from newton@localhost) by atdot.dotat.org (8.9.3/8.7) id NAA07910; Thu, 2 Dec 1999 13:55:56 +1030 (CST) Date: Thu, 2 Dec 1999 13:55:55 +1030 From: Mark Newton To: PinkSmurf Mushroom Cc: hackers@freebsd.org Subject: Re: syncflood attack Message-ID: <19991202135555.B7796@atdot.dotat.org> References: <19991202032458.34136.qmail@hotmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <19991202032458.34136.qmail@hotmail.com>; from smurfclanz@hotmail.com on Wed, Dec 01, 1999 at 07:24:58PM -0800 X-PGP-Key: http://slash.dotat.org/~newton/pgpkey.txt Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Wed, Dec 01, 1999 at 07:24:58PM -0800, PinkSmurf Mushroom wrote: > AS I discovered today that my box was brought down by a heavy syncflood > attack, connecting to multiple ports. In addition to that, the attacker even > attack the ftpd with spoofed IPs, opening tons of connection. > In result I've limited the total connection allowed at anyone time but I > couldnt figure out how to stop syncflood. One usually stops it by staying away from the 3l33t hax0rz channels in IRC. - mark -------------------------------------------------------------------- I tried an internal modem, newton@atdot.dotat.org but it hurt when I walked. Mark Newton ----- Voice: +61-4-1620-2223 ------------- Fax: +61-8-82231777 ----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message