Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 28 Jun 2007 12:04:23 +0300
From:      "Abdullah Ibn Hamad Al-Marri" <almarrie@gmail.com>
To:        "Steve Kargl" <sgk@troutmask.apl.washington.edu>
Cc:        freebsd-current@freebsd.org
Subject:   Re: SYNCOOKIE authentication problems
Message-ID:  <499c70c0706280204mb252d0ekb01d107b88209a02@mail.gmail.com>
In-Reply-To: <20070628014311.GA50012@troutmask.apl.washington.edu>
References:  <20070628014311.GA50012@troutmask.apl.washington.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
On 6/28/07, Steve Kargl <sgk@troutmask.apl.washington.edu> wrote:
> Any advice on how to isolate or avoid?
>
> Jun 27 18:31:19 node11 kernel: TCP: [192.168.0.11]:59661 to
> [192.168.0.11]:63266 tcpflags 0x10<ACK>; syncache_expand: Segment failed
> SYNCOOKIE authentication, segment rejected (probably spoofed)
>
> --
> Steve

It's too weird, I even get it in my server even I use antispoof via
pf, and I get the same msg while for the IPs in the same server.

-- 
Regards,

-Abdullah Ibn Hamad Al-Marri
Arab Portal
http://www.WeArab.Net/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?499c70c0706280204mb252d0ekb01d107b88209a02>