Date: Thu, 28 Jun 2007 14:50:40 +0400 From: Eygene Ryabinkin <rea-fbsd@codelabs.ru> To: Steve Kargl <sgk@troutmask.apl.washington.edu> Cc: freebsd-current@freebsd.org Subject: Re: SYNCOOKIE authentication problems Message-ID: <20070628105039.GE11335@void.codelabs.ru> In-Reply-To: <20070628014311.GA50012@troutmask.apl.washington.edu> References: <20070628014311.GA50012@troutmask.apl.washington.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
Steve, good day.
Wed, Jun 27, 2007 at 06:43:11PM -0700, Steve Kargl wrote:
> Any advice on how to isolate or avoid?
>
> Jun 27 18:31:19 node11 kernel: TCP: [192.168.0.11]:59661 to
> [192.168.0.11]:63266 tcpflags 0x10<ACK>; syncache_expand: Segment failed
> SYNCOOKIE authentication, segment rejected (probably spoofed)
According to Andre Oppermann, these are harmless:
http://lists.freebsd.org/pipermail/freebsd-net/2007-June/014401.html
But I am expiriencing some problems related to the other messages
like 'tcp_input: Listen socket: Spurious RST, segment rejected'.
Though it seems not to be your case, but my problems are documented
in the aforementioned thread. Just in case you're curious...
--
Eygene
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070628105039.GE11335>