Date: Tue, 03 Aug 1999 06:07:01 PDT From: "N. N.M" <madrapour@hotmail.com> To: freebsd-security@FreeBSD.ORG Subject: Re: Increasing SYN-ACK queue Message-ID: <19990803130701.13891.qmail@hotmail.com>
next in thread | raw e-mail | index | archive | help
>According to Slawek Zak: >>I think that the original poster aked about the default value for all >>connections. Is there any way to do this ? > >Increase the following variable: > >kern.ipc.somaxconn: 128 >-- >Ollivier ROBERT -=- FreeBSD: The Power to Serve! -=- Thanks all for your replies. Slawek is right, I wanted to know how I can increase the size of "SYN-ACK queue" and also decrease the "time-out waiting", both for all TCP connections. This will reduce the probabilty of being a victem of SYN Attack. Anyway, "kern.ipc.somaxconn" variable seems to be related to "SYN-ACK queue". Does anybody know about the variable related to "time-out waiting" which this is the amount of time that a connection is allowed to stay in a half-open state. Beside, what considerations must be concerned when changing the amount of these variables? Is there any fixed and tested amount for them? thanks, Nazila ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990803130701.13891.qmail>