Date: 11 Jan 2000 09:42:13 +0100 From: Dag-Erling Smorgrav <des@flood.ping.uio.no> To: Brad Knowles <blk@skynet.be> Cc: Holtor <holtor@yahoo.com>, freebsd-questions@FreeBSD.ORG, freebsd-stable@FreeBSD.ORG Subject: Re: Kernel Option: TCP_DROP_SYNFIN Message-ID: <xzpya9xq9sq.fsf@flood.ping.uio.no> In-Reply-To: Brad Knowles's message of "Sun, 9 Jan 2000 23:03:20 %2B0100" References: <20000109201829.20220.qmail@web116.yahoomail.com> <v04220801b49eb51f4dab@[195.238.19.152]>
next in thread | previous in thread | raw e-mail | index | archive | help
Brad Knowles <blk@skynet.be> writes: > At 12:18 PM -0800 2000/1/9, Holtor wrote: > > Would this help stop SYN floods from breaking my > > freebsd computer? if anyones tried it, please speak > > up with any results or how it works. Thanks! > I've used it and haven't seen it do any harm to the systems I was > using it on, although I can't speak for how well it might have helped > them survive a SYN flood. Unless you're using TTCP (TCP for > Transactions), you should probably be safe in enabling it. It doesn't have anything to do with syn floods at all. It merely prevents OS fingerprinting (at least the way nmap does it). DES -- Dag-Erling Smorgrav - des@flood.ping.uio.no To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzpya9xq9sq.fsf>