I have a host behind a routed firewall (not a NAT situation) that is being flooded by randomly spoofed/distributed SYN Flooding. There are approximately 8-12 pages of SYN_RECV connections, and it effectively slows down the webserver. Is there any software that I can sit on my firewall or on the same host that will "fake" the SYN/SYN+ACK/ACK handshake, and if a valid SYN, pass it along to Apache? I need to keep Apache from slowing down. Both systems are running kernel 2.4.9-31 and have tcp_syncookies enabled, and timeouts reduced to a minimum. Thanks, Jim - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
