Re: linux-image-2.6.26-1-686: No warning when half-open TCP queue is full

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Feb 25, 2010 at 7:09 PM, Moritz Muehlenhoff <jmm@xxxxxxxxxx> wrote:
> On Sat, Mar 21, 2009 at 07:47:36PM +0100, Olaf van der Spek wrote:
>> Package: linux-image-2.6.26-1-686
>> Version: 2.6.26-13lenny2
>> Severity: normal
>>
>> Hi,
>>
>> When the half-open TCP connection queue is full and syn cookies are enabled, you get a message like "kernel: possible SYN flooding on port 2710. Sending cookies."
>> However when syn cookies are disabled, you don't get any message (in kern.log), although connections to your server are timing out.
>> Could such a message be added?
>> Maybe with a suggestion to increase the size of that queue or to enable syn cookies.
>
> That should be discussed with the upstream developers, the Debian BTS is not
> the best way to change this. You can reach them at linux-net@xxxxxxxxxxxxxxx

Hi Linux net devs,

See this issue reported in the Debian BTS.

Olaf
--
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux 802.1Q VLAN]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Git]     [Bugtraq]     [Yosemite News and Information]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux PCI]     [Linux Admin]     [Samba]

  Powered by Linux