Alberto Ferrer wrote:
¿any know a way to stop via Linux with iptables or related a SYN attack ? ¿where i can read something related to this?
# Enable syn-cookies (prevent syn-flood attacks):
echo "1" >/proc/sys/net/ipv4/tcp_syncookies
# Reduce number of possible SYN Floods:
echo "1024" >/proc/sys/net/ipv4/tcp_max_syn_backlog
Helps somewhat. Can also be set via sysctl.
You may wan't to look into iptables docs for the 'limit' module:
-m limit --limit X/sec
--
Kind regards,
Mogens Valentin
