Linux.com

What about SYN cookies?

Posted by: Anonymous Coward on January 06, 2006 11:00 PM
Linux has solution on SYN flooding called SYN cookies (<a href="http://cr.yp.to/syncookies.html" title="cr.yp.to">http://cr.yp.to/syncookies.html</a cr.yp.to>) for some time now although not enabled by default.

To enable SYN cookies (provided that already activated on kernel compilation) simply apply this command at boot time after<nobr> <wbr></nobr>/proc has been mounted :

echo 1 >/proc/sys/net/ipv4/tcp_syncookies

#

Return to Linux Advisory Watch - January 6, 2006