[4143] in linux-net channel archive

home help back first fref pref prev next nref lref last post

Re: SYN floods

daemon@ATHENA.MIT.EDU (Alan Cox)
Thu Aug 22 06:44:29 1996

From: Alan Cox <alan@cymru.net>
To: shagboy@bluesky.net
Date: 	Thu, 22 Aug 1996 09:37:18 +0100 (BST)
Cc: nelson@crynwr.com, linux-net@vger.rutgers.edu
In-Reply-To: <Pine.LNX.3.91.960821232517.133C-100000@cirrus.bluesky.net> from "Racer X" at Aug 21, 96 11:27:51 pm

> same problem, but it hits inetd instead.  My question is - can a 
> connection that is in state SYN_RECV be arbitrarily terminated at any 
> time, or does it have to wait for the timeout in the TCP code?

It cannot be terminated for the TIME_WAIT period without the risk of
data corruption on other connections. So you are stuck with it for at least
2 minutes (probably 4 to be right). BSD locks this to 75seconds + TIME_WAIT
which isnt a bad plan so long as you don't plan to operate over amateur
radio, into space and other unusual links

Alan

home help back first fref pref prev next nref lref last post