[3037] in RedHat Linux List

home help back first fref pref prev next nref lref last post

Re: how does linux defend against synchronous attack?

daemon@ATHENA.MIT.EDU (Elliot Lee)
Wed Nov 6 17:06:19 1996

Date: Wed, 6 Nov 1996 17:01:31 -0500 (EST)
From: Elliot Lee <sopwith@cuc.edu>
To: redhat-list@redhat.com
In-Reply-To: <Pine.SOL.3.91.961106162936.10575D-100000@sun2.bnl.gov>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com

On Wed, 6 Nov 1996, jyan-min fang wrote:

> In that infamous pcweek article, the author mentioned that
> linux is the only OS which can somehow defend the synchronous
> attack. I remembered, in an article in NYTimes a few months ago,
> that one of the NYC ISPs (panix I believed) were brought down
> completely by the synchronous attack and it said some experts
> believed the synchronous attack is intrinsic and can't be
> guarded against. At that time, I kind of agreed with those
> opinions after reading the article, and now I am very amazed
> that linux has a soultion to it. So, how does linux manage to
> work around this synchronous attack?

The correct term for it is SYN flooding, not the synchronous attack ;-)

There are patches available for a number of operating systems, Linux
included, that let it keep up with or discard the extra SYN packets. More
technical explanations can be found in the archives of the linux-kernel
list.

-- Elliot

A: "Talk about stupidity!"
B: "Who, you?"
A: "No, me!"


--
  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
  ________________________________________________________________________
  http://www.redhat.com/RedHat-FAQ   http://www.redhat.com/RedHat-Errata
  http://www.redhat.com/RedHat-Tips  http://www.redhat.com/mailing-lists
  ------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null


home help back first fref pref prev next nref lref last post