Re: SYN flood protection not working?

Alan Cox (alan@lxorguk.ukuu.org.uk)
Tue, 19 Nov 1996 19:24:50 +0000 (GMT)


> I'm using kernel 2.1.10... I tried syn flooding my telnet port, and it
> still froze up, sending it as few as 10 packets/second. It would seem to
> me that real syns are being dropped along with fake syns. How does the syn
> flood protection work? Are the oldest un-acked syns being dropped? It
> doesn't seem like this to me, because most real connections coming in
> fail.

Unless you have modified your inetd to use long socket queues it won't
make any odds.

Alan