Re: T/TCP: Syn and RST Cookies

Andi Kleen (ak@muc.de)
13 Apr 1998 17:49:52 +0200


"David S. Miller" <davem@dm.cobaltmicro.com> writes:

> From: alan@lxorguk.ukuu.org.uk (Alan Cox)
> Date: Mon, 13 Apr 1998 13:52:27 +0100 (BST)
>
> I hope nobody did that. I really do. The 2.0 kernels refuse data
> with the SYN frame because otherwise some jerk will send you
> fragmented packets of a SYN + 63.5K of data and queue as many as
> possible on each service you have running
>
> Whoops bang there goes another one etc
>
> We drop data in a SYN frame, relax pinhead.

We could make it a sysctl. For all usual cases it would be no slowdown
in the critical path, because that part is never hit anyways by SYNs
without data.

-Andi

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu