But are there lots of requests in SYN_RECV queued ?
> apache immediately cures the problem. I have tried to compile Apache with
> and without -DSINGLE_LISTEN_UNSERIALIZED_ACCEPT option, no noticeable
> diffrence ...
>
> Any ideas ?
Turn on syn cookies in case its an attack triggering this
(echo "1" > /proc/sys/net/ipv4/tcp_syncookies )
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/