North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

SYN Resisting

  • From: Avi Freedman
  • Date: Wed Sep 11 14:11:24 1996 
I know this may not be strictly on-topic here because it deals with
"host-stuff" rather than "router-stuff", but here goes...

I will have some comments on how to track where SYN storms are coming
from a bit later.

In order to build a SYN-resistant BSD kernel, you need to modify one
file in src/sys/os, uipc_socket2.c, and you also need to modify 
src/sys/netinet/tcp_timer.h and you have to rebuild tcp_usrreq.c and
tcp_input.c in the netinet directory.

For those without SunOS source, I will get Sun4c (Sparc 1/1+/2/IPC/IPX/
ELC/SLC) binaries online; for those running BSD on other platforms, you
probably have source.