North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Syn flooding attacks

  • From: Perry E. Metzger
  • Date: Mon Oct 20 15:05:03 1997 
Jim Shankland writes:
> > I don't know of any routers that have these or other means of dealing with
> > the SYN attacks.
> 
> We deal with them; see http://www.flyingfox.com/synflood_ann.html.

The easiest/best way to deal with SYN floods is to implement BSDI
style TCP compressed state. NetBSD now has it, too. The solution is
far from perfect, but it goes a long way.

Perry