Syncookies: Difference between revisions
No edit summary |
No edit summary |
||
| Line 5: | Line 5: | ||
** This is only true for machines expected to suffer SYNflood attacks. | ** This is only true for machines expected to suffer SYNflood attacks. | ||
** The [[TCP|usefulness of TCP Large Window Extensions]] means I disable SYNcookies on internal machines | ** The [[TCP|usefulness of TCP Large Window Extensions]] means I disable SYNcookies on internal machines | ||
*** Linux 2.6.26 added support for encoding some options into timestamps | *** Linux 2.6.26 added support for encoding some options into timestamps (see [http://lwn.net/Articles/277146/ this LWN article]). | ||
==Other Issues== | ==Other Issues== | ||