Difference between revisions of "SYN Flood"

From Roaring Penguin
Jump to: navigation, search
(Created page with "If port 25 connection on your server are only intermittently available you may be under attack by a SYN flood. When it happens, does the command: netstat -tuna | grep :25 |…")
 
 
Line 9: Line 9:
 
If so, it's a "SYN flood attack" - see the page at:
 
If so, it's a "SYN flood attack" - see the page at:
  
     http://linoxide.com/firewall/snapshot-syn-flood-attack/ for details.
+
     http://linoxide.com/firewall/snapshot-syn-flood-attack/  
 +
for details.
  
  
 
<div style="float:right; clear:both; margin-right:0.5em">[[Support Wiki | [Home]]]</div>
 
<div style="float:right; clear:both; margin-right:0.5em">[[Support Wiki | [Home]]]</div>
 
[[category:All]][[category:Security]][[category:Management]]
 
[[category:All]][[category:Security]][[category:Management]]

Latest revision as of 13:35, 1 October 2014

If port 25 connection on your server are only intermittently available you may be under attack by a SYN flood.

When it happens, does the command:

   netstat -tuna | grep :25 | grep SYN_RECV

show a lot of connections?

If so, it's a "SYN flood attack" - see the page at:

   http://linoxide.com/firewall/snapshot-syn-flood-attack/ 

for details.