SYN Flood
From Roaring Penguin
Revision as of 13:35, 1 October 2014 by MCoyne (talk | contribs) (Created page with "If port 25 connection on your server are only intermittently available you may be under attack by a SYN flood. When it happens, does the command: netstat -tuna | grep :25 |…")
If port 25 connection on your server are only intermittently available you may be under attack by a SYN flood.
When it happens, does the command:
netstat -tuna | grep :25 | grep SYN_RECV
show a lot of connections?
If so, it's a "SYN flood attack" - see the page at:
http://linoxide.com/firewall/snapshot-syn-flood-attack/ for details.
