SYN/RST Cookies [Was: Re: SYN flood = VFS: No free inodes -

Mike Johnson (Mike.Johnson@GSC.GTE.Com)
Fri, 13 Mar 1998 09:46:36 -0500

[Okay, let's try this again. I meant this to go to linux-kernel,
but I was a monkey and only sent it to David S. Miller who promptly
responded with some great ideas (thanks again David!) but I wanted
to get some other thoughts from other folks out there. Maybe someone
had the same problem I did...]

At 05:39 PM 3/12/98 -0800, you wrote:

>Firstly, I advise to turn off RST cookies, only the SYN cookies are
>reliable. In fact there are some known flaws in the RST cookies.

Um, is there any documentation of this? I need to learn more about
SYN and RST cookies and such. I know their purpose, I know they
take two different approaches, and I know RST cookies use more memory.
However, I run MUDs on my Linux box (RH 5.0 - 2.0.33) and when I ran
SYN cookies, people were having problems with the game hanging up on
them. This was reported to the mailing list for that type of MUD
(it's actually MUX), and -only- people using Linux were having problems
with that. The author of MUX decided to blame it on Linux and move
on. After switching to RST cookies, I don't think I've had anyone
get hung up on. Can anyone enlighten me on this?

>Later,
>David S. Miller
>davem@dm.cobaltmicro.com

Thanks,
Mike

--
Mike Johnson - mike.johnson@gsc.gte.com
Software Engineer/Network Admin/Website Manager/Web Developer/...?
GTE Government Systems - All opinions are mine, not GTE's.


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu