Possible Duplicate:
SYN Flood Advice
Heyo,
Been dealing alot with spoofed syn floods lately. Are there any tips or tricks we could do to better survive them?
Syn Cookies are already enabled.
Is there anything I could do on a TCP level? the attack itself is only ~100mbs but can eat through the CPU.
My ideas: Dropping syn packets that are not in a certain size range (what range?) Modifying some linux networking variables (window scaling?)
....and thats it. Is there any common ways to catch "most" spoofed syn floods, or any tips and tricks to make them more survivable?
