3
votes
1answer
182 views

Enabling TCP md5 signature option in centOS?

I'm trying to enable md5 checksum/signature for tcp packets in centOS (the main use case to stop tcp RST attacks, etc). It seems like I may be able to do this for individual ports using netcat or via ...
-1
votes
3answers
3k views

tcp handshake failed.client send rst (after syn-ack). can any one advice?

topology: 2 linux computer connected directly . no iptables rules (except - iptables -A OUTPUT -p tcp -j NFQUEUE ) no firewall. route is defined as - "route add default dev eth0" on the second one ...
0
votes
0answers
224 views

Packets dropped at endpoint NIC — Windows 2003

I have a virtualized Windows 2003 server that hosts one of my pieces of server software. The problem is that the port listener of this server doesn't get the client traffic sometimes. With Wireshark ...
3
votes
2answers
284 views

Real benefits of tcp TIME-WAIT and implications in production environment

SOME THEORY I've been doing some reading on tcp TIME-WAIT (here and there) and what I read is that it's a value set to 2 x MSL (maximum segment life) which keeps a connection in the "connection ...
20
votes
5answers
17k views

How passively monitor for tcp packet loss? (Linux)

How can I passively monitor the packet loss on TCP connections to/from my machine? Basically, I'd like a tool that sits in the background and watches TCP ack/nak/re-transmits to generate a report on ...
3
votes
2answers
1k views

OpenBSD has open ports in default installation

I have been considering replacing Ubuntu with OpenBSD to improve the security on my local server. I need to have ssh access to it, and I also need it to serve static web content - so the only ports I ...