Discussion Locked

TCP Syn Flood

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
How can I block TCP Syn Flood attacks on my linux server. I am running RH 7.3 and apache. Is there any settings for this on /proc/sys/net.

5 replies

by servermonkey

iptables:

iptables -A INPUT -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP

man iptables will give you more help.

by l0stbyte

or
you can enable syncookies
it's in /proc/sys/net/ipv4/tcp_syncookies
set it to 1

kernel must be compiled with syncookies.

l0stbyte

This discussion is closed to new replies.