Questions about this topic? Sign up to ask in the talk tab.
Difference between revisions of "Syn-Cookies"
From NetSec
GertieUbpgdd (Talk | contribs) |
GertieUbpgdd (Talk | contribs) |
||
| Line 1: | Line 1: | ||
Syn-cookies are a section inside of a SYN packet (see [[DDoS_Attacks#Three_way_handshake_and_Connect_State|three-way tcp handshake]]) that can cause a machine to keep a connection open or simply keep the socket threaded and wait for additional packets. Most administrators disable these with iptables on unix because of their affinity for making things more difficult during syn floods and [[DDoS Attacks]]. | Syn-cookies are a section inside of a SYN packet (see [[DDoS_Attacks#Three_way_handshake_and_Connect_State|three-way tcp handshake]]) that can cause a machine to keep a connection open or simply keep the socket threaded and wait for additional packets. Most administrators disable these with iptables on unix because of their affinity for making things more difficult during syn floods and [[DDoS Attacks]]. | ||
| − | |||
Revision as of 23:18, 19 May 2012
Syn-cookies are a section inside of a SYN packet (see three-way tcp handshake) that can cause a machine to keep a connection open or simply keep the socket threaded and wait for additional packets. Most administrators disable these with iptables on unix because of their affinity for making things more difficult during syn floods and DDoS Attacks.
