Questions about this topic? Sign up to ask in the talk tab.

Difference between revisions of "Syn-Cookies"

From NetSec
Jump to: navigation, search
 
Line 1: Line 1:
 
Syn-cookies are a section inside of a SYN packet (see [[DDoS_Attacks#Three_way_handshake_and_Connect_State|three-way tcp handshake]]) that can cause a machine to keep a connection open or simply keep the socket threaded and wait for additional packets.  Most administrators disable these with iptables on unix because of their affinity for making things more difficult during syn floods and [[DDoS Attacks]].
 
Syn-cookies are a section inside of a SYN packet (see [[DDoS_Attacks#Three_way_handshake_and_Connect_State|three-way tcp handshake]]) that can cause a machine to keep a connection open or simply keep the socket threaded and wait for additional packets.  Most administrators disable these with iptables on unix because of their affinity for making things more difficult during syn floods and [[DDoS Attacks]].
[[Category:Network Security]][[Category:Information]]
+
[[Category:Network Security]]

Revision as of 04:46, 16 May 2012

Syn-cookies are a section inside of a SYN packet (see three-way tcp handshake) that can cause a machine to keep a connection open or simply keep the socket threaded and wait for additional packets. Most administrators disable these with iptables on unix because of their affinity for making things more difficult during syn floods and DDoS Attacks.