Questions about this topic? Sign up to ask in the talk tab.

Syn-Cookies

From NetSec
Revision as of 08:56, 18 November 2010 by TriciaNoonan (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Syn-cookies are a section inside of a SYN packet (see three-way tcp handshake) that can cause a machine to keep a connection open or simply keep the socket threaded and wait for additional packets. Most administrators disable these with iptables on unix because of their affinity for making things more difficult during syn floods and DDoS Attacks.