I am afraid that if you cut off all syn packages from ports like 80 that apache uses you might have problems ... Better write a line on your firewall in order you setup a limit per hour for the syn packets a host can transmit ... Regards >From: "Spades" <[email protected]> >Reply-To: Spades <[email protected]> >To: <[email protected]> >CC: [email protected] >Subject: SYN attacks >Date: Wed, 7 Apr 2004 01:01:53 +0800 >MIME-Version: 1.0 >Received: from mx2.freebsd.org ([216.136.204.119]) by mc3-f13.hotmail.com >with Microsoft SMTPSVC(5.0.2195.6824); Tue, 6 Apr 2004 10:09:14 -0700 >Received: from hub.freebsd.org (hub.freebsd.org [216.136.204.18])by >mx2.freebsd.org (Postfix) with ESMTPid 8699156FD3; Tue, 6 Apr 2004 >10:05:26 -0700 (PDT)(envelope-from [email protected]) >Received: from hub.freebsd.org (localhost [127.0.0.1])by hub.freebsd.org >(Postfix) with ESMTPid CDC6D16A51E; Tue, 6 Apr 2004 10:05:12 -0700 (PDT) >Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])by >hub.freebsd.org (Postfix) with ESMTPid 4C60D16A4CE; Tue, 6 Apr 2004 >10:04:57 -0700 (PDT) >Received: from smtp29.singnet.com.sg (smtp29.singnet.com.sg >[165.21.101.249])by mx1.FreeBSD.org (Postfix) with ESMTPid 2C45F43D53; Tue, > 6 Apr 2004 10:04:56 -0700 (PDT)(envelope-from [email protected]) >Received: from bryanuptrvb0jc >(bb-203-125-35-50.singnet.com.sg[203.125.35.50])i36H1sjC016214; Wed, 7 Apr >2004 01:01:55 +0800 >X-Message-Info: JGTYoYF78jGSc2zcGoa7pUWP13FUwyhK >Delivered-To: [email protected] >Message-ID: <000d01c41bf8$dd24eac0$fa10fea9@bryanuptrvb0jc> >References:<6.1.0.5.2.20040406112456.00ab6ab8@localhost><[email protected]><[email protected]> >X-MSMail-Priority: Normal >X-Mailer: Microsoft Outlook Express 6.00.2800.1158 >X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 >X-BeenThere: [email protected] >X-Mailman-Version: 2.1.1 >Precedence: list >List-Id: Security issues [members-only >posting]<freebsd-security.freebsd.org> >List-Unsubscribe: ><http://lists.freebsd.org/mailman/listinfo/freebsd-security>,<mailto:[email protected]?subject=unsubscribe> >List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security> >List-Post: <mailto:[email protected]> >List-Help: <mailto:[email protected]?subject=help> >List-Subscribe: ><http://lists.freebsd.org/mailman/listinfo/freebsd-security>,<mailto:[email protected]?subject=subscribe> >Errors-To: [email protected] >Return-Path: [email protected] >X-OriginalArrivalTime: 06 Apr 2004 17:09:17.0007 (UTC) >FILETIME=[E4A56DF0:01C41BF9] > >Heya, > >FREEBSD 4.9-STABLE > >Is there anyway to block SYN attacks and prevent it from bring down >my server? > >Its been attacking for sometime. >_______________________________________________ >[email protected] mailing list >http://lists.freebsd.org/mailman/listinfo/freebsd-security >To unsubscribe, send any mail to "[email protected]" _________________________________________________________________ Protect your PC - get McAfee.com VirusScan Online http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963 _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "[email protected]"