Detecting or mitigating syn-flood attacks

Steve O'Hara-Smith steve at sohara.org
Mon Jul 26 13:42:56 UTC 2021


On Mon, 26 Jul 2021 13:59:14 +0100
Norman Gray <gray at nxg.name> wrote:

> 
> Greetings.
> 
> Can anyone point me towards best-practice guidance on detecting and 
> mitigating syn-flood attacks, with a focus on FreeBSD?

	There's a paper on using syncache for the purpose:

https://users.ece.cmu.edu/~adrian/731-sp05/readings/lemon-syn-cache.pdf

	I also see mentions of syncookies in related questions.

-- 
Steve O'Hara-Smith <steve at sohara.org>


More information about the freebsd-questions mailing list