Re: linux-image-2.6.26-1-686: No warning when half-open TCP queue is full

[Olaf van der Spek <olafvdspek@xxxxxxxxx>]

On Thu, Feb 25, 2010 at 7:09 PM, Moritz Muehlenhoff <jmm@xxxxxxxxxx> wrote:
> On Sat, Mar 21, 2009 at 07:47:36PM +0100, Olaf van der Spek wrote:
>> Package: linux-image-2.6.26-1-686
>> Version: 2.6.26-13lenny2
>> Severity: normal
>>
>> Hi,
>>
>> When the half-open TCP connection queue is full and syn cookies are enabled, you get a message like "kernel: possible SYN flooding on port 2710. Sending cookies."
>> However when syn cookies are disabled, you don't get any message (in kern.log), although connections to your server are timing out.
>> Could such a message be added?
>> Maybe with a suggestion to increase the size of that queue or to enable syn cookies.
>
> That should be discussed with the upstream developers, the Debian BTS is not
> the best way to change this. You can reach them at linux-net@xxxxxxxxxxxxxxx

Hi Linux net devs,

See this issue reported in the Debian BTS.

Olaf
--
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html