On Mon, 03 Oct 2011, jacques wrote: > from time to time log spits : > > Oct 2 23:25:11 gordo kernel: [501679.617067] TCP: drop open request > from ip.ip.ip.ip/1979 > Oct 2 23:25:11 gordo kernel: [501679.639032] TCP: drop open request > from ip.ip.ip.ip/1980 > Oct 2 23:25:11 gordo kernel: [501679.639044] TCP: drop open request > from ip.ip.ip.ip/1981 > Oct 2 23:25:11 gordo kernel: [501679.639053] TCP: drop open request > from ip.ip.ip.ip/1982 > > several line sof it. ip.ip.ip.ip is not the real string ;) > > Do I have to worry about and consider to process these messages ?
Enable SYN cookies, and check whether you have tuned your TCP stack well enough for your normal load... http://e-mats.org/2010/01/tcp-drop-open-request-from/ http://blog.blacknode.net/2008/03/tcp-drop-open-request-from-xxxxxxxxxxxx/ -- "One disk to rule them all, One disk to find them. One disk to bring them all and in the darkness grind them. In the Land of Redmond where the shadows lie." -- The Silicon Valley Tarot Henrique Holschuh -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20111002235210.gf16...@khazad-dum.debian.net
