On 12/23/23 16:15, Dan Ritter wrote:
David Christensen wrote:
Does Debian and/or Linux support SYN cookies?
Yes.
Put
net.ipv4.tcp_syncookies=1
in an appropriate sysctl.d/ file.
To check on current settings:
sysctl -n net.ipv4.tcp_syncookies
It looks like SYN cookies are enabled by default since
debian-11.6.0-amd64-netinst (what I installed and have since tried to
keep up to date):
2023-12-23 18:51:24 root@taz ~
# cat /etc/debian_version ; uname -a
11.8
Linux taz 5.10.0-26-amd64 #1 SMP Debian 5.10.197-1 (2023-09-29) x86_64
GNU/Linux
2023-12-23 18:51:57 root@taz ~
# sysctl -n net.ipv4.tcp_syncookies
1
Thank you for the incantations. :-)
David