Re: Bug#520668: TCP SYN cookies

2010-02-17 Thread Ben Hutchings
On Thu, 2010-02-18 at 09:16 +1100, Craig Small wrote: [...] > I happen to agree and in future I'll treat further sysctl key options > like this: > * Generally a bad idea or only for very specific circumstances - close > * Something useful for some subset of Debian machines - commented out >

Re: Bug#520668: TCP SYN cookies

2010-02-17 Thread Craig Small
Hello, Regarding the procps bug 520668 which was asking for the TCP SYN cookies to be enabled by default, I've looked at the various emails to and for. While it does seem like it would be a good idea at times, there is not a consensus that it is a good *default* Nothing about this bug would cha