SYN attack - co s tim ?

[Patka Martin]

Zdravim,

dnes jsem pri prohlizeni logu narazil na 17 stranek techto hlaseni:


Feb  3 01:09:09 mikros kernel: Warning: possible SYN flood from 205.227.129.168
on 194.213.243.1:16601.  Sending cookies.
...
...
Feb  3 07:57:00 mikros kernel: Warning: possible SYN flood from 205.227.129.170
on 194.213.243.1:21076.  Sending cookies.

Vlastne to trvalo celych 7 hodin.
Muzu se proti takovemuto utoku nejak branit ? Nebo co se v takovemto pripade
dela ? Je nastaveni v jadre  Network options - IP syn cookies  dostatecne ?


Omlouvam se, pokud je to falesny poplach, ale pokud ne, tak bych nerad neco
opominul.

Dekuji mnohokrat

----------------------------------------------------------------------
Martin Patka                      network & server administrator
----------------------------------------------------------------------
Mikroservis v.o.s.                e-mail:       martin na mikroservis.cz
Nerudova 45                       phone work:   +420 431 4301, 3719
51301, Semily 1                   phone home:   +420 431 4592
Czech Republic
http://www.mikroservis.cz         http://www.mikroservis.cz/~martin
----------------------------------------------------------------------