FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Debian > Debian User

 
 
LinkBack Thread Tools
 
Old 10-02-2011, 10:07 PM
jacques
 
Default kernel: TCP: drop open request :: Do I have to worry about ?

Hello,


from time to time log spits :

Oct 2 23:25:11 gordo kernel: [501679.617067] TCP: drop open request
from ip.ip.ip.ip/1979
Oct 2 23:25:11 gordo kernel: [501679.639032] TCP: drop open request
from ip.ip.ip.ip/1980
Oct 2 23:25:11 gordo kernel: [501679.639044] TCP: drop open request
from ip.ip.ip.ip/1981
Oct 2 23:25:11 gordo kernel: [501679.639053] TCP: drop open request
from ip.ip.ip.ip/1982


several line sof it. ip.ip.ip.ip is not the real string

Do I have to worry about and consider to process these messages ?


Thnaks, Jacques


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Archive: 4E88E0B2.70700@lavignotte.org">http://lists.debian.org/4E88E0B2.70700@lavignotte.org
 
Old 10-02-2011, 11:52 PM
Henrique de Moraes Holschuh
 
Default kernel: TCP: drop open request :: Do I have to worry about ?

On Mon, 03 Oct 2011, jacques wrote:
> from time to time log spits :
>
> Oct 2 23:25:11 gordo kernel: [501679.617067] TCP: drop open request
> from ip.ip.ip.ip/1979
> Oct 2 23:25:11 gordo kernel: [501679.639032] TCP: drop open request
> from ip.ip.ip.ip/1980
> Oct 2 23:25:11 gordo kernel: [501679.639044] TCP: drop open request
> from ip.ip.ip.ip/1981
> Oct 2 23:25:11 gordo kernel: [501679.639053] TCP: drop open request
> from ip.ip.ip.ip/1982
>
> several line sof it. ip.ip.ip.ip is not the real string
>
> Do I have to worry about and consider to process these messages ?

Enable SYN cookies, and check whether you have tuned your TCP stack well
enough for your normal load...

http://e-mats.org/2010/01/tcp-drop-open-request-from/
http://blog.blacknode.net/2008/03/tcp-drop-open-request-from-xxxxxxxxxxxx/

--
"One disk to rule them all, One disk to find them. One disk to bring
them all and in the darkness grind them. In the Land of Redmond
where the shadows lie." -- The Silicon Valley Tarot
Henrique Holschuh


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 20111002235210.GF16368@khazad-dum.debian.net">http://lists.debian.org/20111002235210.GF16368@khazad-dum.debian.net
 

Thread Tools




All times are GMT. The time now is 12:51 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org