Syn flooding attacks

Perry E. Metzger perry at
Mon Oct 20 18:42:16 UTC 1997

Jim Shankland writes:
> > I don't know of any routers that have these or other means of dealing with
> > the SYN attacks.
> We deal with them; see

The easiest/best way to deal with SYN floods is to implement BSDI
style TCP compressed state. NetBSD now has it, too. The solution is
far from perfect, but it goes a long way.


More information about the NANOG mailing list