enable tcp_syncookies by default?

Iago Rubio iago.rubio at hispalinux.es
Thu Jan 13 18:35:54 UTC 2005


On Thu, 2005-01-13 at 17:59, Jeff Spaleta wrote:
[snip]
> Other post(s) have implied there is a cpu hit during non-attacked
> situations, but if thre isn't then there isnt a concern here.

I suposse you speak about my post :)

I'm not a kernel hacker, but I suposse there's a cpu hit when I read in
the kernel docs:

"(tcpsyncookies) can result in serious degradation of some services
(f.e. SMTP relaying)".


Cheers.
-- 
Iago Rubio




More information about the fedora-devel-list mailing list