Subject: Re: a question about SYN attack

From: Jason Thorpe <[email-masked]>
Date: Tue, 12 Oct 1999 15:20:16 -0700

On Tue, 12 Oct 1999 11:49:24 -0700 
 Zachary Amsden <[email-masked]> wrote:

 > One discussion of SYN attacks is found below:
 > 
 > ftp://koobera.math.uic.edu/www/syncookies/archive
 > 
 > Zachary Amsden
 > [email-masked]

NetBSD also implements the Borman "SYN cache" (it's based on the original
published BSDI diff, but has changed rather significantly since then).  In
NetBSD, it is used for all passive embryonic connections (unlike the BSD/OS
version, which was activated only when the system was under "attack").

Information on obtaining the NetBSD source code can be found at:

	http://www.netbsd.org/

 > > I want through the archive, and find out the summary
 > > about the SYN flood attack from David Borman. Unfortunately
 > > his summary(src) URL:
 > > 
 > > ftp://ftp.bsdi.com/contrib/bsdi_contrib/44Lite-SYNcache.gz)
 > > 
 > > is not accessible anymore and his e-mail [email-masked] can
 > > not be reached either.
 > > 
 > > Is there an RFC for this problem ?
 > > Is there any solution (src) available ?
 > > 
 > > Very appreciated your help.
 > >

        -- Jason R. Thorpe <[email-masked]>