TCP Intercept - TCP SYN Flooding

From: Udo Konstantin (ccie_groupstudy@yahoo.de)
Date: Sun Aug 13 2006 - 03:16:04 ART

Hi all,

I'm confused some of these terms...
Asume I a hacker is flooding a network (e.g a webserver 1.1.1.1) with
tcp syn flooding
These attacks are coming from the internal network.
The challenge is to drop even legitimate Connections after 90sec !!

Any help ?
Maybe I can do this with ip tcp intercept commands ? But I'm not sure
which on should I use !!

Thanks....Udo

        

        
                

This archive was generated by hypermail 2.1.4 : Fri Sep 01 2006 - 15:41:57 ART