Files
ipt-gateway/conf
chris 8058eedf61 default_basic_behavior.conf: take of SYN FLOOD Rules. Disable SYN flood rule by default (IPv4 + IPv6)
The global limit (1 SYN/s, burst 3, no per-source tracking) dropped
legitimate TCP connections to the gateway itself (up to ~45% on busy
gateways: DNS zone transfers, SSH, monitoring), and a few SYNs per
second were enough to lock out all TCP access. Kernel SYN cookies
(tcp_syncookies) already provide proper SYN flood protection.
2026-10-30 22:22:03 +01:00
..
2022-02-09 15:13:22 +01:00
2022-02-09 15:13:22 +01:00
2017-02-24 04:13:22 +01:00
2017-02-24 04:13:22 +01:00