Re: Bug in TCP/IP stack in 2.2.17? (fwd)

[kuznet@xxxxxxxxxxxxx]

Hello!

> the firewall happens to be doing the handshaking on all incoming TCP 
> connections, been the victim
> of several TCP/SYN flood attacks. maybe this is where it flakes?  the 
> firewall intercepts the
> client SYN, send the SYN/ACK, waits for the client ACK.  if it gets the ACK 
> it's supposed to open
> up a new connection to the server. 

I heard that such beasts exist, but believed that it is rather joke.
Hmm... not a joke, indeed. Bad joke to be more exact. 8)

Apparently, it tries to relay options received in server's SYN-ACK.
It is too late to drink mineral water, when kidneys dilapidated. 8)8)

Alexey