The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

kernel: possible SYN flooding on port 80. Sending cookies.

Discussion in 'Security' started by ukagg, Dec 20, 2010.

  1. ukagg

    ukagg Active Member

    Joined:
    Aug 14, 2002
    Messages:
    35
    Likes Received:
    0
    Trophy Points:
    6
    Hi,

    Looks like my server is under ddos attack.

    Apache keeps failing.

    /var/log/messages shows following:-

    Dec 20 23:18:11 ns4 kernel: possible SYN flooding on port 80. Sending cookies.
    Dec 20 23:19:11 ns4 kernel: possible SYN flooding on port 80. Sending cookies.
    Dec 20 23:20:14 ns4 kernel: possible SYN flooding on port 80. Sending cookies.
    Dec 20 23:21:15 ns4 kernel: possible SYN flooding on port 80. Sending cookies.

    I have already enabled Connection Tracking (CT_LIMIT = 120) in CSF firewall, but still attack continues. Can someone help.

    Thanks
    UKA
     
  2. GaryT

    GaryT Well-Known Member

    Joined:
    May 19, 2010
    Messages:
    321
    Likes Received:
    3
    Trophy Points:
    16
    In CSF config Look for:

    SYNFLOOD = 1
     
Loading...

Share This Page