The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

kernel: possible SYN flooding on port 80. Sending cookies.

Discussion in 'Security' started by ukagg, Dec 20, 2010.

  1. ukagg

    ukagg Active Member

    Joined:
    Aug 14, 2002
    Messages:
    35
    Likes Received:
    0
    Trophy Points:
    156
    Hi,

    Looks like my server is under ddos attack.

    Apache keeps failing.

    /var/log/messages shows following:-

    Dec 20 23:18:11 ns4 kernel: possible SYN flooding on port 80. Sending cookies.
    Dec 20 23:19:11 ns4 kernel: possible SYN flooding on port 80. Sending cookies.
    Dec 20 23:20:14 ns4 kernel: possible SYN flooding on port 80. Sending cookies.
    Dec 20 23:21:15 ns4 kernel: possible SYN flooding on port 80. Sending cookies.

    I have already enabled Connection Tracking (CT_LIMIT = 120) in CSF firewall, but still attack continues. Can someone help.

    Thanks
    UKA
     
    #1 ukagg, Dec 20, 2010
  2. GaryT

    GaryT Well-Known Member

    Joined:
    May 19, 2010
    Messages:
    321
    Likes Received:
    3
    Trophy Points:
    68
    In CSF config Look for:

    SYNFLOOD = 1
     
    #2 GaryT, Dec 22, 2010
(You must log in or sign up to post here.)
Loading...
Similar Threads - kernel possible flooding
  1. Spork Schivago

    New Thread symlink protection and newer kernels (3.6+)

    Spork Schivago, Jul 25, 2017 at 5:30 PM, in forum: Security
    Replies:
    1
    Views:
    17
    24x7server
    Jul 26, 2017 at 12:11 AM
  2. cachout58

    Dovecot error after recent kernel update for CVE-2017-1000364

    cachout58, Jun 23, 2017, in forum: E-mail Discussions
    Replies:
    5
    Views:
    254
    cachout58
    Jul 1, 2017
  3. Patricio dos Santos

    Tomcat down after kernel update

    Patricio dos Santos, Jun 22, 2017, in forum: EasyApache
    Replies:
    7
    Views:
    448
    Patricio dos Santos
    Jun 23, 2017
  4. CanSpace

    cPanel Kernel Installed and symlink attack still used

    CanSpace, May 4, 2017, in forum: Security
    Replies:
    1
    Views:
    149
    cPanelMichael
    May 4, 2017
  5. thechrisroberts

    KernelCare: reboot still required

    thechrisroberts, Apr 27, 2017, in forum: General Discussion
    Replies:
    6
    Views:
    311
    cPanelMichael
    May 25, 2017

Share This Page