You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Webadmin <we...@salam2u.com> on 2003/03/25 22:35:17 UTC

[users@httpd] Syn Attack to port 80

Hi All;
I'm getting an attack which turn to be SYN_RECV one to apache port 80 and 
after a while the server gets completely locked out no SSH and no console 
even but I can still ping the IP, the apache that I'm using is 1.3.26 will 
the upgrade to 1.3.27 do any good here?? and if you can advice me on 
preventing DOS attack it will great.
 is the syn_recv that I get in netstat is an normal connection or is it an 
attack???

-- 



Best Regards
WebAdmin, Salam2U.com

         \\\ ||| ///
       (  @ @  )
--oOOo-(_)-oOOo----------

         _\=/_
          (o o)
--oOOo-(_)-oOOo------

______________________
Revolution does not require corporate support

That, as we enjoy great advantages from the inventions of others, we should be 
glad of an opportunity to serve others by any invention of ours; and this we 
should do freely and generously.
    -- Benjamin Franklin

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


RE: [users@httpd] Syn Attack to port 80

Posted by Jeff Cohen <li...@gej-it.com>.
What does the error.log show?
Jeff Cohen

> -----Original Message-----
> From: Webadmin [mailto:webadmin@salam2u.com]
> Sent: Tuesday, March 25, 2003 4:35 PM
> To: users@httpd.apache.org
> Subject: [users@httpd] Syn Attack to port 80
> 
> Hi All;
> I'm getting an attack which turn to be SYN_RECV one to apache port 80 and
> after a while the server gets completely locked out no SSH and no console
> even but I can still ping the IP, the apache that I'm using is 1.3.26 will
> the upgrade to 1.3.27 do any good here?? and if you can advice me on
> preventing DOS attack it will great.
>  is the syn_recv that I get in netstat is an normal connection or is it an
> attack???
> 
> --
> 
> 
> 
> Best Regards
> WebAdmin, Salam2U.com
> 
>          \\\ ||| ///
>        (  @ @  )
> --oOOo-(_)-oOOo----------
> 
>          _\=/_
>           (o o)
> --oOOo-(_)-oOOo------
> 
> ______________________
> Revolution does not require corporate support
> 
> That, as we enjoy great advantages from the inventions of others, we
should be
> glad of an opportunity to serve others by any invention of ours; and this
we
> should do freely and generously.
>     -- Benjamin Franklin
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org