RE: [cobalt-users] RAQ2 SYN flood attack

["Frank Cubillos" <cubillos@xxxxxxxxxxxxxxxxxx>]

Hey everyone,
I just wanted to let everyone know that yesterday I caught someone doing an
SYN flood attack on our server. I happened to notice it in the hourly
logcheck email. I got a hold of our colo provider and they took it off line
for a few minutes. That apparently stopped the attacker. Unfortunately he
probably moved on to attack someone else.My question is, are these SYN
floods a big problem or are they more of a
nuisance DoS attack?
<snip>
Seems to be a recent rash, I have had 2 last week, one on a Raq3 and an NT.
Had my ISP block them out, so far so good. They were originating from
Washington State University, probably spoofed, but the attacks have stopped.
Keep an eye out they are certainly persistant!
May the force be with you!
Frank