Re: [cobalt-users] Reoccurring Server Outage/Failure

["Charlie Clemmer" <cclemmer@xxxxxxxxxxxxxxxxxx>]

On Wed, 15 Jan 2003 07:16:37 -0500, Rick Ewart wrote
> I had a similar fate befall one of my RaQs when I was colo'ing it in 
> a single rack space without a hardware firewall. Long story short, I 
> was being DOS'd by SYN Flood attacks. Once I reboot, all is fine. 
> You could see it happen if you were monitoring netstat (wrote a 
> short script to do so). The GRC.com website has a good description 
> of SYN Floods if you want to read up.

That pretty much sounds about right. I've gotten a couple messages about 
possible SYN flooding over the past week, so maybe it's finally taken it's 
toll on the RAQ. I rebooted last night after the system came back up, and I 
now have a cron job running to check netstat and log session counts 
periodically so I can look for this stuff. 

Thanks for the input though ... I'll do some more reading on this, and 
hopefully get something figured out quick before I start losing customers.