[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-users] Kernel: Oops (raqr4)



> I had to reboot the cobalt via our apc switch today as the 
> connection to the server hung and on investigation I have 
> noticed alot of
> 
> "possible SYN flooding on port 80. Sending cookies." in the kernel log
> 

Can you get a quick look at /var/log/httpd/access and see what IP may be
hitting you? Do you use robots.txt in your sites to block script
directories? If you have a script that gets hit by an outfit called Web
Clipping http://www.webclipping.com/ you could have problems. They hit
my dmoz.org interface script once ignoring robots.txt. I recorded over
50,000 hits from them in a short period of time. 
-- 
C2003 Dan Kriwitsky

Please reply to the list only. Off list replies are not read.