Re: SYNCOOKIE authentication problems

From: Eygene Ryabinkin <rea-fbsd_at_codelabs.ru>
Date: Thu, 28 Jun 2007 14:50:40 +0400
Steve, good day.

Wed, Jun 27, 2007 at 06:43:11PM -0700, Steve Kargl wrote:
> Any advice on how to isolate or avoid?
> 
> Jun 27 18:31:19 node11 kernel: TCP: [192.168.0.11]:59661 to 
> [192.168.0.11]:63266 tcpflags 0x10<ACK>; syncache_expand: Segment failed
> SYNCOOKIE authentication, segment rejected (probably spoofed)

According to Andre Oppermann, these are harmless:
    http://lists.freebsd.org/pipermail/freebsd-net/2007-June/014401.html

But I am expiriencing some problems related to the other messages
like 'tcp_input: Listen socket: Spurious RST, segment rejected'.
Though it seems not to be your case, but my problems are documented
in the aforementioned thread.  Just in case you're curious...
-- 
Eygene
Received on Thu Jun 28 2007 - 08:50:48 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:39:13 UTC