Re: SYNCOOKIE authentication problems

Steve, good day.

Wed, Jun 27, 2007 at 06:43:11PM -0700, Steve Kargl wrote:
> Any advice on how to isolate or avoid?
> 
> Jun 27 18:31:19 node11 kernel: TCP: [192.168.0.11]:59661 to 
> [192.168.0.11]:63266 tcpflags 0x10<ACK>; syncache_expand: Segment failed
> SYNCOOKIE authentication, segment rejected (probably spoofed)

According to Andre Oppermann, these are harmless:
    http://lists.freebsd.org/pipermail/freebsd-net/2007-June/014401.html

But I am expiriencing some problems related to the other messages
like 'tcp_input: Listen socket: Spurious RST, segment rejected'.
Though it seems not to be your case, but my problems are documented
in the aforementioned thread.  Just in case you're curious...
-- 
Eygene