01-06-2015
253,
11
Join Date: Feb 2006
Last Activity: 18 March 2019, 6:39 AM EDT
Location: Southern England
Posts: 253
Thanks Given: 0
Thanked 11 Times in 11 Posts
Is it a SYN flood attatack?
I found net.ipv4.tcp_syncookies helped for my servers, and I would use
ip route add blackhole x.x.x.x
and in our case the attacker would get bored.
Not too clever but OK as a quick emergency fix.