httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From javalishixml <javalishi...@163.com>
Subject [users@httpd] syn recv attack in our server??
Date Mon, 27 Jul 2015 08:22:25 GMT
Hi gurus,

We have 2 servers.
Server1 has a apache.
Server2 has a tomcat.

Now we see there are many syn recv connection via "netstat -ant".
These kinds of connection are running out the CPU.

We googled it and found it looks like of syn recv attack.

So I just want to know:
1. How to verify it DOES is a syn recv attack?
2. Is there any way to fight against these kind of connections? Can I do some configuration
at Apache?
3. Because our server1 is deployed at a cloud center. I guess these cloud center should also
be attack?

Appreciate for your quickly help!

Thanks,
LS
Mime
View raw message