So not sure if your concern is primarily about the SYN flood or something else, but the system tuning in SYN cookies is a great thing. Essentially it's a challenge-response for the users to do the heavy lifting before the host goes through the motions to set up a TCP flow and consume resources. Essentially this limits the 3WS to completing only for valid connections.
Said another way, unless you see tons of Syns coming in and consuming CPU to generate the SYN cookies, you're probably fine.
Andrew
On Jun 27, 2017, at 2:18 PM, lleachii--- via 44Net 44net@hamradio.ucsd.edu wrote:
Josh,
It's cool, no problem. I was actually going to inspect the packets later tonight to determine the issue.
Feel free to continue using the DNS and troubleshooting. Let me know if you need any assistance.
73,
- KB3VWG
44Net mailing list 44Net@hamradio.ucsd.edu http://hamradio.ucsd.edu/mailman/listinfo/44net