FreeBSD 7, bridge, PF and syn flood = very bad performance

[Max Laier]

On Saturday 26 January 2008, Dag-Erling Smørgrav wrote:
> Stefan Lambrev <stefan.lambrev at moneybookers.com> writes:
> > Does anyone try to see PF with "keep state" in action when under syn
> > flood attack?
>
> Try "synproxy state" instead of "keep state".

not on a bridge unfortunately.

-- 
/"\  Best regards,                      | mlaier at freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier at EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part.
Url : http://lists.freebsd.org/pipermail/freebsd-current/attachments/20080126/bc7c714f/attachment.pgp