FreeBSD CURRENT 7.x

Kris Kennaway kris at obsecurity.org
Wed Jun 6 19:43:24 UTC 2007


On Wed, Jun 06, 2007 at 02:06:13PM +0300, Abdullah Ibn Hamad Al-Marri wrote:
> On 6/6/07, Outback Dingo <outbackdingo at gmail.com> wrote:
> >The past few days ive been getting errors and "sluggishness" on a system
> >with both sk and msk chips in it.
> >7.0-CURRENT FreeBSD 7.0-CURRENT #0: Wed Jun  6 03:50:46 PHT 2007
> >
> >TCP: [xxx.xxx.xxx.xxx]:2400 to [xxx.xxx.xxx.xxx]:80 tcpflags 0x11<FIN,ACK>;
> >syncache_expand: Segment failed SYNCOOKIE authentication, segment rejected
> >(probably spoofed)
> >TCP: [xxx.xxx.xxx.xxx]:12236 to [xxx.xxx.xxx.xxx]:80 tcpflags 0x4<RST>;
> >tcp_input: Listen socket: Spurious RST, segment rejected
> >TCP: [xxx.xxx.xxx.xxx]:3694 to [xxx.xxx.xxx.xxx]:80 tcpflags 0x4<RST>;
> >tcp_input: Listen socket: Spurious RST, segment rejected
> >TCP: [xxx.xxx.xxx.xxx]:10376 to [xxx.xxx.xxx.xxx]:80 tcpflags
> >0x18<PUSH,ACK>; syncache_expand: Segment failed SYNCOOKIE authentication,
> >segment rejected (probably spoofed)
> >TCP: [xxx.xxx.xxx.xxx]:10376 to [xxx.xxx.xxx.xxx]:80 tcpflags 
> >0x11<FIN,ACK>;
> >syncache_expand: Segment failed SYNCOOKIE authentication, segment rejected
> >(probably spoofed)
> >TCP: [xxx.xxx.xxx.xxx]:15377 to [xxx,xxx.xxx.xxx]:80 tcpflags
> >0x18<PUSH,ACK>; syncache_expand: Segment failed SYNCOOKIE authentication,
> >segment rejected (probably spoofed)
> 
> This has been fixed by the FreeBSD Commiter Attilio Rao.

I think you are mistaken.

Kris


More information about the freebsd-questions mailing list