Methods for Preventing SYN-Floods

• These methods at best only REDUCE vulnerability. They do not eliminate it

• Reduce IP Spoofing

• Install Vendor Patches

• Install Firewalls/Packet Filters

  • Filter incoming and outgoing IP addresses
  • Stop inbound SYN packets at border and store and forward them via a bounded linked list
  • Use Access List at border

Previous slide

Next slide

Back to first slide

View graphic version