I've a problem on a Server dedicated to groupwise.
When I try to change the option "TCP Defend SYN Attacks" from OFF to ON it
doesn't work.
I've tried to Set this parameters in STARTUP.NCF, AUTOEXEC.NCF, through
MONITOR.NLM or even on the console, and the facts are the same ... NO RESULTS !
The syntax I used is "Set TCP Defend SYN Attacks = ON", the standard syntax
in fact.
When I try to change it with MONITOR, I can set the parameter to ON but
when I leave the "Communications Parameters" to return to the "Server
parameters", and return immediatly in "Communications Parameters" the
parameter "SYN Attacks" already returns to "OFF".
Does somebody can help me ?? Any idea about this bug ?
Thanks.
fmu...@cora.fr wrote:
>
> Hello,
>
> I've a problem on a Server dedicated to groupwise.
> When I try to change the option "TCP Defend SYN Attacks" from OFF to ON it
> doesn't work.
That's normal. This setting simply no longer exist in current patch
versions, but there's no way to remove a set parameter from the list of
available settings once introduced. That said, it's sort of orphaned
now. You see it, but in reality it doesn't exist.
CU,
--
Massimo Rosen
Novell Support Connection Sysop
No emails please!
http://www.cfc-it.de
Thanks a lot for you answer, I've checked it on our old Groupwise server
(NW 4.11 migrated to NW 5.1 SP5), which has this parameter sets to ON
before migration, and now it's impossible to change it to OFF.
Now, my question is to know if our new Groupwise Server, setted to OFF
for SYN Attacks protection, is naturally protected against SYN Attacks or
not ?
Sincerly,
Frederic MULLER.
> Hi,
fmu...@cora.fr wrote:
>
> Hi Massimo,
>
> Thanks a lot for you answer, I've checked it on our old Groupwise server
> (NW 4.11 migrated to NW 5.1 SP5), which has this parameter sets to ON
> before migration, and now it's impossible to change it to OFF.
>
> Now, my question is to know if our new Groupwise Server, setted to OFF
> for SYN Attacks protection, is naturally protected against SYN Attacks or
> not ?
Yes. As I said, the setting in reality doesn't exist any longer, as it's
no longer needed (the functionality is always there in newer IP stacks).
It doesn't matter at all what the setting shows as value currently.
Thank you very much Massimo.
See you soon
Frederic MULLER