|
Posted by Sebastian Gottschalk on January 24, 2007, 4:00 am
If you were Registered and logged in, you could reply and use other advanced thread options
Bondi (Class-1) wrote:
> I've basically tried to desensitise the f/w by adjusting:
> 'Maximum incomplete TCP/UDP sessions number from same host', (which was
> originally 10) to 50 (max). This seems to work for the moment.
>
> I don't want to set this too high, leaving my network vulnerable to dos
> attacks,
Huh? Now that's technical nonsense. I really fail to see any such DoS
condition due to allowing as many connections as you want and need, and
neither do I have any technical reference that anyone ever mentioned such a
scenario.
And in fact you'd rather DoS yourself with a too low setting.
> What is the correct (permissible) maximum value I should have this set
> to?
16777215 (2**24-1), the maximum.
| 
XML site map