SYN Flood Attacks 1

[jim532]

Recently been getting sonic wall alerts saying "Possible SYN flood attack". The alert message doesn't say it blocked or prevented the attack. Any way I can prevent these attacks?
Here's the context of the alert --

02/24/2006 14:50:16.144 - Possible SYN flood attack - Source:71.65.14.142, 1740 - Destination:xxx.xxx.xxx.xxx, 21 - -


((xxx.xxx.xxx.xxx is our internal IP address))

 

[SonicWALLInstructor]

I need some more info Jim:

1. Are you running Enhanced OS? What verion?
2. What SonicWALL product are you using?

With this info I can better assist you. Answer back soon.

Roger L White CISSP, CISA, CISM, GSEC
Certified SonicWALL Instructor
Security Team
Invenio Technology
(212)244-4994 ext. 715
(917)326-0386
Need Help call anytime.

 

[SonicWALLInstructor]

hi Jim just following up on your issue... Are you still seeing the attacks in your logs and can you answer my last post so I can give you some good tips on how to better secure your network from these attacks.

Roger L White CISSP, CISA, CISM, GSEC
Certified SonicWALL Instructor
Security Team
Invenio Technology
(212)244-4994 ext. 715
(917)326-0386
Need Help call anytime.