[IT-SecurityNotifies] Issues with SYN on Lenny

["Joel Merrick" <joel.merrick AT zeninternet.co.uk>]

Hi all,

Seeing a strange problem exhibited after a recent dist-upgrade of an
exim server.

We see connections hanging when connecting to port 25 running on the
2.6.26 kernel version.

Running a tcpdump on the server shows that a syn packet is received, but
there's no ack or anything. Using the etch kernel doesn't cause this
issue either, which negates any issue with exim, iptables or named and
the like.

I'm wondering if there's been any changes to the tcp/ip stack or the way
the kernel handles syn cookies etc..

The server is under heavy utilization, so I'm wondering if we're
tripping an arbitrary value somewhere in /proc ? 


Any tips greatly appreciated!


Thanks,
Joel 
--  
Joel Merrick 
Systems Administrator, Zen Internet 
T: 0845 058 9000 
F: 0845 058 9005 
W: http://www.zen.co.uk 
 
Eliminate downtime and improve performance with award winning Hosting from 
Zen Internet 
  
Please consider your environmental responsibility before printing this e-mail 
  
Zen Internet is ISO 14001:2004 Registered 
 
 
 
 
 
This email is confidential, may be legally privileged or otherwise protected 
from disclosure, and is sent for the attention of the intended recipient. If 
you are not the intended recipient of this email; please contact the sender 
and delete it from your system; you must not copy, reproduce, disclose to any 
other person, or otherwise use the contents of it or any attachment. 
Copyright in documents created by or on behalf of Zen Internet Limited 
remains vested in Zen Internet Limited.   
 
Zen Internet Limited is registered in England and Wales 
Sandbrook Park, Sandbrook Way, Rochdale OL11 1RY 
Company No. 03101568 
VAT Reg No. 686 0495 01 
 
 
 
 
 
 
 
 
 
 
 
 


--
To UNSUBSCRIBE, email to debian-isp-REQUEST AT lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster AT lists.debian.org