A SYN flood occurs when a host becomes so overwhelmed by SYN segments initiating incomplete connection requests that it can no longer process legitimate connection requests.
Before You Begin |
---|
For background information, read Understanding SYN Flood Attacks. |
To enable the SYN flood protection screen option and define its parameters, the JUNOS CLI configuration editor. The specified zone is where a flood might originate.
- user@host# set security screen zone-syn-flood tcp syn-flood
timeout 20
- user@host# set security zones security-zone zone screen
zone-syn-flood
- user@host# set zone zone screen syn-flood