Bug 566886

Summary:	net-firewall/iptables: add "--enable-nfsynproxy" (SYNPROXY tool)
Product:	Gentoo Linux	Reporter:	Steffen Weber <steffen.weber>
Component:	Current packages	Assignee:	Gentoo's Team for Core System packages <base-system>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Steffen Weber 2015-11-26 08:17:12 UTC

The nfsynproxy tool is used to detect parameters for the SYNPROXY module. I'd find it useful to have this tool compiled by default or via a new USE flag.

See: http://rhelblog.redhat.com/2014/04/11/mitigate-tcp-syn-flood-attacks-with-red-hat-enterprise-linux-7-beta/

Reproducible: Always

Comment 1 SpanKY gentoo-dev

2015-11-28 20:26:22 UTC

added behind the USE=pcap flag too:
http://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ace76fb957e46e87b595cb3811d16e41d5b5e6fb