[UUG/MLUG] ooh, here's a new kernel message...to me, anyway

[Jonathan King <EMAIL:PROTECTED>]

Quoth /var/log/messages on babar.psyc.missouri.edu:

#Mar 3 03:53:24 babar kernel: Warning: possible SYN flood from
#24.65.216.170 on 128.206.45.45:111.  Sending cookies.

(My line break and octothorps.)

So nslookup says that the "from" host is really:

  24.65.216.170.ab.wave.home.com

128.206.45.45 is the L-ephant King himself; port 111 is sunrpc.

Checking this message out here and on the net makes it appear that
this is yet another "thwack" on babar, but apparently Linux kernels
< 2.0.30 could have bigger problems.

Did anybody else out there notice this?  Are the miscreants being
punished, or should I do the honors. :-)

jking

ps--Could this have been filtered out upstream in any case?