Re: SYN Flooding [info]

[coxa () cableol net (Alan Cox)]

> We have a tool that will look for SYN packets that do not get followed with
> ACK and clean the half open connections by sending a RST packet.  This
> unclogs the port and allows legitimate connections to happen.  This tool

Nice idea for a tool. Read RFC 1337 "Time wait assassination hazards".
Discuss the data loss issues.

Yes its far better thn nothing, and I really appreciate the fact you folks
put it out for 60 days for free, but its a help not an answer