Re: Syn flooding attacks

[Vern Paxson <vern () ee lbl gov>]

> The router could discard the SYN, remembering it, and let pass the retry SYN
> that usually occurs with valid connections and does not with invalid ones.

This is no good - all the crackers have to do is modify their programs
to send two bogus SYNs, spaced apart, instead of just one.

                Vern