As Jason mentioned, NetBSD already has a syn cache which is
	specifically designed to handle SYN-flood DoS attacks.

	Don't SYN cookies make it impossible to tell if the initial
	connection setup packet has been received?

		David/absolute		-- www.netbsd.org: No hype required --


On Mon, 16 Apr 2001, suxm wrote:

> Hello, everyone.
> Is there someone who is interested in the implementment of SYN cookie in NetBSD kernel ?
> I am trying to do such a job, but don't know how big a job it is.
> Would you like to enlighten me ?
>
> Best regards
>
> sincerely yours
> suxm
>
> suxm@gnuchina.org
>
>