Darren Reed wrote:

> What gets me, about all of this, is that it just moves the resource
> problem from one box to another and doesn't actually solve it.  To

  Also, in an attack situation, such a firewall might come under
considerably more stress (than a single host implementing
syn-cache/cookie) trying to protect a (possibly very large) number of
hosts at the same time.

  Cheers
      ,
   Rene