Protection against SYN flooding

• Make operating system more robust

  • not a backbone problem, except on routers

• Trace and block forged packets

• Limit bandwidth that can be used by TCP SYN traffic