Jim Shankland writes:

...

I don't know of any routers that have these or other means of dealing with the SYN attacks.

We deal with them; see http://www.flyingfox.com/synflood_ann.html.

The easiest/best way to deal with SYN floods is to implement BSDI style TCP compressed state. NetBSD now has it, too. The solution is far from perfect, but it goes a long way. Perry