At 04:41 PM 02/14/2000 -0800, Alberto U. Begliomini wrote:

If I limit the SYN traffic to 8kbs to host 10.0.0.1 like in the example, I have a DoS right there. Let's say the host I am CAR SYN is a web server instead, then an attacker just need to send 8kps of SYN traffic to prevent any useful access to my web server. Or am I missing something here?

The important thing to take away from this example is that you have a tool to rate-limit traffic. How you set the thresholds is an exercise for the reader. :-) - paul