From: rick.jones2@hp.com   
      
   Martijn Lievaart  wrote:   
   > Any firewall that tries to handle SYN floods by spoofing the   
   > connection until the three way handshake is complete. Firewall-1   
   > does this for instance and I suspect others as well.   
      
   Isn't that somewhat borrowing from Peter to pay Paul?  I would think   
   that space for "state" would be even more limited in a firewall than   
   it would be in the host(s) behind it.   
      
   rick jones   
   --   
   web2.0 n, the dot.com reunion tour...   
   these opinions are mine, all mine; HP might not want them anyway... :)   
   feel free to post, OR email to rick.jones2 in hp.com but NOT BOTH...   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)