RE: Syn floods and DOS protection

[Peter Mueller <pmueller@xxxxxxxxxxxx>]

>       Another option can be a QoS policer limiting the SYN rate.
> You can use it at any place before the real servers (gateway,
> director). There is example for such settings in the iproute2
> package.

This sounds very interesting.  Does the QOS synrate limiter differentiate
between "real" and "fake" traffic at all?  Do you have any Julian tips on
their usage? :D