This is the excellent idea! Actually, router vendors may simply
add a feature which shuts down the interface if SYN/SYN-ACK balance
is too bad -- thus disconnecting the hacker-to-be.Of course, that balance may be decaying with time, so repeated
unsuccessful attempts to connect won't trigger alarms.--vadim
Ah, that's fun if it's a XP interface we're talking about 
Presumably you wouldn't enable that option on one, though...
Avi