SYN flood messages flooding my mailbox


I guess you missed what I proposed earlier. It was similar though the
Fib was used so it only worked for single homed connections. The
advantage was simplicity. All that needed to be changed was the
forwarding code. Your proposal involves the AdjRibIn which would
require BGP code changing flags on the forwarding entries. A bit more
work for the router developers but covers more cases. We both
proposed turning this on by default with cluefull people who knew
routing would be assymetric turning it off.