TCP SYN attacks

Richard Stiennon writes:

Check out the elegant solution just announced by Checkpoint:

This is a firewall solution. I like the psuedo-NAT done to adjust sequence

I'm not fond of this class of solution. I'll also point out that it
appears that kernel fixes almost completely alleviate the problem.