> Our patch can be used along with SYN policing to prioritize incoming > connection requests on a socket. SYN policing can be used to limit > the rate of a particular class, but it cannot be used to prioritize a No. Because you cant prove the packets are not spoofed. An attacker becomes able to block classes - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org