The problem that can occur with TCP is when a rogue client forges an IP packet with a bogus source address, then floods a server with TCP SYN packets.
当恶意客户机使用虚假的源地址来伪造一个 IP 报文时，TCP 就会出现问题了，这会大量 TCP SYN 报文攻击服务器。
The server allocates resources for the connections upon receipt of the SYN, then under a flood of SYN packets, eventually runs out and is unable to service new requests.
服务器在接收syn报文之前，要为连接分配资源，但是在大量产生SYN报文的情况下，最终会耗尽自己的资源，从而无法处理新的请求。
You can specify which incoming TCP packets to scan and discard those that don't match the flags ack, FIN, PSH, RST, SYN, or URG.
可以指定应该扫描哪些到达的TCP数据包，丢弃不与ack、FIN、P SH、RST、syn或urg标志匹配的数据包。
应用推荐