Last week I started a topic about ddos protection.
I searched "How can I protect my server ddos-syn flood attacks?"
We have established a software firewall and some server modules.
but, this software doesn't help a lot of measures.
I think, a hardware firewall necessary for a definitive protection.(For example cisco's produces.)
Up to now, I learned from this experience.
If you have your experience, please reply this topic.