pf synflood mode: destination host need to tweak the state further as the 3WHS progresses set up sequence number modulator can't do before we know the dest host's chosen ISN from this point on we reuse the synproxy code