pf synflood mode: the proxy problem we need the client's 1st ACK to send to the server we send the SYN, wait for the SYNACK then need to send the client's 1st ACK store it? the synproxy trick: ACK the SYN again makes the client's stack resend that ACK