Future Work synflood mode tailored to protect the pf host small floods hit the destination host, relying on its' stack to cope per-destination synflood mode with lower limits may be feasible abuse sourcenodes? per-rule?