protection against DDoS with Syn-Flood

[Stefan Kell <skba.opbsd@gmx.de>]

Hi folks,

starting on monday, heise-online (http://www.heise.de), a wellknown german
newssite, is under a massive ddos attack with syn-flooding. As far as I
know, they are connected to the net with 100mbit/s via switches and load
balancers directly at the central de-cix node in Frankfurt. Their load
balancers crashed due to the heavy load according to heise-online.

Question to the specialists here: could OpenBSD's syn-proxy feature handle
the situation better, especially without crashes? What parameters could be
optimized so that this load can be handled?

Thanks for your answers

Stefan Kell