Subject: Re: [PATCH] Add IPv6 support to TCP SYN cookies

From: Alan Cox <[email-masked]>
Date: Tue, 5 Feb 2008 22:05:10 +0000

> SACK is actually a good idea for mobile devices, so preventing
> syncookies from not getting into account some options (btw, does it work
> with timestamps and PAWS?) is not a solution.

Syncookies only get used at the point where the alternative is failure.
No SACK beats a DoS situation most days