i would be greatfull for the exact calculation/formula how to calculate how much SYN packets can be send per 1 Mbit Bandwith:
1.) What is the Size (in Bytes) of one SYN-Packet = 20 Bytes? http://de.wikipedia.org/w/index.php?title=Datei:TCP_Header.svg&filetimestamp=20070706210301 Is it correct that the first FIVE lines, heach have 4 Bytes = 20 Bytes in Total? Is it furthermore correct, that there needs to be no payload and a packet only containing a header is valid?
2.) Is it valid to divide 1Mbit / Number-of-Bytes-per-Syn to get a valid result? (1000 000 /8/20 ==>6250 SYN's per Second???)
3.) Or are there other limiting factors that will reduce drastically the number of SYN packets per 1Mbit? (so the calculated number will in practice be much lower.) What would this be that limits this number?
4.) Are there any "must know" tools to protect my server from Syn Attacks (linux/debian). I have implemented some basic stuff in iptables but dont know if this will really help... Better would be filtering on "Frontend/Gateway" Servers? What commercerial Products offer SYN-Flood Filtering, I would be thankfull if you can name some concrete products.