| First, I'm sure theplanet and wtf.com will love seeing this.
Second, TCP SYN floods are trivial to defend against with modern operating systems. In Linux, it's as simple as setting tcp_syncookies to 1 ( `cat /proc/sys/net/ipv4/tcp_syncookies` to see what it is now), or using a firewall to limit the number of open/half-open connections from a given IP (only X SYN-only connections, and only Y full SYN+ACK connections).
If you don't spoof the source address, it's trivial to trace and prosecute (and yes, the FBI - or your local equivalent - will arrest you for this). If you do spoof the source address, it's trivial to block.
Playing these games against professional network admins is usually a "very bad" idea. |