How to deal with SYN FLOOD and extortion
patrickg-zill: If they are never connecting, then why not set up a SYN "honeypot"?  As soon as a valid user connects, redirect them to a different site or IP address that you do not advertise, that actually hosts your app and db servers.Thus you could rent or colo a small system on a different network, maybe even in a different part of the country and then redirect valid users to an entirely different location with a cookie in the URL.  No cookie no service.