Defending against SYN-flood DoS attacks

The Register: “A SYN flood is perhaps the most efficient packet attack, devouring the greatest amount of service
with the least effort. It fakes the initial handshake of a TCP connection with spoofed IPs which the
target machine is unable to answer.”