* Jan Minar:
>> Is this a serious problem?
>
> Maybe. It is a very serious bug.
Actually, it's a feature because some TCP extensions use SYN+FIN ("TCP
for Transactions" or something like that).
The real, nasty bug was in stacks that accepted SYN+RST as a regular
SYN, easily passing through to quite a few stateless packet filters.