SYN cookies is a technical attack mitigation technique
whereby the server replies to TCP SYN requests with crafted SYN-ACKs, without
inserting a new record to its SYN Queue. Only when the client replies this
crafted response a new record is added. This technique is used to protect the
server SYN Queue from filling up under TCP SYN floods.