SYNDeflate will lag your system up like hell from a big attack. if you are like me you just setup a FBSD box in front of your main boxes to drop syn floods.