Comment 1 for bug 323950

I figured I would put forth a patch to implement the simplest starting ground. Established connections aren't overly protected by this (there are some easy things to do), but a basic bad flags scan will be blocked.