Pfsense syncookie don't block normal hping3 dos command

[01xd]

hping3 -S --flood -d 60000 wan_ip -p 443

Syn cookies not block or stop this hping3 flood?

Is syn cookies supposed to block floods ?

What additional pfense mechanism are required to actually stop this type of attack?

[johnpoz]

@01xd pretty sure syn floods are turned on in advanced setting of your incoming rule you would need turn on synproxy.

Where are you testing from? if from the local side of your pfsense it would never see your wan rule that would be incoming into the wan.