Kerio Tech KERIO WINROUTE FIREWALL 6 - Manual (Page 223)

17.2 Special Security Settings
223
These restrictions protects firewall (WinRoute host) from overload and may also help protect
it from attacks to the target server, reduce activity and impact of a worm or Trojan horse.
Count limit for outgoing connections is useful for example when a local client host is at-
tacked by a worm or Trojan horse which attempts to establish connections to larger number
of various servers. Limiting of number of incoming connections can for example prevent the
target from so called SYN flood attacks (flooding the server by opening too many concurrent
connections without any data transferred).