tcp: incoming connections might use wrong route under synflood