iptables and fail2ban for self-defense against connection/SYN flood on slower systems, including RasPi