Changed the threshold to be 500 packets per second, before cutoff.
Catches the DOS attack, but can't yet drop the TCP half-open.
That comes next.