echo 'net.ipv4.tcp_challenge_ack_limit = 999999999' >>/etc/sysctl.conf;sysctl -p
I got this from http://www.isssource.com/fixing-an-internet-security-threat/ but they had a typo