[azernik]

Yes - delay SYNs until an authenticated reverse lookup confirmed the IP was owned by a trusted domain. With caching to reduce common-case latency, which would otherwise be intolerable.

[tptacek]

Does this system exist somewhere?

[azernik]

Absolutely not