A user with huge number of little connections simply bypasses the shaper even PCQ.please suggest a way to solve this problem and of course please say
how to block syn flood of all dynamic pppoe customers ?
try to filter invalid connection in /ip firewall filter