1. A method for detecting and mitigating denial of service attacks, comprising: initiating a small computer communication session on a communication network; executing in a router a set of permit rules for permitting flow of communication packets for user-initiated sessions through said router, said permit rules including a default rule for discarding all packets with respect to said small computer in traffic not pertaining to sessions initiated by said user.