I believe that it's working correctly, the action "action=clear_session"
and "tcp_syn_flood, 25 > threshold 10, repeats 1899 times" indicates
that once the threshold was reached the traffic was blocked.
You are leaving our website
You are leaving our site and we cannot be held responsible for the content of external websites