Most webservers can be DoSd by creating a large number of tcp connections from the same host. Simple, lame, and not spoofed, but effective nonetheless.