chsh said
The biggest thing that can be done to stifle DDoS attacks is if all ISPs were required to implement egress filtering.
Just thought that needed repeating