Dude, this is a pretty good post...I was always wondering how DDoS' ran on bots and such (being a sysadm, my worry extends with 1800+ users screwing up the 40+ servers I administer) so this is very educational....you think there's anything that can be written to add in as a "plugin" into the servers, kind of like Return To Castle Wolfenstein's hacked-cd detector/bad name monitoring/team-kill monitoring? See, having someone like yourself who knows how to really break something, you could think of a way to fix it...and if you can't because you're not into programming that much, just let me know and I'll do it

Very good post once again...this shows the vulnerabilities of machines against DDoS.