20.11.2009, 11:56
Most DDoSes fill up the 100 mbit uplink, no software or firewall can block that.
If it's less than 100 mbit, you can indeed run tcpdump or the windows equivalent and block those IP's.
If it's less than 100 mbit, you can indeed run tcpdump or the windows equivalent and block those IP's.