The only mitigation strategy that is sensible from a lot of these attacks is to block them at the edge or core network as well as within the provider by now. netfilter iptables (quickly to be replaced by nftables) can be a person-Room command line utility to configure kernel packet filtering regu