[api]

That may be true, but in any case the DDOS usually arises from outside the ISP's network so forbidding local traffic would have little effect.