[viraptor]

It doesn't matter what you do at the firewall level. It's too late. If anyone wants to volume DDoS you, they'll send traffic regardless just to overload your connection.