This does the automatic iptables manipulation you're looking for based on inspecting netstat: http://deflate.medialayer.com/ http://deflate.medialayer.com/ Th

This does the automatic iptables manipulation you're looking for based on inspecting netstat: http://deflate.medialayer.com/ http://deflate.medialayer.com/ That said, it's not really DDOS protection. It is good for blocking bad crawlers or misconfigured / casually malicious clients. When attacks get to be true DDOS - hundreds or thousands of zombies intent on taking you down - you'll almost certainly need purpose-built hardware and an expert network admin to deal with it.