I too, would like to seem some exact sw configuration, some iptables/kernel extension to inspect packets against attacks like this. Maybe we need heuristic fir

I too, would like to seem some exact sw configuration, some iptables/kernel extension to inspect packets against attacks like this. Maybe we need heuristic firewalls like we did with virus scanners a long while ago? ( But of course, CloudFlare will only suggest to sign up with them for protection, all hail capitalism, even if it takes our system down. )