> "hope they dont have a wealth of new source IP's to spawn their attacks from" You'd still be able to detect new addresses and block as necessary. I don't see

> "hope they dont have a wealth of new source IP's to spawn their attacks from" You'd still be able to detect new addresses and block as necessary. I don't see your point, of course the solution proposed isn't entirely hermetic, but how does your suggestion overcome this exact issue? > "This kind of approach only works if you are happy to pay the bandwidth price" Precisely the reason why most people would rather opt-out of serving malicious requests.