My alternative would be firstly to legislate that any network can only send packets that have a source address owned by them. This would drastically cut down s

My alternative would be firstly to legislate that any network can only send packets that have a source address owned by them. This would drastically cut down source address spoofing, which is the worst type of DDoS to try to cope with. Secondly I'd setup a far better method of reporting and blocking traffic up the chain.