Make each "hit" cost as little to you in bandwidth/resources, and as much as possible to the attacker. National solution is to stop known bad nodes at the ISP

Make each "hit" cost as little to you in bandwidth/resources, and as much as possible to the attacker. National solution is to stop known bad nodes at the ISP level.