The only mitigation method that is sensible from these types of attacks is to block them at the sting or core network or simply on the provider already.Encrypted info transfer of the client info according to the hottest safety criteria by using a Wildcard SSL certificate.To understand why your current iptables principles to avoid DDoS attacks suck,