I’m no network engineer or expert, but from what I understand of basic DDoS makes me think that it’s job is done if it reaches the box it’s targeting at all. Going on what I’ve come to understand (which may not be much), I kinda have the idea in my head that a DDoS is inclined to occupy all the ports available on a box, regardless if the packets are then trashed or controlled, it seems they’ve already occupied the port and completely what they needed to do. So generally it would seem to me that the best line of defense is an external machine that can mediate that somehow (although granted I don’t know how that’d be possible either if the packets occupy that machine’s ports as well @.@)
I get ‘pecked at’ by ip addresses from China daily. They target ssh 22, ftp 23, and several web ports. The trick to iptables, aside from changing default port numbers, isn’t blocking ip’s. It’s setting limits allowed by a connection. If it triggers a limit, it gets dropped (and never use REJECT). Granted, it doesn’t make me invincible, as no one ever will be as long as isp’s allow recursive (egress) dns request which allows for amplification DoS. I have held off ‘script kiddies’ for over a week at a time with my firewall. But again, I do not claim to be invincible.
Iptables has a ‘target’ called DROP. If a connection triggers a rule aimed at DROP, the firewall does exactly that. It drops the connection, without ever sending any confirmation back to the source.
Ah. Well I guess it’s trying to strip down packet layers and process data that would ‘clog’ a machine then, short of a bit of a network bottleneck depending on bandwidth limitations.
Also, it is getting a bit off topic. I’d suggest further DDoS conversation here, if anyone can be bothered.
The router can still get overwhelmed with packet receiving and slow down and/or “stop working.”
I agree. ‘Botnets’ are still an issue overloading the bandwidth, and can actually fry components in the router. But the harder we can make it on the attacker, the better the odds they will move on to ‘simpler’ prey.
Also, I agree with OffLuffy. We should continue this on the forum he posted a link to. That post is more appropriate for the content of this discussion 
This is my Computer:
**CPU:**AMD FX-8350, 8 Core, 4,0 GHz
Cooler: be quiet! Shadow Rock 2 CPU-Kühler - 120mm
Motherboard: Gigabyte GA-78LMT-USB3 Mainboard Sockel AM3+
RAM: 2x Kingston KHX16C10B1B HyperX 8GB (1600MHz, CL10, 1x 8GB) DDR3-RAM
Storage: Samsung MZ-7TE1T0BW Serie 840 EVO and 2x Western Digital WD10EZEX Blue 1TB
GPU: ASUS Radeon R9 270X DC2, 2048 MB GDDR5
Case: Thermaltake Commander MS-I Snow Edition Midi-Tower
PSU: Be Quiet Pure Power L8 PC-Netzteil (ATX 2.4, 500 Watt)
Optical Drive: ASUS DRW-24F1ST 5,25 Zoll SATA DVD-Brenner
OS: Windows 7 Ultimate (x64)
Monitor: Samsung SyncMaster S22D300H, 54,61 cm (22 Zoll) - HDMI, VGA and 2 noname Monitors
Audio Card: Asus Xonar DGX 5.1 PCI-Express
Yep this was my Hardware 
Thanks DotDash for the template! 
No problem
CPU: i3-3 something something
GPU: EVGA GeForce (ready for this?) 210 (ba dum tiss)
Mobo: MSI Z87-G43
PSU: Some random metal box from antec
Case: Fractal Define R4
RAM: 16 GB 4x4 Corsair XMS DDR3
Storage: Some random block of metal from seagate
For the record, I didn’t choose these parts, my dad did back when I knew nothing about hardware.
CPU: i7 4770k
GPU: gtx 780 windforce edition
Mobo: MSI Z87-G45
PSU: corsair 750w I think?
Case: corsair 200r
RAM: 8gb ddr3 ripjaws iirc
Storage: 128 gb sandisk ssd, 1tb wd hdd
I cant tell if those monitors are the same or not…
Bottom two are, top one is an inch large and 21:9 aspect ratio, not 16:9.
Eww…I can’t stand monitors that aren’t exactly the same…
They are split into seven. The top one allows for a bunch of applications open at the same time so honestly it’s better like that for the space I have.
Yuck is that windows?
It sure is windows, 
GetComputerSpecs.(){
System.out.println(ComputerSpecs);
}