Problem is a local firewall, wether you host stuff at your home on a fiber connection, or even in a cheap hosting datacenter that doesn't offer inbound protection from ddos attacks, the firewall will only protect your server from crumbling down, like said before. You will still use your max bandwith as long as the attack goes on, wich wil be expensive either for YOU or your ISP, and belive me, the ISP/Datacenter won't pay the bill. The Datacenter actually need to have their own inbound protection from where-ever they connect to, wich is what makes these attacks so hard to fight, cause no matter where you put the filter that discards the packets, there will always be a network on the other side that will take a penalty in bandwith, dependent on how serious the attack is, untill you reach the origin of the attack.
Also DDOS stands for "distributed" denial of service, wich means a smart hacker will distribute the attacks to as many hosts as he's able to to use as zombies, making it very hard to track the origin of the attack
|