Protecting against denial-of-service generally requires
isolating the source of the malicious traffic and ignoring any further requests
from that source. Modern firewalls can do this very effectively, providing the
attack is launched from narrow range of IP addresses.