[ish12321]

Originally Posted by aron9forever You can install csf (configserver security & firewalll) and configure it to limit max connections per address to 5 and also set a limit on specific ports (such as 27015). Limits can be set such that if a user opens too many connections in a certain interval (say 5 seconds) then they will be banned for the same interval. It worked wonders for stopping DoS attacks on my server be very careful when setting it up, if you don't allow SSH ports for example you WILL lock yourself out of remote connections and your machine will have to be serviced unless you have KVM ofc If it's really a DDoS (make sure you know what that means and implies) then there is nothing you can do on software side.

Already tried those actually. Would never work when each packet is from different IP. I dont use CSF but iptables directly.