FlameDuck #1 yes, but is't there any better solution today? Yes. Two. a) out-bandwidth the attacker (aka. the Microsoft solution) b) get your ISP to drop such packets at the router (that's what it's there for).