DOSDOG,

The DDOS preventative measures you speak of are for regular DDOS attacks. The latest fad of botnets none of the preventative measures work. I have played with some botnets trying to learn how to fight back. And I have come up with some interesting methods. And created my own for fun..... I swear to god I never have used it other then to play in my own networks....lol...

The problem with blocking DDOS attacks by bots is that some people have botnets with over 10 000+ bots. I have test see more using just 20 bots at a time and it can F*S*UP. And stop a servers functions dead in it's tracks.

The best method is to collect an IP. Chances are the system at the end of the IP that is attacking has already be compromised. So a few quick scans should get you the info you need to get in. Find the bot. Open it in a hex editor and comb threw it line by line till you start getting http://yadda yadda info, port number SQL info (If a database driven botnet.) If it's an IRC botnet you then can trace it back to it's start point with alittle effort and know how. Then report the guy to his ISP and local authority and the bot net dies off shortly there after.

If it's a SQL botnet driven with a webpage.... 99.9% of botnets that use SQL can be injected... it's rather funny actually. You then could take them over, report the website to the ISP or host as well as local authorities....

Beyond that if a DDOS is planed on your site and they got a load of bots... no preventative measure in the world are gonna help your ass. Some of these bots even eat their competitors bots... it's some crazy stuff... you can buy botnets or rent access to them. To think the botnets are just still in their infancy is scary to say the least.