The sole mitigation tactic that is smart against these kind of attacks is to block them at the edge or core network as well as for the provider now. netfilter iptables (quickly to be replaced by nftables) can be a consumer-Place command line utility to configure kernel packet filtering procedures