how to protect my server against DDoS attacks using iptables or kernel configurations?
How can I protect my server from incoming DDoS attacks using iptables or optimizing kernel configurations to block them?
These should help you out:
Note that any such protection you put in place is not going to be foolproof. Also note that any protection you put in place may block legitimate traffic.