You do not have to use a firewall against CC ***

CC *** are symptoms occur when the server
　　is generally the server is CC , the legendary 7000 server will be closed for the ports of the phenomenon, 
because the fracture has been blocked, the command netstat -an and you can see the following display identical record: 
7000 219.128.90.43 219.128.90.43 3741 SYN_RECEIVED which is the proxy IP, SYN_RECEIVED is such a recording feature will generally have a lot of pieces, different proxy IP determining the CC corresponding to the approach taken in the future: the exclusion of the other, there are other types the DDOS time, q3031688198
CC for can set the IP strategy to deal with this IP 219.128.90.43 as an example, is satisfied that telecommunications networks
we use to deal with blocked IP segment(See the forum as if someone asked how blocked IP segment, here also provides a method just under) to open the local security settings, click "IP Security Policies on Local Machine" - Create IP Security Policy Next --- ---- - just write the name, such as input to stop, and has been click Next, prompted point is that until completion, this time created a policy called "block" of. The following point "IP Security Policies on Local Machine" - Manage IP filter lists and filter operations ---- ---- point add the name of Tim 75.156.25 (fill in order to identify the best segments corresponding IP) point added ---- ---- Next select the source address of a specific IP subnets, IP subnet mask instead enter 75.156.25.0 255.255.255.0 ---- ---- next target address selected my IP Next address ---- ---- ---- any type of agreement the next step ---- complete all closed. The following point strategy called "block" we start building, filling point properties ---- ---- ---- Next Next select the type of network all network connections ---- ---- Next When prompted to point ---- IP filter list, click the options we just created is named 75.156.25 Next ---- ---- ---- Next to choose to block complete, close the last point "stop" this policy, right, assigned, up here we've prevented segment 75.156.25 beginning, of course, also prevents 219.128.90.43 this IP , such as the IP but also other letters of the same operation can be used this method can completely prevent CC , troublesome thing is to see their own hand *** proxy IP and filling IP strategy. 
In fact, it is the application of IP security policy IP security policy role is very big, but many people are not concerned about this useful feature.