Dynamic ingress filter to fight off a DDOS while allowing legitimate traffic through