setro tbh, that does jackstuff unless it stops punch packets from being accepted.
nothing is dos proof, even if you do that, they can still ddos/dos
No offense but you don't know how blockland works like I do.
Punch packets are handled through the lightning-fast C++ handling code. Unless you're sending multiple thousands per second, in which case the thing that's going to crack first is your download speed. If you have half-decent internet though, that won't be a problem. The only thing that's handled through anything slow is when their request actually succeeds and they send their info for authentication. That's where they're blocked, and it prevents a whole lot of slow-ass TS from executing. It would significantly reduce any lag caused by the attack.