"Since IP addresses are trivial for attackers to forge ... the only effective way to handle such attacks is to simply absorb the load" :(