Astaro offers some protection for DoS attacks, but a true DDoS will consume all available bandwidth and cannot be managed by *any* perimeter device because the pipeline to the network is crippled outside of your network. Your best line of defense in case of a true DDoS attack is a competent and reliable ISP.
The advice that DDoS needs to be protected higher in the network, at the ISP, is correct for DDoS flood attacks. However there are many other sophisticated and targeted attacks that are not floods, and these can be protected at teh perimeter. For example open connection attacks, or attacks aimed at specific email or login servers. A number of these types of attacks are illustrated on the IntelliGuard Web site.
FWIW:
"Astaro Security Linux protects against common Denial of Service (DoS) attacks like TCP SYN flood, ICMP flood, UDP flood, Smurf, Trinoo, and IP spoofing."
FWIW:
"Astaro Security Linux protects against common Denial of Service (DoS) attacks like TCP SYN flood, ICMP flood, UDP flood, Smurf, Trinoo, and IP spoofing."
