Can we “squelch” DDoS attacks, closer to the source?