Like the service is there but it's just filterd enabled for lan access only .. what will happen ?
closed as off-topic by Conor Mancone, schroeder♦ Aug 20 at 17:56
This question appears to be off-topic. The users who voted to close gave this specific reason:
- "Questions asking us to break the security of a specific system for you are off-topic unless they demonstrate an understanding of the concepts involved and clearly identify a specific problem." – Conor Mancone, schroeder
Yes, it's possible to DDoS even if no ports are open.
Keep in mind that a DDoS attack works by exhausting a resource. It can be processing power, storage, memory, or bandwidth. So if an attacker sends way more traffic in your way than your network can receive, your network access will be severely degraded. No matter if there's a service active to receive the packets.
The most effective way to counter such attack is to work with your upstream ISP and tell them to drop every packet assumed to be part of an attack. That is not cheap or easy, but is how most internet services protect themselves.
The other way is to increase the network bandwidth to have more resources than the attacker, but this is more expensive than the former solution.