I'm researching into ddos attacks to get a better understanding. I've read lots from this community however one thing I couldn't get my head around is packet dropping.
So lets say I've identified an attack signature and want to drop these packets.
At which stage are the packets dropped if they are configured by me, not accidental packet loss.
If they are dropped at my server, how does this help since the packets have already arrived and therefore have taken up bandwidth. Or is packet dropping just a technique to avoid replys being sent out and therefore the attacker has to wait for a timeout?