How to Prevent an Attacker From Trying to Kill You With Your Firewall Rule Set

Failing to band can give an attacker the ability to control some subset of your firewall rules. You have to be careful with rules that say, you know, not more than so many incoming connections at a time. Having a dynamic rule that says each ip dress can only make so many connections per minute is helpful. If there's something that whoever wrote that application hasn't thought of, or wrote in some way wrong, there's a very real possibility it could get exploited.