This is pointless, there is no way to prevent DDoS'ing without having immense financial resources to spend on such protection. There is no "solution" to be found, especially by a single person absolutelly overloaded with pressure about updates, security, bug fixes etc. etc.
There can be no fix other than throwing money at the problem when it comes to DDoS'es, if you're so sick and tired of them, maybe throw a couple grand into Scawen's bank account each month and appropriate DDoS security would be implemented.
Or perchance you could brainstorm a solution all by yourself, because you seem to be so knowledgable about the issue that you would know how to fix the issue in less than 10+ years time. Every time an issue like this arises there's people like you that think it's a simple fix, it's not.