Traditional IP filters are typically useless against packet storms because all of the packets are technically valid, there are just way too many of them.