UDP flood attacks etc

[ssj100]

Hi everyone, I think I need some network experts here. I'm trying to figure out how to block flooding attacks. I'm not sure if it can be reliably done at the software level or whether it has to operate at the router level.

The reason I'm asking this is because I have just personally observed an attack where a "hacker" can cut the internet connection of a home user by just knowing his/her IP address. I'm fairly sure this is done via eg. UDP flood attacks. I don't think internal PC software can reliably block this, as the attack hits the router first.

I'm also curious about people who have a static IP address - wouldn't they be at risk of being continually "flooded" and repeatedly lose their internet connection? By resetting the router/modem, most people should get a new IP address ("dynamic") and be immune to the "flooding" attacks until the "hacker" figures out their new IP address.

Looking forward to hearing people's thoughts on this.