@ubernaut cloudflare is comprehensive, IIRC you can toggle it so any new IP needs to do a captcha style challenge first. If we get attacked for real, then setting up cloudflare would likely be the only thing to restore the forum. OTOH, our data is what most people really want, I doubt very many really want to simply DDOS TripleA