On 04/06/2015 18:51, Ca By wrote: > > UDP 80 and 443 are very commonly associated with DDoS in my experience. > I think it is common used as a reflection source port. Sadly true. We see this a lot. Not saying I agree with blocking it, but UDP 80/443 is deeply suspicious traffic in my experience.