DDoS mitigation, ACLs and router forensics