[tor-relays] preventing DDoS is more than just network filtering