Indeed, it's hard to filter a DDOS because you still have to catch all the incoming connection. it's possible to filter the most of the DDOS however you still have to have the equipment to do that also not to mention the internet resources.