add an anti-ddos rule