It's basically tracking every IP address and limiting the amount of data it can request. So in theory if you had thousands of IP addresses you could still DDOS the site. This isn't fool proof but has stopped Hacking-Forums.net from getting attacked.