Is there any way to limit the incoming packets from the same IP address to X per second? We run specific types of services (game servers) on our machines, and a lot of exploits for it rely on spamming 70-100 empty packets to it.
Have you looked into Policy-Based QoS? Depending on the protocol they are sending those packets in, you could be able to limit it with that.
Here's the location of the Policy:
Here's all the values.
If they are sending the blank packets on the same port as your game runs on, this probably won't work.