So basically people are using UDP packets instead of TCP to request information from a gaming server with a phony address, and when the server responds it ends up sending the information to another location (the victim) and this ends up flooding that connection. Why can't the firewalls of the victim's stop UDP packets? Are they just not programmed to do so?