lucius100
Then use a normal security plugin specified to WP, that firewall is universal, not save you...
Try the combination of Wordfence and All in one WP security. In the second you can set blocking to xmlrpc to block ddos.
DDOS block integrated in default have only OLS.
(dont forget for good VPS/Server hosting company what can block a few DDOS attacks with his network). Cheap companies cant build a good infrastructure.
And a little question: When not can configure Nginx, then how help for hosted sites like yet WP, Xenforum or other sites set?
Use Apache or OLS what support .htaccess, users can set it own settings for sites.