Systems and methods for increased security using client address manipulation

A network device, comprising:

• a processing circuit;
• and
• memory, operatively connected to the processing circuit and storing instructions that, when executed by the processing circuit, cause the network device to perform a method, the method comprising:
• receiving, by the network device, a first packet, at a first destination address, the first packet including a source address;
• receiving notification of a denial of service attack associated with the source address;
• sending, by the network device, a message to the source address, the message including a second destination address and instructions, the instructions instructing the recipient of the message to send subsequent packets to the second destination address;
• and
• sending, by the network device, a message to a network routing device, to drop subsequent packets addressed from the source address and to the first destination address,
• wherein the instructions are transmitted within the network layer of a second packet.