Proactive control of distributed denial of service attacks with source router preferential dropping