So, where is your security? After 145 gb of stealing you started your blocking? Rate limitation should be automatically enabled instead of waiting and inspecting the traffic.