syn/ack & icmp ddos atteck

how to defende ?