Rate limiting output is a form of filtering. It would be effective at this kind of resource consumption attack.