If ctf365 wanted to keep the playing field level, they could sandbox the entire network so that attacks originate from another device on the network. So you have:
-----------------Network-----------------------------------
my_fortress <- targeted by: competitors_command&control_box
my_command&control_box :targets -> competitors_fortress
-----------------------------------------------------------
No shady traffic ever needs to traverse the public internet. Only ssh access to my_command&control_box and my_fortress is required. This has the added benefit of normalizing the attacking horsepower of the entrants.