[ossec-list] DDOS protection

[deltamails]

Can Ossec do DDOS protection?
How can we set rule where if there are too many requests/connection say 
"200"from same IP of any kind let it be http,smtp,ftp,ssh etc it block the 
IP for 'x' time.

Thanks
Regards,
DM