TCP only does NOT rule out DDoS, it just limits it to a subset of potentially less effective methods. All DDoS means is that you get a bunch of machines hammering a system.