Now define "outgoing attack". You're trying to keep it defined to "ddos" only but surely you would agree that the school filtering a student actively attempting to hijack school infrastructure to send active shooter threats to the student population should also be filtered yes?

Keep going a few steps and you'll realize that's exactly the problem, there's no level of specificity you can define here that works without some level of subjectivity. Try and see. Good luck.

Suggested reading: https://twitter.com/yishan/status/1586955288061452289