Re: Is there really that can be done against DDoS?
The problem is depending on the nature of the attack it can be very expensive to Mitigate, that's assuming you actually have enough incoming capacity before any DDOS mitigation kit to deal with the volume coming in, You could get your upstream to null the target IP but that just takes the target down anyway.
The attackers however (who don't care about breaking the law) are likely to be using compromised boxes for the attacks so they're likely not paying much if anything for their resources which means it's expensive to defend against but fairly cheap to carry out.