very good web host recommendation

>> actually cisco has some pretty good DDOS prevention mechanisms

Yeah but then again, this is usually the accesspoint of the traffic entering you network. If the connection to that entry point is still flooded you still dont have any connection. btw most firewalls have SYN SYN/ACK detection mechanisms / filters. And the true problem is the bandwith you have to the internet

---------|
DDoS    ---------------------------|
DDoS    Your Con / Flooded      |  No Internet (deu to a flooded connection)
DDoS    ---------------------------|
DDoS   |
DDoS   |
-------- |

Only thing you can to is make sure you have more bandwith then is consumed by the actuall DDoS attack...

I agree with you completly, but I am just trying to offer some of the better solutions out there for DDOS
there are no ways to completly kill a DDOS attack if its big enough.

sorry for my "negative" awnser. Its just i spend allot of time allready trying to handle RDDoS attacks leading to looong days and resulting in true frustration when it results to nothing. And will do anything to protect the smaller hosts that are not capable to set up extensive networks as an "work arround" as the option provided (even though it might be wrong considering ;-) in you link. and thus losing allot of potential customers of wich most will prop never experience an DDoS attack when they read a this thread.

Yes if you are triggering allot of DDoS attacks with your content and thus need an sollution a host of the magnitude supplied might be an sollution.

thanks guys
i have come to understand that ddos is not the typical 'data' attack.
my best bet is the ultra expensive cisco guard xt, which theplanet.com uses

thanks