If you've got the budget and want actual DDoS protection/filtering, go with http://www.serverorigin.com