You _can_protect your site against DoS attacks. Tier 1 ISPs offer DDoS protection using CiscoGuard appliances... re: http://ff.im/6fIjZ