Originally Posted by million

Because DDoS (Distributed Dinial of Service) attacks look like real user traffic so there is no way you can block the attack without blocking users. Its just not possible

Good thing is they are very expensive so they rarely last more than 3-4 days.

I've seen many hosting companies talk about DDoS protection, its just a lie they (we) use as a marketing argument. The same goes for those who claim to have "Tier 1" connections, thats another lie