Protecting against denial-of-service generally requires isolating the source of the malicious traffic and ignoring any further requests from that source. Modern firewalls can do this very effectively, providing the attack is launched from narrow range of IP addresses.