Many members here work in production environments and this question is for you. What are you using for DDOS prevention/protection for you public facing web servers? Open source or commercial. Checkpoint is just not cutting it and we are urgently looking for reasonable alternatives.

Any suggestions?

Edit: looks like Dragon IPS might be the ticket!