I don't want to sound condescending but there are numerous preventive methods that can (and should) be deployed to protect against DDOS attacks, namely a good security policy in the first place!
I'd be a more than a little annoyed at my host for prolonging this. It might cost you more in the short term, but have you considered contracting a professional network security engineer to aid your otherwise clueless host!?