DNS dDos Attack!

I am sorry if this has come up before, but it seems that one of our name servers is under some sort of dDos attack. It seems to be receiving millions of queries form spoofed IPs, and it is spending all of it's time sending back icmp unreachables. It is running bind 4.31 under BSD 4.62STABLE Help! Thanks, Dan.