DDOS - How much is "too much"?