Sounds like they need Microsoft's ISA server. Its a software firewall in which you can configure your own custom packet filters. It costs about $900 bucks. Install it, then make a $250 support call to MS and they'll tell you how you need to configure it for that particular DOS and DOS attacks in general. They have to be running MS servers, tho. If its LINUX they're SOL on the DOS.