I've handled one this week. Make sure that you have a good firewall in place. I used a neat script from http://deflate.medialayer.com which runs as a cron job every minute during the attack and auto-blocks any IPs with excessive numbers of connections. It fought off the attack pretty well. Moving forward you may wish to ask your host for DDoS protection 'in front' of your server so it takes the strain instead.