Since DDOS is the equivalent of a roomful of people shouting down a single speaker the only guaranteed protective actions are not letting anyone in at all or closing down the room altogether.
Going by your avatar, Linux is in use and that has certain basic protections on the IP stack level. More can be provided with the firewall or using an IPS but ultimately, since DDOS works by sheer weight of traffic, I can't think of anything which might actively prevent it from occurring.
See if this gives you a few ideas: http://en.wikipedia.org/wiki/Denial-of-service_attack
_________________
Giraffe: a ruminant with a view.