General Questions

Hello,
I'm quite new to FreeBSD and have two seperate questions.  For me, I've been under a DDoS attack over the last 4 days and it is old.  I switched my web server from Merak to Apache and am wondering if it would be wiser to replace my BEFSR41 with a PFSense or M0n0wall box.  

Which is better at DDoS attacks?  

Either capable of mail spam filters?  

Merak had a feature I liked called tarpitting.  Is this available?  

Can this be used as a headless system, i.e. remote desktop?


The second question, for a friend, is he needs to have a dual WAN environment in case one goes down.  I've read and some have recommended PFSense for this - your thoughts?


Thank you for any assistance.