DoS Protection Firewall - with email notifications

Let me be clear and concise: I have DDoS protection for my dedicated server - however they cannot filter small attacks. The firewall on the box can filter them. I get DoS attacks regularly. I need you to build a firewall that allows traffic on some ports - http, ssh, etc and UDP traffic on some ports for my game servers. The DoS attacks are also in UDP form and so is my gameserver traffic. I need you to create a firewall - I don't care if you use snort, barnyard, iptables - it just needs to work with logging and email. The attacks need to be filtered and dropped! This is not a simple open this port and block that port job. You actually need to put in rules and signatures to drop the DoS attacks and bad packets so there is room for the clean traffic. If you have experience with this, then only reply. If you read this whole thing, in your reply - write "I know what a (D)DoS attack is."