I was wondering if web site hosts can get charged for excessive bandwidth usage if such usage results from a DDOS attack against the site. In such situations, is there a cap on the charges, and can they be waived under certain extenuating circumstances?

If not, is the bandwidth quota protection offered in Sonic.net's member tools sufficient to prevent such charges?