Well, if the griefers are just lagging the server through manipulation of certain commands, you could try this (especially note the second item in his exploit prevention list):
http://forums.alliedmods.net/showthread.php?p=841590. Also, you could try banning the DoS griefers by IP address instead of by SteamID, but I'm honestly not sure if that will prevent the Source-specific attacks.
If they are simply DoS-ing you with a huge number of packets, then that's a bit more complicated, as you'll need to see what tools your router (or the router of your hosting company) provides for preventing such an attack.
As a side note...how often does this happen (someone
actually lagging/crashing your server, not just threatening)? I have a server on my LAN, and I don't think I've ever had people lag/crash it.