Wait until he is tired of paying for the dos service. First if he is stupid enough and does it from his house you get his ip and he gets arrested eventually. Still it generally is not possible to do dos from your house. Only stupid script kiddies think you can actually do a DoS attack from your house. The upload bandwidth on almost all internet connection is much less than the download bandwidth of the person you are attacking. You will exceed the upload bandwidth way before you kill the download on your target. All you accomplish is DoS on yourself because you have used all the upload bandwidth.
There really is no way for a home user to stop a determined individual. If he is will to use his credit card to attack you you...