Depends on what laws you're considering. So not knowing exactly which country the server was located in or the country the police that enacted the DDoS are from it is hard to say if it's legal or not.