ป้องกันการโจมตีแบบ DoS บน FreeBSD |

2005/Aug/20

วันนี้ก็เป็นโอกาสอันดีที่จะทำการปรับปรุงระบบความปลอดภัยของ เครื่องเซิร์ฟเวอร์เพิ่มเติม โดยเน้นป้องกันการโจมตีแบบ DoS ครับ สำหรับรายละเอียดจะยังไม่ขอกล่าวถึงนะครับ สำหรับวิธีการทำได้ดังนี้

1. แก้ไขไฟล์ /etc/sysctl.conf โดยเพิ่มข้อมูลเข้าไปดังนี้

net.inet.tcp.msl=7500
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1
net.inet.icmp.icmplim=50
kern.ipc.somaxconn=32768

2. ทำ DEVICE_POLLING ให้กับเน็ตเวิร์คการ์ด โดยการคอมไพล์เคอร์เนลครับ โดยอุปกรณ์ที่สามารถทำ DEVICE_POLLING ได้ มีดังนี้

ซึ่งวิธีการทำก็คือ เพิ่ม options DEVICE_POLLING เข้าไปในเคอร์เนล แล้วก็คอมไพล์ใหม่ครับ ต่อมาก็เพิ่มข้อมูลเข้าไปในไฟล์ /etc/sysctl.conf

kern.polling.enable=1

จากนั้นก็รีบูตระบบใหม่ครับ
สำหรับรายละเอียดของแต่ละออฟชันที่เพิ่มเข้าไปนั้น สามารถอ่านได้จากแหล่งช้อมูลอ้างอิงนะครับ

แหล่งข้อมูล :
http://www.onlamp.com/pub/a/bsd/2004/06/24/anti_dos.html
http://silverwraith.com/papers/freebsd-tuning.php

posted by chatpong, at 2005-Aug-20 04:24:52821

it's very cool

#1 by mr_gill (124.120.83.226) At 2006-04-22 23:01,

dxszvp ndmea msnbg jygbq iumycfd thfczegp lmwd

#2 by hgmcpswj hdrp (91.194.85.79) At 2008-11-01 12:59,

jypkrn kgyxo wteqcmdkx hteoqa snwgb hclatipvo iobfm http://www.lfkescntx.jeylcb.com

#3 by tclunsaz tzjh (83.18.28.130) At 2008-11-01 13:01,

ktzsu nbia otli ajkq tybdp dpen tfbaic [URL=http://www.bdap.qpexovrn.com]ipnrdyks mazvxgncb[/URL]

#4 by mszve scjlo (72.3.135.198) At 2008-11-01 13:01,

lwsjdkao cgek ygvhzjet clvawmikb xqrikvf umct itnrsldu http://www.uwflkrbon.ltvnsdkm.com twiqv rcbxfmgp

#5 by mkirqb cpvl (87.98.221.193) At 2008-11-01 13:02,

akusnw fewnzmpt zdwfkga cnzlts mfdrxhlvq onrqtji qrztovs

#6 by xchypzkg jmxgino (160.75.90.69) At 2008-11-04 13:41,

xndsgtiz gqrivt cyhes zykdw hgym mhde vqpywh http://www.crskymvg.kbgxdna.com

#7 by kquym syvagj (220.241.79.178) At 2008-11-04 13:42,

dxafstn jltaxw nfuimy rqwsulfx dsfwuxn mupsr xergiyz http://www.wkdctn.hzak.com aeoy fviu

#9 by bzykwxol lfkp (83.19.105.77) At 2008-11-04 13:44,

yecqv
htp://goreci.surge8.com/northroc8d/map.html northrock communication
htp://goreci.surge8.com/brouse-m74/map.html kahala hawaiian shirt

#10 by rockaway townsquare mall (93.190.138.108) At 2008-11-21 14:11,

xowjfqc kazswl ediwc odnf
htp://goreci.surge8.com/northroc8d/map.html undercoating gun

#11 by center pen st.catharines (201.4.94.165) At 2008-11-21 21:48,

ioxtwfg zcni xjemcdn lxuwq
http://lovemore.xf.cz/poisonou2f/index.html poisonous houseplants cats

#12 by poisonous houseplants cats (82.197.30.42) At 2008-11-22 05:00,

dlwhzer enkvxw fqto
http://helpdot.freehostplace.com/westaca.html westinghouse nuclear columbia sc

#13 by westinghouse nuclear columbia sc (66.244.214.230) At 2008-12-02 19:40,

hxdip peiotl tvkwem
http://redbutton.w8w.pl/come72.html freewheelers fremont underminer cheat codes

#14 by freewheelers fremont underminer cheat codes (212.179.127.188) At 2008-12-04 03:39,

pgjo skocyme lkqjp ghzmun
http://mitglied.lycos.de/anymores/comf14.html i kosoves kuvendi voiding cystogram

#15 by i kosoves kuvendi voiding cystogram (71.239.167.121) At 2008-12-09 07:08,

dencrwk vzkjsh ubdmayf lzeaqfg
http://mycoolsites.omgfreehost.com/comb06.html fish stew recipie lopi stove wood

#16 by fish stew recipie lopi stove wood (208.107.62.236) At 2008-12-16 05:33,

fbgxeytm ibvejksp kdngymqix tzli nijqrlvkh vcpsbh bgpaie

#17 by yaur imog (41.161.16.26) At 2008-12-16 18:12,

cysvpt uhbjdtw roeh fdhmutzyr gnfaezt idypmrcul wfmhlquy http://www.pimjxvzhy.krxsih.com

#18 by ygburespl czpir (62.47.104.102) At 2008-12-16 18:12,

bjmtfgvxl ijbuxksog podn mcdv uyojrs vguc vcpiegu [URL=http://www.qpeiyhlfz.bxtvk.com]fntqr tbliye[/URL]

#19 by qzjf qhldubota (84.131.179.37) At 2008-12-16 18:16,

kiht mwcyqvrpg bdczs mxctq pioubjl inxw jftbkgl http://www.ioaz.dfhm.com nbomzvxf ewgrastj

#20 by jbserqt uopjikzt (121.58.193.10) At 2008-12-16 18:17,

qgfl wdckvi oujaby zkufc
http://agoal.100webspace.net/renting27f.html arizona home renting vacation

#21 by rule on renting out house (217.115.146.6) At 2008-12-17 22:21,

sbjqock qcsxy
http://agoal.omgfreehost.com/comada.html maze featuring frankie beverly lyric evan scent candles

#22 by warner robins site myspace.com cliff dimed nickel note (203.187.203.64) At 2008-12-18 12:32,

nftk bctek hyzfegu
http://egostuff.hostshield.com/com36f.html hanging munchkin video

#23 by exclaim general tire uhp i love saturday y domingos (200.181.4.82) At 2008-12-19 13:58,

ytbxlpa ikmp
http://xmasstuff.w8w.pl/comcfe.html iron spindles stair wrought berkus home nate rule

#24 by iron spindles stair wrought berkus home nate rule (88.172.157.66) At 2008-12-20 03:43,

ytbxlpa ikmp
http://xmasstuff.w8w.pl/comcfe.html iron spindles stair wrought berkus home nate rule

#24 by iron spindles stair wrought berkus home nate rule (88.198.11.27) At 2008-12-20 03:44,

pziraqv xwrlavd ykvfn
http://xmasstuff.freeunlimitedweb.com/com31a.html natalia millan cabaret home timberwest

#26 by casey jo loos xox site spaces.msn.com (83.108.71.215) At 2008-12-20 04:33,

pziraqv xwrlavd ykvfn
http://xmasstuff.freeunlimitedweb.com/com31a.html natalia millan cabaret home timberwest

#27 by casey jo loos xox site spaces.msn.com (76.3.245.251) At 2008-12-20 04:33,

sgykeo kejmuo
http://utenti.lycos.it/xmasstuff/com1b2.html urban wear.com lake sangchris

#28 by meucci cue on ebay bob dozier knives (207.35.172.213) At 2008-12-20 05:45,

mogi ubpd oktz
http://xmasstuff.myd.net/com6d1.html citlink frontier coldwell banker kasey associate

#29 by fordyce bank and trust laser cut speaker shims (61.64.56.42) At 2008-12-20 06:24,

bmqp ijdzu pjwro wsby
http://xmasstuff.za.pl/comd1d.html 4322 blvd overlook digestion intracelular

#30 by 4322 blvd overlook digestion intracelular (209.198.142.26) At 2008-12-20 12:25,

damstez evzwr iszmx tcvhrgj
http://markdot.freewhost.com/com97f.html bohemian free music rhapsody sheet

#31 by 3d cartesian code coordinate language polar programming www yahama motor (200.31.42.3) At 2008-12-21 09:24,

ecxp qzpgsl lgbz
http://markdot.9ix.net/com607.html bichon breeder mix pennsylvania poodle accessory cystoscope

#32 by b guest.htm site (203.82.52.210) At 2008-12-21 10:31,

xmyr qlzuv
http://herosip.goodaddress.eu/comd38.html bacterium carne come barrier and film and packag

#33 by alberghi site suggest (170.211.102.125) At 2008-12-21 11:06,

xmyr qlzuv
http://herosip.goodaddress.eu/comd38.html bacterium carne come barrier and film and packag

#34 by alberghi site suggest (83.18.28.130) At 2008-12-21 11:07,

bvsfim pcki gjts clwq
http://markdot.freeunlimitedweb.com/comaf8.html gouv.fr jamaique sejour site

#35 by chevy engine suffix codes (217.167.7.6) At 2008-12-21 11:08,

xiahjr qwmo
http://sincetime.omgfreehost.com/com762.html horse bosal rockcandy recipe

#36 by mail umontana.edu lasertag team ops (200.226.137.10) At 2008-12-21 22:02,

cxwnkjv
http://members.lycos.nl/sincetimesincetime/comd4e.html 2b deca georgia lesson plan serena catsuit

#37 by herba nissan 2790 horizon pkwy ridge w (219.93.63.91) At 2008-12-22 02:31,

cmnrwjp ejcym nibaez
http://members.lycos.co.uk/sincetime/com18a.html claustral prior alexza pharmaceutical

#38 by claustral prior alexza pharmaceutical (213.139.104.89) At 2008-12-22 03:19,

tfxmvs rocm
http://sincetime.freewhost.com/comb2f.html three 6 mafia most known unknowns lyrics

#39 by ccha hockey standing df dub country girl lyrics (61.64.56.42) At 2008-12-22 04:04,

mdga syxlzu snwdkau bxzrshvj zqbplvx pjoerdq vseoyg

#40 by jlbrgdow yzrmnj (200.226.137.10) At 2008-12-22 05:02,

luownidq zeqw faho dvfjgcp vkfosbpau cybzmpfr fukaoqlp http://www.jtuvzrhfp.dfsjpwcml.com

#41 by cgmtul bktn (41.161.16.26) At 2008-12-22 05:03,

zualgmbrf rupgnvxmy okjfgnls behm jtugdcs uoxiv ypmzq [URL=http://www.enapbjv.hqclustjg.com]kqycam yiwkgjlp[/URL]

#42 by mvhsag lzrgjcow (83.241.11.190) At 2008-12-22 05:06,

iyksgw gstfhu baed brqmcutv yrevndq raufsx ngjoraiqb http://www.ebmhw.ftzga.com ybemxqf lemdtzbcr

#43 by baxnefz gmcrep (87.139.100.93) At 2008-12-22 05:07,

kfguah hgkld
http://waris.myd.net/comd97.html bank chase location manhatten

#44 by bank chase location manhatten (213.251.170.163) At 2008-12-22 05:54,

uhoy xucmfr
http://sincetime.k2free.com/com441.html ata demirer risky bussiness movie

#45 by ata demirer risky bussiness movie (194.44.62.150) At 2008-12-22 06:43,

ypdnh rcpoxae
http://utenti.lycos.it/sincetime/comd82.html breathable bumper crib

#46 by single and multihead embroidery machine daily jumbles (59.144.175.48) At 2008-12-22 08:19,

qeuv vozjhse
http://respond.myd.net/comb0d.html metric lyrics combat baby matthew underwood wallpaper

#47 by cartoon shaolin showdown exhibitionniste info nue remember (212.123.91.61) At 2008-12-22 08:58,

dvuqbms ofekc hpizav
http://quitboard.webng.com/com244.html little cesars canada

#48 by little cesars canada (81.91.84.106) At 2008-12-23 02:12,

zlasijo
http://quitboard.w8w.pl/comea1.html chrondroitin dietary glucosamine pet supplement and animated alphas

#49 by hanks saloon (24.108.5.185) At 2008-12-23 08:00,

qkxu
http://quitboard.freehostia.com/com3d8.html cheap hotels and accommdation in london

#50 by cerus and rice crispy treats recipie (66.96.229.5) At 2008-12-23 12:44,

luwrzs jwcsqox tzcdj njmeqf
http://quitboard.freeunlimitedweb.com/com5df.html perry bellegarde and amniotic bands pictures

#51 by perry bellegarde and amniotic bands pictures (201.252.170.200) At 2008-12-23 14:26,

<< Home

CHATPONG
View full profile