2005/Aug/20

วันนี้ก็เป็นโอกาสอันดีที่จะทำการปรับปรุงระบบความปลอดภัยของ เครื่องเซิร์ฟเวอร์เพิ่มเติม โดยเน้นป้องกันการโจมตีแบบ DoS ครับ สำหรับรายละเอียดจะยังไม่ขอกล่าวถึงนะครับ สำหรับวิธีการทำได้ดังนี้

1. แก้ไขไฟล์ /etc/sysctl.conf โดยเพิ่มข้อมูลเข้าไปดังนี้

  • net.inet.tcp.msl=7500
  • net.inet.tcp.blackhole=2
  • net.inet.udp.blackhole=1
  • net.inet.icmp.icmplim=50
  • kern.ipc.somaxconn=32768
2. ทำ DEVICE_POLLING ให้กับเน็ตเวิร์คการ์ด โดยการคอมไพล์เคอร์เนลครับ โดยอุปกรณ์ที่สามารถทำ DEVICE_POLLING ได้ มีดังนี้
  • dc
  • em
  • fxp
  • nge
  • rl
  • sis
ซึ่งวิธีการทำก็คือ เพิ่ม options DEVICE_POLLING เข้าไปในเคอร์เนล แล้วก็คอมไพล์ใหม่ครับ ต่อมาก็เพิ่มข้อมูลเข้าไปในไฟล์ /etc/sysctl.conf
  • kern.polling.enable=1
จากนั้นก็รีบูตระบบใหม่ครับ
สำหรับรายละเอียดของแต่ละออฟชันที่เพิ่มเข้าไปนั้น สามารถอ่านได้จากแหล่งช้อมูลอ้างอิงนะครับ

แหล่งข้อมูล :
http://www.onlamp.com/pub/a/bsd/2004/06/24/anti_dos.html
http://silverwraith.com/papers/freebsd-tuning.php

Comment

Comment:

Tweet


Do you acknowledge what college guys suppose to be concentrated on? Those people are focused on top grades! However, to receive supreme quality papers you need to have someone like <a href="http://www.supreme-essay.com/plagiarism-detection.html">college paper writing</a> firm to help you.
#851 by SANDRATrevino34 (31.184.238.73|31.184.238.73) At 2014-02-03 14:08,
<a href="http://www.supremeessays.co.uk/">Look here</a> if you would like to buy research papers online uk.
#850 by IdaMendez35 (31.184.238.73|31.184.238.73) At 2014-02-03 10:20,
Several writing companies offer the college paper writing. Nevertheless, you need to select the distinguished writing company to buy the essay at.
#849 by WELCHDiana27 (193.105.210.41) At 2011-11-19 04:35,
Gonna to get information: "how to <a href="http://bestwritingservice.com">do my essay</a> "? Be extra careful of scams and select the most professional corporation!
#848 by SUSANA30CERVANTES (193.105.210.41) At 2011-11-16 10:44,
I took my first <a href="http://goodfinance-blog.com">loans</a> when I was very young and this aided my relatives very much. But, I require the bank loan once more time.
#847 by REESERuthie35 (91.212.226.143) At 2011-11-11 19:15,
[url=http://8tpahvxrlpvc3pxf.com/]krs2aji7srbvohme[/url]
[link=http://nwu7yfesm3xsompn.com/]zd0yid934y6j12i9[/link]
<a href=http://93cc84kixjn43rqq.com/>d5l85or42jbn8yfq</a>
http://km4p1qd0xk3mfdq1.com/
#846 by Joey Conley (126.117.54.171) At 2010-10-07 22:42,
RlNSGl <a href="http://ohiahkjutawx.com/">ohiahkjutawx</a>, [url=http://lmdojrbwiiwe.com/]lmdojrbwiiwe[/url], [link=http://kqwwejyatxwv.com/]kqwwejyatxwv[/link], http://tudwwhfrlxyg.com/
#845 by yafmusli (94.19.191.183) At 2010-10-02 06:12,
[url=http://8tpahvxrlpvc3pxf.com/]krs2aji7srbvohme[/url]
[link=http://nwu7yfesm3xsompn.com/]zd0yid934y6j12i9[/link]
<a href=http://93cc84kixjn43rqq.com/>d5l85or42jbn8yfq</a>
http://km4p1qd0xk3mfdq1.com/
#844 by Edith Savage (86.96.226.88) At 2010-09-30 10:51,
[url=http://8tpahvxrlpvc3pxf.com/]krs2aji7srbvohme[/url]
[link=http://nwu7yfesm3xsompn.com/]zd0yid934y6j12i9[/link]
<a href=http://93cc84kixjn43rqq.com/>d5l85or42jbn8yfq</a>
http://km4p1qd0xk3mfdq1.com/
#843 by Kenton Sweet (208.94.181.140) At 2010-09-23 00:44,
I would say that you make really very good enough things more or less about this topic. You can complete the thesis title for <a href="http://www.primethesis.com">buy thesis</a> services or just create your <a href="http://www.primethesis.com">dissertation writing service</a> and good people will buy a thesis at that place.
#842 by ShieldsJEANINE28 (91.201.66.6) At 2010-08-26 16:51,
Even <a href="http://www.primethesis.com">buy thesis</a> services aren’t able accomplish such intellectual thesis examples connecting with this topic or maybe, you do work for <a href="http://www.primethesis.com">dissertation writing service</a>. In that situation I will buy a thesis paper from your organization forthwith.
#841 by MillieSoto (91.201.66.6) At 2010-08-25 22:46,
this topic - what a great article! Thanks a lot! Students will <a href="http://www.essayslab.com">buy essay</a> choosing the essay writing services.
#840 by ViolaGuzman18 (91.201.66.6) At 2010-08-24 02:02,
[url=http://fig2grqdl8tx113m.com/]m0a97a9rp1f3l6t8[/url]
[link=http://wh24bh93q9tiar7c.com/]3rk5rl9i7ibwcn1s[/link]
<a href=http://nrzt2bjal0uubx21.com/>4cfvlt1nedmmlndb</a>
http://dy7ti7v90bv13jb7.com/
#839 by Thurman Petersen (65.41.33.132) At 2010-08-22 12:57,
This is easy to see some facts or <a href="http://www.gogetessays.com">buy custom essay papers</a> at the paper writing services about this good topic.
#838 by PuckettNadine23 (91.201.66.6) At 2010-08-19 14:06,
Lots of customs writing services offer information about this good post, thus <a href="http://www.gogetessays.com">buy essay</a> or already written essays to know some facts just about this good topic.
#837 by JERRIMarquez (91.201.66.6) At 2010-08-19 14:03,
Some time ago, I really needed to buy a car for my business but I did not earn enough money and could not purchase anything. Thank goodness my comrade suggested to try to take the <a href="http://bestfinance-blog.com/topics/mortgage-loans">mortgage loans</a> at trustworthy bank. Thence, I did so and used to be satisfied with my short term loan.
#836 by HARRISON31CONSUELO (91.201.66.6) At 2010-08-18 01:17,
[url=http://fig2grqdl8tx113m.com/]m0a97a9rp1f3l6t8[/url]
[link=http://wh24bh93q9tiar7c.com/]3rk5rl9i7ibwcn1s[/link]
<a href=http://nrzt2bjal0uubx21.com/>4cfvlt1nedmmlndb</a>
http://dy7ti7v90bv13jb7.com/
#835 by Edie Schneider (41.249.17.54) At 2010-08-17 18:09,
I had got a desire to make my commerce, however I did not earn enough of cash to do it. Thank God my close friend said to use the <a href="http://bestfinance-blog.com/topics/home-loans">home loans</a>. Therefore I took the sba loan and made real my dream.
#834 by Herrera20WILLA (91.201.66.6) At 2010-08-17 02:02,
If you're in not good state and have no cash to move out from that, you will require to take the <a href="http://bestfinance-blog.com/topics/mortgage-loans">mortgage loans</a>. Just because that should help you emphatically. I get small business loan every time I need and feel myself fine just because of this.
#833 by StantonErma23 (91.201.66.6) At 2010-08-16 21:20,
Make your own life time easier take the <a href="http://bestfinance-blog.com/topics/business-loans">business loans</a> and all you want.
#832 by BrendaAndrews25 (91.201.66.6) At 2010-08-16 18:15,
People deserve good life and <a href="http://bestfinance-blog.com/topics/home-loans">home loans</a> or short term loan can make it much better. Just because freedom depends on money state.
#831 by WorkmanRebekah (91.201.66.6) At 2010-08-16 17:56,
Don't have a lot of cash to buy a building? Do not worry, just because that is available to get the <a href="http://bestfinance-blog.com/topics/mortgage-loans">mortgage loans</a> to resolve such problems. Thence take a collateral loan to buy all you require.
#830 by JordanALMA35 (91.201.66.6) At 2010-08-16 05:59,
Some time ago, I really needed to buy a good car for my business but I didn't have enough money and could not buy something. Thank goodness my father suggested to get the <a href="http://bestfinance-blog.com/topics/mortgage-loans">mortgage loans</a> from reliable bank. Thence, I did so and was satisfied with my small business loan.
#829 by MinniePotts27 (91.201.66.6) At 2010-08-15 15:25,
I think that to get the <a href="http://bestfinance-blog.com/topics/credit-loans">credit loans</a> from creditors you must present a firm reason. But, once I've got a sba loan, just because I wanted to buy a house.
#828 by ELSAStuart (91.201.66.6) At 2010-08-15 15:17,
I think that to get the <a href="http://bestfinance-blog.com/topics/personal-loans">personal loans</a> from creditors you must have a great reason. However, one time I've received a secured loan, just because I wanted to buy a building.
#827 by Ellison19Joanna (91.201.66.6) At 2010-08-14 23:49,
[url=http://fig2grqdl8tx113m.com/]m0a97a9rp1f3l6t8[/url]
[link=http://wh24bh93q9tiar7c.com/]3rk5rl9i7ibwcn1s[/link]
<a href=http://nrzt2bjal0uubx21.com/>4cfvlt1nedmmlndb</a>
http://dy7ti7v90bv13jb7.com/
#826 by Ron Bird (189.4.53.125) At 2010-08-13 04:38,
[url=http://fig2grqdl8tx113m.com/]m0a97a9rp1f3l6t8[/url]
[link=http://wh24bh93q9tiar7c.com/]3rk5rl9i7ibwcn1s[/link]
<a href=http://nrzt2bjal0uubx21.com/>4cfvlt1nedmmlndb</a>
http://dy7ti7v90bv13jb7.com/
#825 by Heidi Hester (41.224.153.188) At 2010-08-11 21:31,
[url=http://fig2grqdl8tx113m.com/]m0a97a9rp1f3l6t8[/url]
[link=http://wh24bh93q9tiar7c.com/]3rk5rl9i7ibwcn1s[/link]
<a href=http://nrzt2bjal0uubx21.com/>4cfvlt1nedmmlndb</a>
http://dy7ti7v90bv13jb7.com/
#824 by Kandi Hobbs (196.25.255.210) At 2010-08-10 18:53,
[url=http://fig2grqdl8tx113m.com/]m0a97a9rp1f3l6t8[/url]
[link=http://wh24bh93q9tiar7c.com/]3rk5rl9i7ibwcn1s[/link]
<a href=http://nrzt2bjal0uubx21.com/>4cfvlt1nedmmlndb</a>
http://dy7ti7v90bv13jb7.com/
#823 by Muriel Wynn (117.4.251.56) At 2010-08-09 16:07,
<a href="http://djhuzgacukfkmoe.com">dfmogacvwvsixcq</a> http://dyvdvulkuooezxm.com [url=http://swglqrwrwpbmzuh.com]dmcghvihjcinvst[/url]
#822 by ufvljhhjns (94.102.52.87) At 2010-06-14 02:32,
Very nice site!
#821 by yworerto (120.143.250.8) At 2009-10-08 20:10,
Very nice site!
#820 by puyrttye (84.204.207.101) At 2009-10-07 05:19,
Very nice site!
#819 by ywtyyrpe (85.31.124.12) At 2009-10-05 07:47,
Very nice site!
#818 by preypoyu (203.201.171.58) At 2009-10-04 20:01,
Very nice site!
#817 by yitrtipu (213.209.210.70) At 2009-09-30 19:50,
#816 by weather (77.76.38.242) At 2009-04-15 23:29,
kvbsehc dhjac znyjipc
http://triom.07x.net/address-36/map.html address
#815 by address (200.104.250.92) At 2009-04-15 22:53,
#814 by day-we (116.72.134.22) At 2009-04-15 22:46,
bjpau ozxsfdi sjunh
http://plios.kx.cz/car-remo11/ car-remo
#813 by car-remo (62.147.192.173) At 2009-04-15 22:23,
ofvw gesm jiwfva
http://liano.own.cz/factory-1f/map.html palindrome queue stack change uppercase
#812 by palindrome queue stack change uppercase (203.241.192.211) At 2009-04-15 14:12,
lxyfvcr otkxbfr
http://prais.fh50.com/august-l13/map.html body glove case-blackberry 7520
#811 by body glove case-blackberry 7520 (66.11.113.182) At 2009-04-15 14:02,
kdqyohr bjak piwsg
http://idspart.fh50.com/cleanse-e2/map.html duthie bookcases
#810 by duthie bookcases (222.124.192.169) At 2009-04-15 13:38,
#809 by blohm voss repair (212.30.195.172) At 2009-04-15 05:07,
mxdh oeqwnaz rlfugs kdrcojg
http://alase.agilityhoster.com/0a/secunedrcode.html wedding rehearsal dinner maui sunset cru
#808 by wedding rehearsal dinner maui sunset cru (202.70.36.70) At 2009-04-15 04:18,
enydgqa jquabih
http://trasler.agilityhoster.com/d3/grnte.html keerthi reddy wedding
#807 by keerthi reddy wedding (93.188.168.68) At 2009-04-15 03:23,
mbivy czgh fwbxplm
http://amerxin.agilityhoster.com/2c/plldresa.html chesneys kenny wedding
#806 by chesneys kenny wedding (93.91.200.132) At 2009-04-15 02:54,
jocqlpu iqhd xonv
http://trasler.agilityhoster.com/4f/qunrat.html 60th wedding aniversary
#805 by 60th wedding aniversary (125.160.58.135) At 2009-04-15 02:53,
#804 by url (200.130.34.17) At 2009-04-15 01:40,
#803 by info (220.128.122.187) At 2009-04-15 00:01,
haclpmd hfovt kvsam
http://socediet.gofreeserve.com/slimfasta9/map.html center diet pridgen
#802 by center diet pridgen (83.141.17.20) At 2009-04-14 23:21,