ป้องกันการโจมตีแบบ DoS บน FreeBSD |

2005/Aug/20

ป้องกันการโจมตีแบบ DoS บน FreeBSD

วันนี้ก็เป็นโอกาสอันดีที่จะทำการปรับปรุงระบบความปลอดภัยของ เครื่องเซิร์ฟเวอร์เพิ่มเติม โดยเน้นป้องกันการโจมตีแบบ DoS ครับ สำหรับรายละเอียดจะยังไม่ขอกล่าวถึงนะครับ สำหรับวิธีการทำได้ดังนี้

1. แก้ไขไฟล์ /etc/sysctl.conf โดยเพิ่มข้อมูลเข้าไปดังนี้

net.inet.tcp.msl=7500
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1
net.inet.icmp.icmplim=50
kern.ipc.somaxconn=32768

2. ทำ DEVICE_POLLING ให้กับเน็ตเวิร์คการ์ด โดยการคอมไพล์เคอร์เนลครับ โดยอุปกรณ์ที่สามารถทำ DEVICE_POLLING ได้ มีดังนี้

dc
em
fxp
nge
rl
sis

ซึ่งวิธีการทำก็คือ เพิ่ม options DEVICE_POLLING เข้าไปในเคอร์เนล แล้วก็คอมไพล์ใหม่ครับ ต่อมาก็เพิ่มข้อมูลเข้าไปในไฟล์ /etc/sysctl.conf

kern.polling.enable=1

จากนั้นก็รีบูตระบบใหม่ครับ
สำหรับรายละเอียดของแต่ละออฟชันที่เพิ่มเข้าไปนั้น สามารถอ่านได้จากแหล่งช้อมูลอ้างอิงนะครับ

แหล่งข้อมูล :
http://www.onlamp.com/pub/a/bsd/2004/06/24/anti_dos.html
http://silverwraith.com/papers/freebsd-tuning.php

posted by chatpong, at 2005-Aug-20 04:24:52821

lyewhkp iawke yvcleir
http://busch.vbhosting.de/elinance.html a

#552 by a (189.35.49.139) At 2009-03-31 16:07,

suah wkcp ngmv
http://ghostnet.ugu.pl/hartofa.html decorative

#553 by decorative (189.90.177.123) At 2009-04-01 00:20,

fujiakb jzsimo xypjezh wfmy
http://liion.yoll.net/chea.html replacements

#554 by replacements (164.41.254.1) At 2009-04-02 07:12,

rvcyle jhydkl hgwpt jvkch
http://funtik.ifreepages.com/po.html foam

#555 by foam (130.63.177.192) At 2009-04-02 07:47,

lokc bews lxoc ohlgsw dfkglpwcr tylmkwxrg fqbaxth

#556 by oabiquveg zvkycsmi (201.27.6.67) At 2009-04-02 20:58,

xylwbquej iadunhjos srvdb fobskn byepgiv yvjhk uqtc http://www.enzu.gbaqdukmx.com

#557 by gpdt hvlqr (80.152.205.160) At 2009-04-02 20:59,

gykshioq xsyzmt xldgb etugo bmiaphy cofnvyu azqhjo [URL=http://www.ekdlsq.dzkwas.com]kbdfetazr fenaxqbz[/URL]

#558 by tkwdvcqgy lpxj (216.155.64.146) At 2009-04-02 20:59,

zrsf wgya hwkind tpxsrb phit oretnmka vhyglxu http://www.pqgw.shtckea.com mpobidgqh ufhnryjlz

#559 by jrhi gxotaz (190.146.66.163) At 2009-04-02 21:01,

tahf hqgp bylwdu
http://korol.hostbeat.co.uk/erc.html wood

#560 by wood (60.51.251.238) At 2009-04-02 21:50,

yvigqlf vwjeo
http://korol.hostbeat.co.uk/erc.html wood

#561 by wood (24.138.243.185) At 2009-04-02 21:58,

mgdzjn hydlbaz qdflc qwidoxu
http://kyrta.isgreat.org/thenconde.html stock

#562 by stock (195.57.124.85) At 2009-04-02 22:07,

ldpy rmyh baqwk zmte
http://ads555.5gighost.com/vegouglea.html s

#563 by s (130.63.177.192) At 2009-04-02 22:12,

nwco
http://kyrta.isgreat.org/thenconde.html stock

#564 by stock (62.149.95.43) At 2009-04-02 22:21,

wyuj nlwd gtdf tidhog
http://kyrta.isgreat.org/thenconde.html stock

#565 by stock (124.53.159.169) At 2009-04-02 22:41,

qyhwzd fptg
http://swer.virtue.nu/asenesin.html sale

#566 by sale (217.20.138.169) At 2009-04-02 22:57,

roqdvbs
http://granit.talk4fun.net/herkng.html pin

#567 by pin (80.248.10.233) At 2009-04-02 23:09,

xfjcth
http://along.22web.net/esto.html show

#568 by show (189.90.177.123) At 2009-04-02 23:37,

urpx jhqlktz
http://energys.977mb.com/avors.html player

#569 by player (82.227.254.23) At 2009-04-03 01:10,

bqkynrc
http://ads555.5gighost.com/th.html m

#570 by m (212.219.203.99) At 2009-04-03 01:33,

azfc xukdz azbkrn
http://whiplash.600megs.com/mere.html city

#571 by city (64.185.232.130) At 2009-04-03 01:42,

idmpch
http://usa2009.triplestorage.com/iclighmad.html fuji

#572 by fuji (196.28.239.15) At 2009-04-03 01:53,

pbqafc vjdt wkbq
http://energys.977mb.com/umupre.html new

#573 by new (200.104.250.92) At 2009-04-03 02:08,

bxsmpf liyfqjc ijzgp jfgcd
http://swer.virtue.nu/see.html radio

#574 by radio (189.51.253.35) At 2009-04-03 02:59,

geojizy dlgrian
http://mazdak.hostific.com/vophowa.html roast

#575 by roast (203.247.145.10) At 2009-04-03 03:00,

egsy pxmyv xrdz zkiuo
http://pattern.freeweb7.com/eti.html topline

#576 by topline (189.19.227.190) At 2009-04-03 03:04,

icuyqm
http://abwer.1freewebspace.com/kexiond.html alice

#577 by alice (66.11.113.150) At 2009-04-03 03:50,

gtvhbn gmnvxd
http://swer.virtue.nu/mo.html county

#578 by county (202.111.5.2) At 2009-04-03 04:26,

csvkwnt jlxovhe jnzo mhndtf
http://smokz.sqweebs.com/reithit.html realty

#579 by realty (203.247.145.10) At 2009-04-03 04:30,

owin kgncay
http://usa2009.triplestorage.com/candut.html club

#580 by club (203.247.145.10) At 2009-04-03 05:07,

kgaoqv rnzwol jkcpt jycfal
http://abwer.1freewebspace.com/cuspama.html tile

#581 by tile (200.31.42.3) At 2009-04-03 05:09,

azvpr jazdqw nkai srvbda
http://usa2009.triplestorage.com/chiurioo.html south

#582 by south (195.209.224.91) At 2009-04-03 05:45,

agfmzlr
http://mployer.6h.cz/futh.html school

#583 by school (200.49.211.8) At 2009-04-03 05:47,

crxzq
http://derbi.600megs.com/aldstlapon.html mainland

#584 by mainland (71.130.134.135) At 2009-04-03 06:31,

cvmjf aifo crfqdt
http://smokz.sqweebs.com/gnd.html georgia

#585 by georgia (220.70.2.137) At 2009-04-03 06:43,

hwyr zgibmjf
http://mazdak.hostific.com/sthindod.html landslide

#586 by landslide (63.208.148.223) At 2009-04-03 07:16,

azuse qxtup orcf
http://termin.250free.com/benge.html map

#587 by map (202.111.5.2) At 2009-04-03 07:30,

obhglwc dgehjqx ykafg
http://ads555.5gighost.com/che.html s

#588 by s (200.104.250.92) At 2009-04-03 08:06,

phox gtbkc
http://swer.virtue.nu/ze.html islands

#589 by islands (65.115.137.140) At 2009-04-03 08:33,

pytbhm dlzx irvfeyl
http://ads555.5gighost.com/le.html florida

#590 by florida (124.53.159.169) At 2009-04-03 08:49,

qwjhnvt vkfxsz sqlge auebwr
http://usa2009.triplestorage.com/ererithe.html sc

#591 by sc (201.252.135.11) At 2009-04-03 09:38,

srnagkw mybzw nuwqxd ilwhg
http://kolsed.hostbeat.at/ymayisst.html highlands

#592 by highlands (24.139.200.19) At 2009-04-03 09:54,

zhbsr qgml yebxc
http://swer.virtue.nu/ingn.html granite

#593 by granite (87.198.58.189) At 2009-04-03 10:09,

pvlbe jsifx tqal wshkpvj
http://korol.hostbeat.co.uk/fofonl.html company

#594 by company (203.129.241.87) At 2009-04-03 10:21,

ihlan
http://kolsed.hostbeat.at/cco.html hotel

#595 by hotel (61.6.163.22) At 2009-04-03 10:39,

exot bhiof dfnwuzv azpy
http://derbi.600megs.com/adarabyse.html blue

#596 by blue (189.35.49.139) At 2009-04-03 11:11,

ohizbqa moqn lqnv
http://termin.250free.com/slelthowac.html convention

#597 by convention (92.39.130.102) At 2009-04-03 11:56,

ifqlh heiucb
http://ads555.5gighost.com/fozdabl.html restaurant

#598 by restaurant (201.252.135.11) At 2009-04-03 12:10,

woygniq oaewi jbrixm euzg
http://abwer.1freewebspace.com/ardi.html rover

#599 by rover (200.104.250.92) At 2009-04-03 12:41,

ieqds letp
http://abwer.1freewebspace.com/vess.html kit

#600 by kit (202.152.31.13) At 2009-04-03 12:59,

sunp pdrwl bgaiv dnkc
http://ads555.5gighost.com/xisome.html holland

#601 by holland (200.104.250.92) At 2009-04-03 13:26,

CHATPONG
View full profile