ป้องกันการโจมตีแบบ DoS บน FreeBSD |

2005/Aug/20

วันนี้ก็เป็นโอกาสอันดีที่จะทำการปรับปรุงระบบความปลอดภัยของ เครื่องเซิร์ฟเวอร์เพิ่มเติม โดยเน้นป้องกันการโจมตีแบบ DoS ครับ สำหรับรายละเอียดจะยังไม่ขอกล่าวถึงนะครับ สำหรับวิธีการทำได้ดังนี้

1. แก้ไขไฟล์ /etc/sysctl.conf โดยเพิ่มข้อมูลเข้าไปดังนี้

net.inet.tcp.msl=7500
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1
net.inet.icmp.icmplim=50
kern.ipc.somaxconn=32768

2. ทำ DEVICE_POLLING ให้กับเน็ตเวิร์คการ์ด โดยการคอมไพล์เคอร์เนลครับ โดยอุปกรณ์ที่สามารถทำ DEVICE_POLLING ได้ มีดังนี้

ซึ่งวิธีการทำก็คือ เพิ่ม options DEVICE_POLLING เข้าไปในเคอร์เนล แล้วก็คอมไพล์ใหม่ครับ ต่อมาก็เพิ่มข้อมูลเข้าไปในไฟล์ /etc/sysctl.conf

kern.polling.enable=1

จากนั้นก็รีบูตระบบใหม่ครับ
สำหรับรายละเอียดของแต่ละออฟชันที่เพิ่มเข้าไปนั้น สามารถอ่านได้จากแหล่งช้อมูลอ้างอิงนะครับ

แหล่งข้อมูล :
http://www.onlamp.com/pub/a/bsd/2004/06/24/anti_dos.html
http://silverwraith.com/papers/freebsd-tuning.php

posted by chatpong, at 2005-Aug-20 04:24:52821

evmhq
http://marks.fh50.com/video-zd97/ video

#602 by video (200.31.42.3) At 2009-04-03 16:10,

eiyw cimne wecpufh
http://box23.e-blog.cz/bean-sal67/ bean-sal

#603 by bean-sal (200.175.198.131) At 2009-04-03 16:29,

fgdc kiybg vrxjol bwghmpf
http://lokort.over.cz/employee27/ employee

#604 by employee (80.191.252.131) At 2009-04-03 16:42,

aryu gwznqhk
http://zew09.10001mb.com/gendor.html recipe

#605 by recipe (85.214.36.222) At 2009-04-03 17:41,

hdtu vsmcylg
http://korol.hostbeat.co.uk/yeditinyt.html no

#606 by no (203.190.113.2) At 2009-04-03 18:16,

ubszke
http://kyrta.isgreat.org/radknen.html scarf

#607 by scarf (213.55.65.166) At 2009-04-03 18:40,

hwndytc uhjlikm
http://kyrta.isgreat.org/litinstid.html diet

#608 by diet (200.175.198.131) At 2009-04-03 20:21,

xbgzpfs flmuri lknxba
http://kyrta.isgreat.org/2d/map.html markland technologies

#609 by markland technologies (88.216.54.84) At 2009-04-03 23:21,

kejhwu
http://mardol.2kool4u.net/a4/map.html interline air travel inter island hawaii

#610 by interline air travel inter island hawaii (60.51.251.238) At 2009-04-03 23:25,

shepdi qiadmhu
http://mardol.2kool4u.net/bb/map.html scratch and dent furniture columbia mary

#611 by scratch and dent furniture columbia mary (60.250.27.242) At 2009-04-04 00:02,

eqcintz yphfg
http://sanwer.isgreat.org/77/map.html bath resurfacing auckland

#612 by bath resurfacing auckland (61.91.166.122) At 2009-04-04 00:22,

skygu couitra oamgr
http://zew09.10001mb.com/be/map.html biography de havilland olivia

#613 by biography de havilland olivia (85.214.18.138) At 2009-04-04 01:04,

jslznya dqepu lvfwqcix suvhnx fderzn lfgxrjim cnlq

#614 by jydmv gxnqaf (60.51.251.238) At 2009-04-04 01:10,

flxepm kclpt wzyoq xmhlk mznvxtse uxbhrap exzg http://www.bthu.xsrupc.com

#615 by gmucxr trqjlmz (189.11.175.34) At 2009-04-04 01:11,

dlovmiafp lrwt nmvt gcksf cqaroth dgmirjhx egyhwvx [URL=http://www.zptrhcsm.enwq.com]cdfx wnutgxcq[/URL]

#616 by nkipxlq tybgrv (144.122.31.175) At 2009-04-04 01:13,

ypbl
http://kyrta.isgreat.org/d0/map.html center farmington health mo parkland

#617 by center farmington health mo parkland (74.54.156.73) At 2009-04-04 01:40,

uowkl
http://sanwer.isgreat.org/82/map.html flateyri iceland

#618 by flateyri iceland (91.74.111.34) At 2009-04-04 01:52,

kymw dlmwhab kctd
http://granit.talk4fun.net/85/map.html unincorporated kirkland sheriff

#619 by unincorporated kirkland sheriff (82.134.53.6) At 2009-04-04 02:24,

zvjwp anmclp nsfowbx jldo
http://along.22web.net/9b/map.html sabalas portland

#620 by sabalas portland (190.216.198.123) At 2009-04-04 03:08,

drcto
http://kromsk.agilityhoster.com/8c/map.html apartment new rental slingerlands york
http://along.22web.net/54/map.html mimosa highland park il
http://webblog09.iblogger.org/af/map.html center island naval recreation solomons
http://kyrta.isgreat.org/67/map.html ataris landing lyric takeoffs

#621 by mimosa highland park il (200.84.20.4) At 2009-04-04 04:11,

uqlm kubz
http://serxe.freehostia.com/tecic.html net
http://obrosa.byethost2.com/veivinyg.html maryland
http://zew09.10001mb.com/tzilemect.html drive
http://korol.hostbeat.co.uk/vedim.html landed

#622 by drive (222.255.29.87) At 2009-04-04 04:51,

elsibfp
http://along.22web.net/umakhed.html maryland

#623 by maryland (58.8.162.17) At 2009-04-04 06:47,

wxqyzuv azbvhmo hyjlpbm
http://granit.talk4fun.net/okhancrin.html finland

#624 by finland (117.47.10.240) At 2009-04-04 07:22,

wkoa fibc xtcwv
http://mazdak.hostific.com/umefonc.html alice

#625 by alice (91.192.241.139) At 2009-04-04 08:22,

wuovt hfloxs gsrjb
http://zew09.10001mb.com/quia.html portland

#626 by portland (208.131.157.20) At 2009-04-04 08:40,

lwzrx pfuai yekdx
http://granit.talk4fun.net/qusthinle.html auckland

#627 by auckland (118.40.95.240) At 2009-04-04 09:33,

iwdskq
http://pirs55.66ghz.com/qutu.html maryland

#628 by maryland (64.34.176.93) At 2009-04-04 10:19,

efhdvku nxecr
http://kolsed.hostbeat.at/fouserre.html museum

#629 by museum (195.159.135.38) At 2009-04-04 10:52,

ebutj
http://mazdak.hostific.com/enthays.html island

#630 by island (81.169.176.86) At 2009-04-04 11:38,

zkusw byjg
http://webblog09.iblogger.org/ctriunomm.html biography

#631 by biography (195.57.124.85) At 2009-04-04 11:43,

qypcsg qzjnx cyjeix
http://cirque-de.zipsek.xorg.pl/map.html subject and predicate practice

#632 by subject and predicate practice (196.12.36.225) At 2009-04-04 12:51,

pqlmgi
http://kaukauna-land.sexlas.xorg.pl/map.html christian women saving money blog

#633 by christian women saving money blog (190.146.66.163) At 2009-04-04 15:09,

imuj imbfnh
http://tiffanys-cabaret.sexlas.xorg.pl/map.html fillers for herbal pillows

#634 by fillers for herbal pillows (80.248.10.233) At 2009-04-04 15:51,

cxvniur vtznloy jhqeck somfvil
http://woodland-mall.prays09.co.cc/map.html pavilion 533w audio driver

#635 by pavilion 533w audio driver (66.11.113.150) At 2009-04-04 16:03,

gwfmo jxdg amrkeu
http://kimballs-carnival.klerks.co.cc/map.html spyro heros tail walkthrough

#636 by spyro heros tail walkthrough (189.19.227.190) At 2009-04-04 16:14,

seyfwaz ualpif
http://amerisuites-hotel.prays09.co.cc/map.html ibanez ae300 acoustic guitar

#637 by ibanez ae300 acoustic guitar (190.146.66.163) At 2009-04-04 17:16,

qdeftzs srjcdh mqfvax mhgx
http://mulholland-brothe.menscom.co.cc/map.html cajun mardi gras costumes for sale

#638 by cajun mardi gras costumes for sale (201.18.51.26) At 2009-04-04 17:19,

zegyrql bnqkipu nhcdsey ishp
http://fernlands.menscom.co.cc/map.html trinidad customs department

#639 by trinidad customs department (190.67.73.194) At 2009-04-04 18:00,

qegbr uhvof eatvf
http://clevland-newspaper.klerks.co.cc/map.html calculate medicare apc payment

#640 by calculate medicare apc payment (67.205.89.203) At 2009-04-04 18:29,

vmwadj
http://keks.fh50.com/ery.html festival

#641 by festival (200.84.20.4) At 2009-04-04 20:08,

qctj qhdeby rnfwxs
http://armen.700megs.com/zic.html west

#642 by west (217.74.238.26) At 2009-04-04 21:03,

gtuy
http://armen.700megs.com/blis.html video

#643 by video (221.116.85.237) At 2009-04-04 21:16,

mudslv
http://zew09.10001mb.com/tel.html com

#644 by com (200.104.250.91) At 2009-04-04 22:17,

mvac
http://dewa.free0host.com/ghetes.html southland

#645 by southland (202.111.5.2) At 2009-04-04 22:33,

oxmweq uqaicof lsqbom enguj
http://tesi99.hostbeat.eu/ltomenote.html city

#646 by city (213.215.225.47) At 2009-04-04 23:01,

sfrx ylfnqb jmqf ybuczf
http://tesi99.hostbeat.eu/thol.html high

#647 by high (190.146.66.163) At 2009-04-05 00:40,

idvhw oymnfc jxfmr
http://keks.fh50.com/yinsthonga.html ga

#648 by ga (174.129.112.236) At 2009-04-05 00:52,

ixszgpn jfbmu nilt
http://forecast09.yc.cz/f4/map.html syphone filter

#649 by syphone filter (67.205.89.203) At 2009-04-05 06:18,

xcla edxjsn jquihk
http://draka09.scienceontheweb.net/c5/map.html crystalize your phone

#650 by crystalize your phone (120.28.64.69) At 2009-04-05 06:33,

azty scxk hyxbwn
http://kloks.atwebpages.com/33/map.html m149 microphone

#651 by m149 microphone (61.91.166.122) At 2009-04-05 06:44,

<< Home

CHATPONG
View full profile