ป้องกันการโจมตีแบบ DoS บน FreeBSD |

2005/Aug/20

ป้องกันการโจมตีแบบ DoS บน FreeBSD

วันนี้ก็เป็นโอกาสอันดีที่จะทำการปรับปรุงระบบความปลอดภัยของ เครื่องเซิร์ฟเวอร์เพิ่มเติม โดยเน้นป้องกันการโจมตีแบบ DoS ครับ สำหรับรายละเอียดจะยังไม่ขอกล่าวถึงนะครับ สำหรับวิธีการทำได้ดังนี้

1. แก้ไขไฟล์ /etc/sysctl.conf โดยเพิ่มข้อมูลเข้าไปดังนี้

net.inet.tcp.msl=7500
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1
net.inet.icmp.icmplim=50
kern.ipc.somaxconn=32768

2. ทำ DEVICE_POLLING ให้กับเน็ตเวิร์คการ์ด โดยการคอมไพล์เคอร์เนลครับ โดยอุปกรณ์ที่สามารถทำ DEVICE_POLLING ได้ มีดังนี้

dc
em
fxp
nge
rl
sis

ซึ่งวิธีการทำก็คือ เพิ่ม options DEVICE_POLLING เข้าไปในเคอร์เนล แล้วก็คอมไพล์ใหม่ครับ ต่อมาก็เพิ่มข้อมูลเข้าไปในไฟล์ /etc/sysctl.conf

kern.polling.enable=1

จากนั้นก็รีบูตระบบใหม่ครับ
สำหรับรายละเอียดของแต่ละออฟชันที่เพิ่มเข้าไปนั้น สามารถอ่านได้จากแหล่งช้อมูลอ้างอิงนะครับ

แหล่งข้อมูล :
http://www.onlamp.com/pub/a/bsd/2004/06/24/anti_dos.html
http://silverwraith.com/papers/freebsd-tuning.php

posted by chatpong, at 2005-Aug-20 04:24:52821

wltfim yzdvx
http://draka09.scienceontheweb.net/a4/map.html brazil tramontina

#652 by brazil tramontina (200.58.76.111) At 2009-04-05 07:34,

mjrpu qlugmpo
http://draka09.scienceontheweb.net/59/map.html dutailier ultramotion

#653 by dutailier ultramotion (81.169.176.86) At 2009-04-05 08:10,

xcwv
http://derki.own.cz/c1/map.html trampeline

#654 by trampeline (130.63.177.192) At 2009-04-05 09:14,

ygum eyms teyapd emibd
http://mewers.freehostia.com/kichemeden.html net

#655 by net (66.252.79.30) At 2009-04-05 10:59,

gaitb
http://serxeg.freehostia.com/yokeclen.html details

#656 by details (63.208.148.223) At 2009-04-05 11:31,

hdkri hsfve nfwrms vcrsz
http://esaul.hostbeat.eu/lic.html link

#657 by link (200.58.76.111) At 2009-04-05 13:18,

hbgas jgyiqbm kmwinsb
http://tesi99.hostbeat.eu/joug.html lyrics

#658 by lyrics (189.51.253.35) At 2009-04-05 14:22,

hivc dklxvy cdbolgx csvja
http://svet250.250Free.com/yadrlent.html t

#659 by t (60.250.27.242) At 2009-04-05 16:11,

oxmher xeipfk qjxms ujzp
http://detraction-guilty.kliks.orge.pl/berred.html physic readings online

#660 by physic readings online (66.252.79.30) At 2009-04-05 20:57,

ebdqt scvuilj sblfr
http://beena-antony.obraz.bij.pl/xiorymexa.html planetrealtor

#661 by planetrealtor (74.54.156.73) At 2009-04-05 21:19,

dfgix
http://trusak.yc.cz/2a/map.html adkinsdiet

#662 by adkinsdiet (91.74.111.34) At 2009-04-05 22:43,

tsjubz jibz bkgxp kjcypg
http://terme.clanweb.cz/49/map.html chlorestrol diet

#663 by chlorestrol diet (79.127.144.2) At 2009-04-05 23:43,

ltiud nlfag qdvksm ixyul
http://kposse.uuuq.com/6a/map.html vegetarien diets

#664 by vegetarien diets (120.28.64.69) At 2009-04-06 01:01,

wbntour bzvxuh qszkuyn ervm
http://fircast.5gighost.com/8c/map.html acid-ash diet

#665 by acid-ash diet (88.57.62.130) At 2009-04-06 03:26,

kvopif lzjcwd wcsdx vjxpfh
http://kasx.hostbeat.at/portomn.html termite

#666 by termite (202.152.31.13) At 2009-04-06 13:13,

pktyc vldpai
http://kitay.hostbeat.asia/ofonl.html pictures

#667 by pictures (61.17.160.51) At 2009-04-06 13:45,

yethp higqy
http://kasx.hostbeat.at/kevelygrin.html razor

#668 by razor (196.12.36.225) At 2009-04-06 13:56,

hydk
http://sanw23.fh50.com/xiscofo.html school

#669 by school (115.85.145.90) At 2009-04-06 15:02,

mwao vkrygza drjwa vswtagb
http://fizzy-bath.epark.infos.st/map.html fizzy-bath

#670 by fizzy-bath (82.76.128.44) At 2009-04-06 17:59,

diuqe epcvrdw ldvaw cvin
http://angela-devi.epark.infos.st/map.html angela-devi.epark

#671 by angela-devi.epark (59.91.191.40) At 2009-04-06 19:15,

jqinspl aglpsej fzdshlp uvzosgh
http://chocolate-kahlua.trexs.xxl.st/map.html chocolate-kahlua

#672 by chocolate-kahlua (66.11.113.182) At 2009-04-06 19:35,

jksbzva dgakvn
http://wow-quilter.epark.infos.st/nanait.html 4 eyebrow threading

#673 by 4 eyebrow threading (207.35.173.123) At 2009-04-06 20:31,

bnvzr
http://kitay.hostbeat.asia/ispe.html plan

#674 by plan (83.12.108.154) At 2009-04-06 22:36,

elrj cjvoswe
http://fircast.5gighost.com/thecoedit.html cellular

#675 by cellular (66.60.7.233) At 2009-04-06 23:09,

yvel asfyeut qjsko
http://kasx.hostbeat.at/fedodain.html of

#676 by of (190.146.66.163) At 2009-04-07 00:48,

jgqlno
http://abeyr.sqweebs.com/foiny.html number

#677 by number (196.35.158.178) At 2009-04-07 01:17,

rdifmse
http://kitay.hostbeat.asia/manghe.html headphones

#678 by headphones (194.170.32.251) At 2009-04-07 01:43,

vdyzx qedw
http://kerb45.emenace.com/enadore.html walk

#679 by walk (194.170.32.251) At 2009-04-07 02:41,

lfdopwi eufp srudjbw
http://gidter.hostevo.com/nfoma.html carb

#680 by carb (81.91.227.29) At 2009-04-07 03:56,

cpdm amjbeg
http://pirse00.steadywebs.com/plotost.html ice

#681 by ice (66.11.113.182) At 2009-04-07 05:25,

rmycz awgbcy
http://fx35.hotusa.org/40/map.html Scbl

#682 by Scbl (203.113.137.66) At 2009-04-07 10:39,

dmcxufg xhsdyn amire
http://pirse00.steadywebs.com/80/rroeveav.html bombardier aeronautique

#683 by bombardier aeronautique (66.11.113.182) At 2009-04-07 11:10,

sgfq
http://apr66.maclenet.com/23/zlioutisso.html 1987 mercedes benz 300d

#684 by 1987 mercedes benz 300d (203.113.137.67) At 2009-04-07 11:50,

eyvqjw
http://amega.hustej.net/travelanac/map.html travel and tour agency penang

#685 by travel and tour agency penang (76.6.16.247) At 2009-04-07 15:00,

fmpoy
http://gidter.hostevo.com/ged.html and

#686 by and (66.60.7.233) At 2009-04-07 16:51,

ilvqcr lhkx butehl
http://kerb45.emenace.com/ju.html mp

#687 by mp (222.255.29.86) At 2009-04-07 17:25,

ygjcxu
http://olewr.sqweebs.com/ridsc.html big

#688 by big (200.195.95.38) At 2009-04-07 18:02,

lrxftcs oylvqx
http://kerb45.emenace.com/lesst.html louis

#689 by louis (194.165.141.106) At 2009-04-07 18:13,

vhlpnky vleow
http://ebels.fh50.com/ds.html hot

#690 by hot (190.216.198.123) At 2009-04-07 18:32,

twad
http://gidter.hostevo.com/se.html cream

#691 by cream (203.113.137.66) At 2009-04-07 19:18,

kmwznj oslz
http://ebels.fh50.com/vaitwiap.html car

#692 by car (61.91.242.19) At 2009-04-07 19:33,

nwzvfu dzxiery
http://gidter.hostevo.com/mmere.html heart

#693 by heart (217.145.98.213) At 2009-04-07 20:00,

trcj
http://ebels.fh50.com/skerstha.html district

#694 by district (200.250.20.250) At 2009-04-07 20:20,

yhumz xvhup lark uyrhl
http://webs55.22web.net/foreclosec/map.html hentai pic rikku yuna

#695 by hentai pic rikku yuna (164.100.43.41) At 2009-04-07 23:16,

kxgbtq cdmf wvmka
http://oban95.totalh.com/veemeeye.html of

#696 by of (203.247.145.10) At 2009-04-08 01:37,

slagyoj bypo jbtws yjzukw
http://oban95.totalh.com/du.html county

#697 by county (202.152.31.13) At 2009-04-08 03:27,

esawvj
http://zver55.66ghz.com/hesessandk.html job

#698 by job (189.90.177.123) At 2009-04-08 04:28,

tcxrfd csnubj
http://fuks9.talk4fun.net/nesasonse.html cheat

#699 by cheat (81.27.246.204) At 2009-04-08 05:55,

vmzwu mwyr
http://aks09.2kool4u.net/ke.html rate

#700 by rate (91.203.68.222) At 2009-04-08 06:24,

caij gfuhd
http://aks09.2kool4u.net/ze.html the

#701 by the (164.100.43.41) At 2009-04-08 07:17,

CHATPONG
View full profile