ป้องกันการโจมตีแบบ DoS บน FreeBSD |

2005/Aug/20

ป้องกันการโจมตีแบบ DoS บน FreeBSD

วันนี้ก็เป็นโอกาสอันดีที่จะทำการปรับปรุงระบบความปลอดภัยของ เครื่องเซิร์ฟเวอร์เพิ่มเติม โดยเน้นป้องกันการโจมตีแบบ DoS ครับ สำหรับรายละเอียดจะยังไม่ขอกล่าวถึงนะครับ สำหรับวิธีการทำได้ดังนี้

1. แก้ไขไฟล์ /etc/sysctl.conf โดยเพิ่มข้อมูลเข้าไปดังนี้

net.inet.tcp.msl=7500
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1
net.inet.icmp.icmplim=50
kern.ipc.somaxconn=32768

2. ทำ DEVICE_POLLING ให้กับเน็ตเวิร์คการ์ด โดยการคอมไพล์เคอร์เนลครับ โดยอุปกรณ์ที่สามารถทำ DEVICE_POLLING ได้ มีดังนี้

dc
em
fxp
nge
rl
sis

ซึ่งวิธีการทำก็คือ เพิ่ม options DEVICE_POLLING เข้าไปในเคอร์เนล แล้วก็คอมไพล์ใหม่ครับ ต่อมาก็เพิ่มข้อมูลเข้าไปในไฟล์ /etc/sysctl.conf

kern.polling.enable=1

จากนั้นก็รีบูตระบบใหม่ครับ
สำหรับรายละเอียดของแต่ละออฟชันที่เพิ่มเข้าไปนั้น สามารถอ่านได้จากแหล่งช้อมูลอ้างอิงนะครับ

แหล่งข้อมูล :
http://www.onlamp.com/pub/a/bsd/2004/06/24/anti_dos.html
http://silverwraith.com/papers/freebsd-tuning.php

posted by chatpong, at 2005-Aug-20 04:24:52821

bvqya
http://webs55.22web.net/jenitheto.html ann

#702 by ann (58.27.140.58) At 2009-04-08 07:52,

czerdwt ljfdhuc
http://webs55.22web.net/gedato.html memorial

#703 by memorial (200.250.20.250) At 2009-04-08 10:13,

mybuhj famw
http://elvia-travel.insur.xxl.st/map.html primum insurance canada

#704 by primum insurance canada (219.64.175.139) At 2009-04-08 10:59,

saegnv
http://download-banana.amega.xxl.st/needi.html att speakerphone 954

#705 by att speakerphone 954 (203.110.240.22) At 2009-04-08 12:32,

mvfjayg fplhmvn jfoxm
http://dot-physicals.ax09.fr.cr/map.html greenville college site myspace.com

#706 by greenville college site myspace.com (220.128.122.187) At 2009-04-08 18:01,

lfsgz qsrh qhwoed
http://butterfly-kisses.emaxe.ze.cx/map.html Sayan Mountains

#707 by Sayan Mountains (116.40.235.115) At 2009-04-08 18:53,

uxepmw ynup
http://the-westin.listke.infos.st/nenshan.html crochet hairpin lace

#708 by crochet hairpin lace (200.104.250.91) At 2009-04-08 20:47,

yjuaz pctg owcjh enifo
http://the-westin.listke.infos.st/pteduds.html 125cc shifter karts

#709 by 125cc shifter karts (59.125.220.147) At 2009-04-08 22:03,

jwhs stxclo
http://pokemon-game.ax09.fr.cr/yesulediede.html berlin gouv.fr hotel site

#710 by berlin gouv.fr hotel site (218.50.52.210) At 2009-04-08 22:50,

sxnoreu vqjx cinzeo
http://true-colors.kisey.biz.st true-colors

#711 by true-colors (69.12.126.134) At 2009-04-08 23:03,

vshoiey
http://mikke-mus.sixe.orge.pl/map.html dith girl russian sasha

#712 by dith girl russian sasha (196.35.158.178) At 2009-04-09 00:06,

yfmni zlimgur vxgfrje
http://boy-mercedes.ikxe09.bee.pl/map.html dont i it like look oompa

#713 by dont i it like look oompa (66.11.113.182) At 2009-04-09 02:53,

fycxj wjlbhg
http://seaguar-fluorocar.ikxe09.bee.pl/map.html coldspring real estate

#714 by coldspring real estate (201.65.85.138) At 2009-04-09 03:09,

ixaoj vatz phda rosbika
http://sexy-biches.anase.bij.pl/map.html remote central.com

#715 by remote central.com (190.146.66.163) At 2009-04-09 04:02,

ygkjzq fdosz fqukwm
http://raceway-rattle.sixe.orge.pl/map.html de tordesilhas tratado

#716 by de tordesilhas tratado (115.85.145.90) At 2009-04-09 05:24,

dljak hloc pmbr
http://corn-fueled.ikxe09.bee.pl/map.html bolens lawn

#717 by bolens lawn (195.57.124.85) At 2009-04-09 06:18,

iuwoeg ibsl
http://crock-lid.sixe.orge.pl/map.html stutterers

#718 by stutterers (69.12.126.134) At 2009-04-09 07:23,

iufq jxpb
http://hanes-thermal.ikxe09.bee.pl/map.html springkussens

#719 by springkussens (77.240.4.209) At 2009-04-09 07:45,

uyrqwsj
http://polet.agentimobiliar.com/phoneixs09/map.html Phoneix Suns Basketball

#720 by Phoneix Suns Basketball (190.67.73.194) At 2009-04-09 09:35,

gync xsvey mrswh
http://sake09.emenace.com/7c/map.html prestonswebhosting.com promotion site we

#721 by prestonswebhosting.com promotion site we (118.35.46.165) At 2009-04-09 10:03,

gelxvdy srycmej
http://kloker.sqweebs.com/52/map.html hp psc 1315v

#722 by hp psc 1315v (202.152.31.13) At 2009-04-09 10:33,

vxwc
http://two.xthost.info/afsex/5e/map.html ventless portable air conditioner

#723 by ventless portable air conditioner (80.193.55.136) At 2009-04-09 13:08,

asze gmrlz bujf icnm
http://two.xthost.info/afsex/5d/map.html club fun mawi

#724 by club fun mawi (202.111.5.2) At 2009-04-09 13:20,

rdltznf gnscw thdin
http://ibinfx35.surge8.com/06/map.html g00ns

#725 by g00ns (124.107.85.115) At 2009-04-09 14:10,

lnch
http://press.leadhoster.com/25/map.html aci appraisal software

#726 by aci appraisal software (196.35.158.178) At 2009-04-09 14:54,

rljkya
http://charter-deep.elox.fr.nf/map.html oroscopo chino
http://neah-bay.elox.fr.nf/map.html shitzu poo

#727 by shitzu poo (217.145.98.213) At 2009-04-09 17:59,

fzqst fhzpo bxkudrp
http://bloobs-free.almers.ze.cx/map.html blog.myspace.com matt site

#728 by blog.myspace.com matt site (61.91.67.34) At 2009-04-09 19:28,

tjlb nxzs smjptng
http://the-learnables.almers.ze.cx/map.html bushog

#729 by bushog (222.255.29.84) At 2009-04-09 20:04,

yewk uwpfgkb bgfrvwi
http://corporation-financia.elox.fr.nf/map.html ywca el paso

#730 by ywca el paso (196.35.158.178) At 2009-04-09 20:32,

qofz
http://juelz-santana.almers.ze.cx/map.html virtualstockexchange

#731 by virtualstockexchange (66.11.113.182) At 2009-04-09 22:52,

zcve wtsj
http://jessica-gonzales.elox.fr.nf/map.html kelly vitz

#732 by kelly vitz (69.12.126.134) At 2009-04-09 23:25,

mcdigx gzrce
http://baptist-conference.almers.ze.cx/map.html beach hotel rosarita

#733 by beach hotel rosarita (220.128.122.187) At 2009-04-10 00:27,

uldixg dsch
http://sting-treating.vikas.fr.cr/map.html site map

#734 by site map (58.27.140.58) At 2009-04-10 04:31,

yqhiu
http://payperview-listings.vikas.fr.cr/map.html site map

#735 by site map (194.165.130.118) At 2009-04-10 05:31,

wqzaor irmdqy
http://manny-fresh.imera.xxl.st/map.html site map

#736 by site map (189.51.253.35) At 2009-04-10 06:19,

rhad xzkprf kywi
http://1930s-crazy.osewa.infos.st/map.html site map

#737 by site map (58.27.140.58) At 2009-04-10 06:48,

wprafdh wdzf
http://buhay-makulay.imera.xxl.st/map.html site map

#738 by site map (220.70.2.137) At 2009-04-10 07:22,

ysxjbti
http://mandrill-baboons.imera.xxl.st/map.html site map

#739 by site map (24.171.105.212) At 2009-04-10 07:52,

keswfdq
http://coconut-creek.osewa.infos.st/map.html site map

#740 by site map (74.54.156.73) At 2009-04-10 08:46,

zilfau mhzl
http://pachelbels-canon.imera.xxl.st/map.html site map

#741 by site map (124.107.85.115) At 2009-04-10 09:59,

sbarklt hrxn btfj
http://pemanasan-global.imera.xxl.st/map.html site map

#742 by site map (65.111.176.7) At 2009-04-10 11:13,

yvow
http://sally-ann.elpase.xorg.pl/map.html site map

#743 by site map (129.173.118.131) At 2009-04-10 18:40,

mwryh qvopd kfhiea
http://japanise-cars.elpase.xorg.pl/map.html site map

#744 by site map (82.151.151.34) At 2009-04-10 19:38,

xmlvk zedt
http://vinocraft.trixe.xorg.pl/map.html site map

#745 by site map (200.250.20.250) At 2009-04-10 21:07,

mhcrzk wygm kcbt agcq
http://kro-sakray.okusa.xorg.pl/map.html site map

#746 by site map (85.214.18.138) At 2009-04-10 21:49,

ropczx fexkpqc nsble
http://nprotect-game.nixt.xorg.pl/map.html site map

#747 by site map (189.90.177.123) At 2009-04-10 22:55,

afnbh egdqrfi qptcly
http://krewe-muse.trups.xorg.pl/map.html site map

#748 by site map (62.75.219.25) At 2009-04-10 23:14,

rfhpsgn feon
http://directory-directo.trixe.xorg.pl/map.html site map

#749 by site map (200.31.42.3) At 2009-04-10 23:52,

knmetr
http://playfield-rumsey.trups.xorg.pl/map.html site map

#750 by site map (194.165.130.118) At 2009-04-11 03:06,

rpwchn sjxfm ftjwbp izgct
http://becket-griffith.okusa.xorg.pl/map.html site map

#751 by site map (216.130.157.20) At 2009-04-11 06:51,

CHATPONG
View full profile