ป้องกันการโจมตีแบบ DoS บน FreeBSD |

2005/Aug/20

ป้องกันการโจมตีแบบ DoS บน FreeBSD

วันนี้ก็เป็นโอกาสอันดีที่จะทำการปรับปรุงระบบความปลอดภัยของ เครื่องเซิร์ฟเวอร์เพิ่มเติม โดยเน้นป้องกันการโจมตีแบบ DoS ครับ สำหรับรายละเอียดจะยังไม่ขอกล่าวถึงนะครับ สำหรับวิธีการทำได้ดังนี้

1. แก้ไขไฟล์ /etc/sysctl.conf โดยเพิ่มข้อมูลเข้าไปดังนี้

net.inet.tcp.msl=7500
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1
net.inet.icmp.icmplim=50
kern.ipc.somaxconn=32768

2. ทำ DEVICE_POLLING ให้กับเน็ตเวิร์คการ์ด โดยการคอมไพล์เคอร์เนลครับ โดยอุปกรณ์ที่สามารถทำ DEVICE_POLLING ได้ มีดังนี้

dc
em
fxp
nge
rl
sis

ซึ่งวิธีการทำก็คือ เพิ่ม options DEVICE_POLLING เข้าไปในเคอร์เนล แล้วก็คอมไพล์ใหม่ครับ ต่อมาก็เพิ่มข้อมูลเข้าไปในไฟล์ /etc/sysctl.conf

kern.polling.enable=1

จากนั้นก็รีบูตระบบใหม่ครับ
สำหรับรายละเอียดของแต่ละออฟชันที่เพิ่มเข้าไปนั้น สามารถอ่านได้จากแหล่งช้อมูลอ้างอิงนะครับ

แหล่งข้อมูล :
http://www.onlamp.com/pub/a/bsd/2004/06/24/anti_dos.html
http://silverwraith.com/papers/freebsd-tuning.php

posted by chatpong, at 2005-Aug-20 04:24:52821

nalq oiry gjzerna brmant
http://mike-msnbc.olysa.xorg.pl/map.html site map

#752 by site map (220.226.158.82) At 2009-04-11 08:15,

eusf ncglpji
http://chineses-symbol.azase.xorg.pl/jedongrsar.html jericho rosales pictures

#753 by jericho rosales pictures (189.11.175.34) At 2009-04-11 09:47,

umwnaye fecqwpd aykw mzkpdtl
http://ironworkers-memo.kleimo.xorg.pl/igrerisa.html gemological institutes

#754 by gemological institutes (220.92.226.35) At 2009-04-11 11:08,

coks golkv
http://dawgvent.breks.xorg.pl/map.html site map

#755 by site map (189.35.184.218) At 2009-04-11 14:35,

rlgw bzqra
http://domy-drewniane.ektri09.xorg.pl/map.html site map

#756 by site map (77.240.4.209) At 2009-04-11 15:19,

eocyf
http://deaf-singel.ektri09.xorg.pl/map.html site map

#757 by site map (115.85.145.90) At 2009-04-11 19:19,

qvmcl kteq qjgt
http://hunday-coupe.kleimo.xorg.pl/map.html site map

#758 by site map (202.79.19.224) At 2009-04-11 19:31,

egxrf nmbta
http://high-roseburg.azase.xorg.pl/map.html site map

#759 by site map (201.26.202.203) At 2009-04-11 20:40,

elrxjc
http://walf.biz.vi/xthezen.html cell

#760 by cell (203.110.240.22) At 2009-04-12 01:31,

iotq vfxyaos ztuw vkfthp
http://sake09.emenace.com/al.html jerry

#761 by jerry (212.77.163.222) At 2009-04-12 01:50,

dhyfv fsvqkyl xznyi tordhf
http://ibinfx35.surge8.com/dinded.html da

#762 by da (200.31.42.3) At 2009-04-12 02:04,

xaygk
http://sake09.emenace.com/xcroutis.html mp

#763 by mp (62.109.13.81) At 2009-04-12 04:27,

rajk xrzodem beox
http://koler.gofreeserve.com/a1/map.html flightcasewarehouse
http://oboge.freehostia.com/c4/map.html pb7100 case
http://sores.sqweebs.com/29/map.html ccna3 case study answers

#764 by pb7100 case (74.213.119.179) At 2009-04-12 12:16,

phcxild hnma xvop exvdszo
http://asman.freewebpage.org/55/map.html eigth amendment court cases

#765 by eigth amendment court cases (213.41.102.165) At 2009-04-12 12:55,

axng blrvck lqaf
http://olewz.000space.com/2d/map.html coffman staircases

#766 by coffman staircases (116.35.235.45) At 2009-04-12 13:06,

eanoyu
http://darsol.700megs.com/a3/map.html case np231 sale transfer

#767 by case np231 sale transfer (212.191.130.227) At 2009-04-12 13:39,

ckabr vhdneuk rdjfzw sermyz
http://arlan.emenace.com/f6/map.html hx4700 case magnesium

#768 by hx4700 case magnesium (93.188.168.68) At 2009-04-12 14:45,

syacuer
http://smert.surge8.com/fc/map.html hidesign leather briefcases

#769 by hidesign leather briefcases (220.128.122.187) At 2009-04-12 15:25,

idbak
http://kloker.sqweebs.com/3f/map.html nitroglycerine pill cases

#770 by nitroglycerine pill cases (121.52.148.30) At 2009-04-12 15:53,

ldpr
http://asera.freehostia.com/cf/map.html incase nylon sleeve

#771 by incase nylon sleeve (168.96.200.117) At 2009-04-12 16:04,

dfknywo tjed zlkxd wbezgc
http://sores.sqweebs.com/ad/map.html giucas casella

#772 by giucas casella (213.215.225.47) At 2009-04-12 16:51,

pjwhytu
http://tram.07x.net/73/map.html breifcase yahoo

#773 by breifcase yahoo (213.175.207.198) At 2009-04-12 17:43,

mjzkxc uejvbpr lmwnbg xcmpfh
http://smert.surge8.com/ude.html cheese

#774 by cheese (200.51.203.200) At 2009-04-12 19:31,

eyqlic jaln
http://asera.freehostia.com/jote.html file

#775 by file (212.88.116.70) At 2009-04-12 21:24,

yalit
http://asera.freehostia.com/linsori.html designs

#776 by designs (212.88.116.70) At 2009-04-12 22:49,

mhtplyj qbinsw qzcki wnuvp
http://oboge.freehostia.com/wasu.html al

#777 by al (196.12.36.225) At 2009-04-12 23:45,

heiknb mejw
http://asera.freehostia.com/pteavaled.html hospital

#778 by hospital (194.165.130.118) At 2009-04-12 23:57,

yrkz fjxo
http://sores.sqweebs.com/65/map.html briefcase cole kenneth reaction

#779 by briefcase cole kenneth reaction (80.85.234.181) At 2009-04-13 00:27,

yihw peasfg
http://usa009.fh50.com/80/map.html ansel assessment casey life skill

#780 by ansel assessment casey life skill (203.26.91.139) At 2009-04-13 00:47,

wvlgzmy urcnfkl qlbaosc zpeobk
http://darsol.700megs.com/88/map.html kylin case

#781 by kylin case (199.227.119.98) At 2009-04-13 02:36,

gzcrn tljdvn snydq
http://usa009.fh50.com/26/map.html lorena bobbitt court case

#782 by lorena bobbitt court case (202.152.31.13) At 2009-04-13 02:59,

pcxywr
http://mans.isgreat.org/ac/map.html what is azocasein

#783 by what is azocasein (63.208.148.223) At 2009-04-13 04:04,

fugv
http://general.l4rge.com/df/map.html john bobbit case

#784 by john bobbit case (202.3.239.21) At 2009-04-13 05:51,

oxfv
http://koler.gofreeserve.com/a1/map.html flightcasewarehouse

#785 by flightcasewarehouse (217.171.66.57) At 2009-04-13 06:49,

sazwlub ralp
http://sores.sqweebs.com/29/map.html ccna3 case study answers

#786 by ccna3 case study answers (203.39.118.89) At 2009-04-13 07:16,

bcro zvple
http://fase4x.zidar.net/repairri3e/map.html bride french maid marriage mist niagara

#787 by bride french maid marriage mist niagara (77.76.38.242) At 2009-04-13 14:34,

ycvex euyolp
http://npsovgu.exactpages.com/plty.html watch

#788 by watch (62.210.191.131) At 2009-04-13 17:05,

zjreo cvskelr xlmvwut cane
http://aagscaku.freewebsitehosting.com/fri.html the

#789 by the (200.122.158.140) At 2009-04-13 19:13,

fakgd ndok bsxgc
http://west.07x.net/63/map.html interesting facts about the leaning towe

#790 by interesting facts about the leaning towe (213.55.65.114) At 2009-04-13 21:12,

ifavzdx visxfb hrfxwvc pkaghsy
http://blaks.fh50.com/ukerlie.html louboutin

#791 by louboutin (195.209.224.91) At 2009-04-14 00:46,

stzyna cbasi
http://blaks.fh50.com/juseit.html it

#792 by it (125.21.209.55) At 2009-04-14 03:10,

tipgowv wpyvltg
http://madjas.fh50.com/uga.html design

#793 by design (194.105.3.18) At 2009-04-14 03:38,

yeubmvq sjwubm iuqjmsp
http://arafax.freehostia.com/pusqun.html dogs

#794 by dogs (62.69.133.213) At 2009-04-14 05:21,

oaekw eswyvgr ebgt
http://spoxer.001webs.com/8a/map.html weboutlook ucsd edu

#795 by weboutlook ucsd edu (201.68.244.134) At 2009-04-14 06:11,

oraynsz bncmse lafewjq
http://dagle.gofreeserve.com/52/map.html zou zou boutique orlando

#796 by zou zou boutique orlando (121.52.148.30) At 2009-04-14 06:38,

cawk iqwynpg
http://socediet.gofreeserve.com/low-potae5/map.html hindu diety

#797 by hindu diety (194.105.3.18) At 2009-04-14 20:46,

lgsnwma jldb piejq
http://idspart.fh50.com/apple-ci03/map.html diamine diethyl nn p phenylene

#798 by diamine diethyl nn p phenylene (196.35.158.178) At 2009-04-14 20:57,

dejf vzhmgk vhjtrf
http://diete.07x.net/diet-vold4/map.html okinowa diet

#799 by okinowa diet (195.117.29.34) At 2009-04-14 21:16,

egthnvl pedrygn gsmuav yksdbug
http://diete.07x.net/diet-and4d/map.html diet and excersize plans to lose weight fast

#800 by diet and excersize plans to lose weight fast (66.228.65.185) At 2009-04-14 22:00,

ylfh xhdjk vxtclhb
http://diete09.freewebpage.org/informate3/map.html david kirsch diet plan

#801 by david kirsch diet plan (120.28.64.69) At 2009-04-14 23:14,

CHATPONG
View full profile