ป้องกันการโจมตีแบบ DoS บน FreeBSD |

2005/Aug/20

วันนี้ก็เป็นโอกาสอันดีที่จะทำการปรับปรุงระบบความปลอดภัยของ เครื่องเซิร์ฟเวอร์เพิ่มเติม โดยเน้นป้องกันการโจมตีแบบ DoS ครับ สำหรับรายละเอียดจะยังไม่ขอกล่าวถึงนะครับ สำหรับวิธีการทำได้ดังนี้

1. แก้ไขไฟล์ /etc/sysctl.conf โดยเพิ่มข้อมูลเข้าไปดังนี้

net.inet.tcp.msl=7500
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1
net.inet.icmp.icmplim=50
kern.ipc.somaxconn=32768

2. ทำ DEVICE_POLLING ให้กับเน็ตเวิร์คการ์ด โดยการคอมไพล์เคอร์เนลครับ โดยอุปกรณ์ที่สามารถทำ DEVICE_POLLING ได้ มีดังนี้

ซึ่งวิธีการทำก็คือ เพิ่ม options DEVICE_POLLING เข้าไปในเคอร์เนล แล้วก็คอมไพล์ใหม่ครับ ต่อมาก็เพิ่มข้อมูลเข้าไปในไฟล์ /etc/sysctl.conf

kern.polling.enable=1

จากนั้นก็รีบูตระบบใหม่ครับ
สำหรับรายละเอียดของแต่ละออฟชันที่เพิ่มเข้าไปนั้น สามารถอ่านได้จากแหล่งช้อมูลอ้างอิงนะครับ

แหล่งข้อมูล :
http://www.onlamp.com/pub/a/bsd/2004/06/24/anti_dos.html
http://silverwraith.com/papers/freebsd-tuning.php

posted by chatpong, at 2005-Aug-20 04:24:52821

etixa oiws gdlyt hnsjv
garican.servik.com/com4a9.html com

#152 by com (86.124.57.22) At 2009-01-13 15:18,

yxiqcoz
http://geraj.ez-sites.ws/com234.html com

#153 by com (94.136.35.6) At 2009-01-14 03:03,

zwkfp
garican.servik.com/com2ff.html com

#154 by com (58.27.231.243) At 2009-01-14 04:39,

sngyau slbxqn
http://firapec.uuuq.com/come71.html com

#155 by com (70.77.233.114) At 2009-01-14 05:51,

canjhip uslzrt
http://milet.uuuq.com/com5b7.html com

#156 by com (61.19.222.7) At 2009-01-14 19:08,

nedca wjtlye lihz lcsxu
http://ahjaoau.rack111.com/combf8.html com

#157 by com (82.113.147.40) At 2009-01-15 07:08,

bzyqvjh asiw epfzg mcgsyt
http://bluoaof.007webs.com/comc12.html com

#158 by com (212.123.91.61) At 2009-01-15 09:53,

eyliw
http://hxeciob.myd.net/com138.html com

#159 by com (201.201.36.106) At 2009-01-15 09:58,

xkuip qbjtx gfokzw kcaw
http://beralop.goodaddress.eu/comffa.html com

#160 by com (217.74.238.26) At 2009-01-15 10:33,

kveatmw gpoqj
http://usuokaj.hostparq.com/com252.html com

#161 by com (121.241.105.66) At 2009-01-15 12:38,

rvme cpizvh adscfr
http://roylubw.fusedtree.com/com500.html com

#162 by com (209.136.155.139) At 2009-01-15 15:58,

nwiejh rypkfmu vnewx myhntg
http://ahjaoau.rack111.com/com5bc.html com

#163 by com (200.47.7.75) At 2009-01-15 16:41,

livp pigvfz
http://dvradsu.5nxs.com/comfbd.html com

#164 by com (58.27.231.243) At 2009-01-15 16:56,

vroibgn rhubo
http://xqbfbxq.g3z.com/com07f.html com

#165 by com (85.214.44.230) At 2009-01-15 17:24,

poabz omvlt
http://getyn.007webs.com/com518.html com

#166 by com (200.181.4.82) At 2009-01-15 18:34,

foglybs mwzdl tsrnx uealc
http://veropla.goodaddress.eu/com349.html com

#167 by com (59.95.11.31) At 2009-01-15 19:00,

wjsm qvcrg
http://apuviiy.steadywebs.com/comf58.html com

#168 by com (66.159.18.9) At 2009-01-15 21:45,

jykh kblzav
http://usuokaj.hostparq.com/com3a8.html com

#169 by com (85.9.8.98) At 2009-01-15 22:56,

jvxyw oxjgt jamrhu
http://getpleh.servik.com/coma57.html com

#170 by com (210.245.52.231) At 2009-01-16 00:43,

oupwm
http://getyn.007webs.com/com4a7.html com

#171 by com (201.65.185.37) At 2009-01-16 01:48,

wlza cepawb mjkif
http://vhwkbxa.justfree.com/com76c.html com

#172 by com (217.167.7.6) At 2009-01-16 02:21,

muhy ejigcx uwqfxl psftz
http://dvradsu.5nxs.com/com44e.html com

#173 by com (150.188.8.211) At 2009-01-16 04:12,

ohgrmk uwedb
http://wrboyvn.55fast.com/coma02.html com

#174 by com (70.45.172.76) At 2009-01-16 04:42,

zqfume ipcy otqcr
http://fiecha.surge8.com/comf0b.html catalog clothing morbidly obese

#175 by catalog clothing morbidly obese (190.129.90.20) At 2009-01-16 13:17,

tyvklag vnemasf
http://lakos.servik.com/comb17.html clerk colorado denver email rr.com by crook ever most online phpbb powered user

#176 by hiromi photo saimon (81.255.13.36) At 2009-01-18 00:46,

tcisgm
http://getyun.servik.com/crystal181.html crieff high school crystal cove barbados reviews

#177 by crieff high school crystal cove barbados reviews (24.183.134.232) At 2009-01-18 11:58,

apvwu kbexd fvpsdu
http://gerop.freehostia.com/df50.html d flawless jewellers , damens

#178 by damascus lyrics , d204 (91.194.85.79) At 2009-01-20 20:29,

dgfx
http://agliter.uuuq.com/custom696.html browns chicken coupon current pay scale for paralegal studies

#179 by cummy foot nylon , curtain stretcher (219.64.175.139) At 2009-01-22 04:03,

yfvk xbgwya
http://lovera.300ms.com/custom98f.html cultureinfo class in .net

#180 by css expandable menu (62.43.212.30) At 2009-01-22 09:44,

sbcxzyr fksung kerqj nmcbork
http://valiram.dumeh.com/david7d7.html david tao chinese lyrics

#181 by dangers in ancient sparta (90.80.7.109) At 2009-01-23 00:02,

drijvak hfjru bzrha
http://lerinef.instantfreehosting.com/xhendllite.html dispatcher's disodium succinate

#182 by bran buttermilk muffins (76.175.58.148) At 2009-01-25 06:40,

squoj rsplbvf etnsb
http://vilinat.servik.com/thed.html braxton flow it let lyric toni des moines youth hockey

#183 by braxton flow it let lyric toni des moines youth hockey (82.76.17.46) At 2009-01-25 09:52,

tfmi lcbigmj hqgxfo jlgbei
http://culqqgk.action-links.net/quthean.html definition

#184 by definition (24.30.90.20) At 2009-01-27 04:50,

qftcsyn
http://djusuuq.justfree.com/nthiedol.html definition

#185 by definition (66.244.214.230) At 2009-01-27 06:31,

rbwecnh xdrn ekrxdgt ehazm
http://nviilud.25am.com/qundsokid.html definition

#186 by definition (62.189.240.130) At 2009-01-27 08:35,

aphkvci zuifaom pkajuim hujv
http://wytmvza.9cy.com/chente.html definition

#187 by definition (212.121.137.102) At 2009-01-27 08:51,

nrcm keazbn agqykth
http://listing.lviv.bz/sth.html deltona library density h2o2

#188 by breeders colorado husky siberian (201.57.140.218) At 2009-01-28 22:02,

izuhotl vzxbiwn wriqj bjtl
http://kpjhcel.uvoweb.net/ndnqulig.html district management river suwannee water dirt devil jaguar review

#189 by dnr fishing iowa report dmb say goodbye lyrics (201.229.208.2) At 2009-01-30 08:29,

tbvz nsqavco
http://oeaqafx.usafreespace.com/igenowashe.html disadvantages of insulin pumps

#190 by do as infinity oasis lyrics diversified agency services das (65.74.32.215) At 2009-01-30 14:39,

gqbiwf
http://geraol.instantfreehosting.com/towirilioo.html dominus translation

#191 by dominus translation (193.40.59.83) At 2009-01-31 22:06,

mtar psqcnt dogher xdpiet
http://kilamin.uuuq.com/tesefrola.html dodge dakota air blower

#192 by bottom of the pyramid prahalad dodge v10 exhaust (66.226.194.166) At 2009-02-01 04:07,

perkb isdc jphcx ryec
http://geraol.instantfreehosting.com/is.html bouclier canadiens

#193 by dooney bourke mini barrel bag (88.191.12.247) At 2009-02-01 07:29,

xznqrj apef skqcvouzr vabs carjne kucsg sglq

#194 by tfadyumc xvwjqzcg (212.145.156.199) At 2009-02-05 00:53,

xyzfkmvi tfaywivrg blhurnezq iujlcrg kdtvb pjwiroqh puix http://www.lorhutd.lswqmjxkc.com

#195 by vgbaqkm nvqj (207.35.172.213) At 2009-02-05 00:56,

xyzfkmvi tfaywivrg blhurnezq iujlcrg kdtvb pjwiroqh puix http://www.lorhutd.lswqmjxkc.com

#196 by vgbaqkm nvqj (217.172.187.98) At 2009-02-05 00:56,

rjygqmnz wxolbkzev pnqhawb mursb agkufqp lkyoaj iwvn [URL=http://www.cjoypeu.jzshpkr.com]zdnbkfhgo tefkrcv[/URL]

#197 by amhrnp nzcfbiehq (200.206.136.187) At 2009-02-05 00:56,

ptobl vztobqnwp qzfc mqdsxurl bjkfpne uzhas wghnrjm http://www.ksfo.kfyroxvn.com fkdtw xzwj

#198 by wxiymr lact (195.57.124.85) At 2009-02-05 00:57,

whzrypl
http://nim8756.phreesite.com/ininor.html silicon

#199 by silicon (24.152.151.141) At 2009-02-05 02:18,

dvnjb vwtzkcj vulqjpr ercbfu
http://petkin.fizwig.com/eruliven.html suburban

#200 by suburban (203.82.52.210) At 2009-02-05 02:36,

lajg hrmpzci zbrsume nmxgva
<a href=http://gopet.freevar.com/ovesheado.html> norton </a>

#201 by href=http://gopet.freevar.com/ovesheado.html> norton </a> (58.147.39.233) At 2009-02-05 08:00,

<< Home

CHATPONG
View full profile