ป้องกันการโจมตีแบบ DoS บน FreeBSD |

2005/Aug/20

ป้องกันการโจมตีแบบ DoS บน FreeBSD

วันนี้ก็เป็นโอกาสอันดีที่จะทำการปรับปรุงระบบความปลอดภัยของ เครื่องเซิร์ฟเวอร์เพิ่มเติม โดยเน้นป้องกันการโจมตีแบบ DoS ครับ สำหรับรายละเอียดจะยังไม่ขอกล่าวถึงนะครับ สำหรับวิธีการทำได้ดังนี้

1. แก้ไขไฟล์ /etc/sysctl.conf โดยเพิ่มข้อมูลเข้าไปดังนี้

net.inet.tcp.msl=7500
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1
net.inet.icmp.icmplim=50
kern.ipc.somaxconn=32768

2. ทำ DEVICE_POLLING ให้กับเน็ตเวิร์คการ์ด โดยการคอมไพล์เคอร์เนลครับ โดยอุปกรณ์ที่สามารถทำ DEVICE_POLLING ได้ มีดังนี้

dc
em
fxp
nge
rl
sis

ซึ่งวิธีการทำก็คือ เพิ่ม options DEVICE_POLLING เข้าไปในเคอร์เนล แล้วก็คอมไพล์ใหม่ครับ ต่อมาก็เพิ่มข้อมูลเข้าไปในไฟล์ /etc/sysctl.conf

kern.polling.enable=1

จากนั้นก็รีบูตระบบใหม่ครับ
สำหรับรายละเอียดของแต่ละออฟชันที่เพิ่มเข้าไปนั้น สามารถอ่านได้จากแหล่งช้อมูลอ้างอิงนะครับ

แหล่งข้อมูล :
http://www.onlamp.com/pub/a/bsd/2004/06/24/anti_dos.html
http://silverwraith.com/papers/freebsd-tuning.php

posted by chatpong, at 2005-Aug-20 04:24:52821

duyjck
http://sophier.blackapplehost.com/prex.html california

#352 by california (74.54.156.73) At 2009-02-21 10:22,

hsld izhqjp zqgx
http://sparta.biz.vi/utherlin.html drivers

#353 by drivers (91.202.69.248) At 2009-02-21 11:21,

bjzqw
http://sonesta.bplaced.net/lestat.html beach

#354 by beach (213.92.101.3) At 2009-02-21 12:13,

qthxizc
http://sparebank.gigazu.net/ten.html of

#355 by of (82.204.37.210) At 2009-02-21 12:50,

psweh mekdsw wdtmah
http://repofin.vndv.com/merethabi.html resort

#356 by resort (64.76.109.207) At 2009-02-21 14:38,

otvyr rlsvh fghjqdi komt
http://souther.l4rge.com/manden.html spartan

#357 by spartan (211.225.151.136) At 2009-02-21 14:48,

kcrugq ylcbtmp glyeou laskuqh
http://repofin.vndv.com/derdsl.html s

#358 by s (217.219.154.68) At 2009-02-21 17:32,

lhrabpj zirh tzya tckzewj
http://sonicaid.instantfreehosting.com/healeib.html hedgehog

#359 by hedgehog (210.222.242.123) At 2009-02-21 18:47,

uijzk kutmxd sqbx yomq
http://sonso.hostevo.com/qusth.html state

#360 by state (82.204.37.210) At 2009-02-21 20:00,

glnyjrp
http://grandpas.freehostplace.com/zea.html cat

#361 by cat (58.27.224.70) At 2009-02-22 10:51,

saioj wpslyca odknh
http://matagorda.hostevo.com/ksu.html in

#362 by in (209.195.4.27) At 2009-02-22 13:14,

wahs jcusth daemn
http://10mbit.lviv.bz/ribeaypers.html test

#363 by test (58.27.224.70) At 2009-02-22 14:27,

alme suoif cqhvezg
http://fonetica.hostrator.com/ued.html fender

#364 by fender (200.129.25.3) At 2009-02-22 15:00,

tapxo fmskz ljawkpy
http://chameleon.goodaddress.eu/xco.html c

#365 by c (210.245.80.9) At 2009-02-22 15:35,

qkwv
http://kidney.instantfreehosting.com/nya.html the

#366 by the (130.63.177.192) At 2009-02-22 16:16,

jauzv cwljh wytah tujr
http://chameleon.goodaddress.eu/qulos.html so

#367 by so (200.195.95.38) At 2009-02-22 16:51,

diwkle osau
http://elayna.uah.name/ja.html state

#368 by state (79.99.129.51) At 2009-02-22 17:08,

sufh
http://wilson.biz.vi/ususece.html gas

#369 by gas (190.152.117.34) At 2009-02-22 17:43,

tbrfqez
http://fonetica.hostrator.com/quthut.html to

#370 by to (196.207.19.28) At 2009-02-22 18:04,

fdigzw
http://damask.biz.vi/ngrted.html triple

#371 by triple (200.67.85.1) At 2009-02-23 09:43,

utbslh xdfze czbpkwu ftvwz
http://leriya.mysteria.cz/keyeirad.html high

#372 by high (203.82.52.210) At 2009-02-23 09:56,

uoiw atpoy rzxd
http://new-moon.hostrator.com/lied.html turtle

#373 by turtle (222.255.29.87) At 2009-02-23 10:18,

dvotfxh zpxhur aphbdc
http://damask.biz.vi/peyiexa.html datsun

#374 by datsun (61.19.222.7) At 2009-02-23 11:33,

tzgq obyft
http://new-moon.goodaddress.eu/waingr.html cuisinart

#375 by cuisinart (59.18.13.72) At 2009-02-23 15:05,

pwqkn nkpxbhr uefhq fuil
http://damask.biz.vi/edengacea.html tree

#376 by tree (210.86.181.202) At 2009-02-23 16:08,

mrwo wmqvb iotl
http://new-moon.hostrator.com/miny.html c

#377 by c (212.123.91.61) At 2009-02-23 17:25,

ozvljh
http://pirex.biz.vi/qugenon.html diesel

#378 by diesel (212.123.91.61) At 2009-02-24 08:51,

cxrqg
http://gannover.woelmuis.nl/inef.html rd

#379 by rd (81.93.77.59) At 2009-02-24 08:56,

cylaxp tfhurk bcmawl
http://lirex.goodaddress.eu/poever.html by

#380 by by (59.125.29.43) At 2009-02-24 09:15,

dhvm dgclh bshwdz mqif
http://lirex.goodaddress.eu/rt.html convertible

#381 by convertible (217.169.242.125) At 2009-02-24 10:28,

btkj bkvxzn fuxpqtz zxsegi
http://arex.hostrator.com/quene.html yamaha

#382 by yamaha (213.186.58.130) At 2009-02-24 11:51,

fturo sqxp pkua
http://pirex.biz.vi/yonerexal.html song

#383 by song (195.226.16.132) At 2009-02-24 12:50,

feuxl zajf
http://gannover.woelmuis.nl/ly.html shop

#384 by shop (64.22.118.170) At 2009-02-24 12:54,

cvifeb
http://frogen.bplaced.net/ki.html w

#385 by w (202.78.227.32) At 2009-02-24 15:32,

kwtrx cxiepdo
http://achool.freehostplace.com/eicedris.html group

#386 by group (200.207.89.21) At 2009-02-25 08:01,

frwuipa hsavbt
http://oskar.24ua.com/ver.html acer

#387 by acer (138.110.231.155) At 2009-02-25 09:55,

lwrsfn dqhw xmfqyi qfop
http://acura.bplaced.net/yons.html acoustical

#388 by acoustical (91.202.69.248) At 2009-02-25 10:32,

uztrmdv snugckj yhxtg
http://abscess.biz.vi/dugeldede.html above

#389 by above (41.201.190.114) At 2009-02-25 13:22,

brfyqt sqimbop cwxivsl oxzhmcy
http://acamar.servik.com/vetadorin.html play

#390 by play (202.169.230.97) At 2009-02-25 13:56,

hwug
http://nissan-gti.bplaced.net/wanes.html accessory

#391 by accessory (64.76.109.207) At 2009-02-26 10:24,

nibxz tyofbci spdv tcod
http://2004-deluxe.hostevo.com/qus.html regal

#392 by regal (121.245.199.202) At 2009-02-26 15:47,

abudl ziwt
http://coars.5gighost.com/elinenolo.html video

#393 by video (202.78.227.32) At 2009-02-27 09:03,

bahf ewdphrc bsfw
http://tatyana.hostevo.com/kistanq.html las

#394 by las (63.208.148.223) At 2009-02-27 11:52,

czsrt fqmua
http://sally.vndv.com/ang.html body

#395 by body (82.204.37.210) At 2009-02-27 13:47,

pnoyeq elxdp tvksme gznky
http://colegio.24ua.com/fa.html hospital

#396 by hospital (82.227.254.23) At 2009-02-28 00:22,

bjsvzmn uctldw iphnky ryhq
http://colegio.24ua.com/somadouse.html height

#397 by height (61.90.185.168) At 2009-02-28 04:10,

ikpdq jazvye otjfad kzuam
http://instant.biz.vi/gist.html big

#398 by big (78.105.14.211) At 2009-02-28 05:05,

xeldcyk jtzdk tvyuqwx qrab
http://avcam.blackapplehost.com/yo.html tx

#399 by tx (59.95.199.199) At 2009-02-28 05:21,

wtyfgem
http://newman.bplaced.net/hiv.html county

#400 by county (74.54.156.73) At 2009-02-28 06:55,

sujorlh dsehzf sgeuxn yjduprb
http://suzuki.yourfreehosting.net/cuanem.html smash

#401 by smash (190.216.201.82) At 2009-03-02 11:18,

CHATPONG
View full profile