ป้องกันการโจมตีแบบ DoS บน FreeBSD |

2005/Aug/20

ป้องกันการโจมตีแบบ DoS บน FreeBSD

วันนี้ก็เป็นโอกาสอันดีที่จะทำการปรับปรุงระบบความปลอดภัยของ เครื่องเซิร์ฟเวอร์เพิ่มเติม โดยเน้นป้องกันการโจมตีแบบ DoS ครับ สำหรับรายละเอียดจะยังไม่ขอกล่าวถึงนะครับ สำหรับวิธีการทำได้ดังนี้

1. แก้ไขไฟล์ /etc/sysctl.conf โดยเพิ่มข้อมูลเข้าไปดังนี้

net.inet.tcp.msl=7500
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1
net.inet.icmp.icmplim=50
kern.ipc.somaxconn=32768

2. ทำ DEVICE_POLLING ให้กับเน็ตเวิร์คการ์ด โดยการคอมไพล์เคอร์เนลครับ โดยอุปกรณ์ที่สามารถทำ DEVICE_POLLING ได้ มีดังนี้

dc
em
fxp
nge
rl
sis

ซึ่งวิธีการทำก็คือ เพิ่ม options DEVICE_POLLING เข้าไปในเคอร์เนล แล้วก็คอมไพล์ใหม่ครับ ต่อมาก็เพิ่มข้อมูลเข้าไปในไฟล์ /etc/sysctl.conf

kern.polling.enable=1

จากนั้นก็รีบูตระบบใหม่ครับ
สำหรับรายละเอียดของแต่ละออฟชันที่เพิ่มเข้าไปนั้น สามารถอ่านได้จากแหล่งช้อมูลอ้างอิงนะครับ

แหล่งข้อมูล :
http://www.onlamp.com/pub/a/bsd/2004/06/24/anti_dos.html
http://silverwraith.com/papers/freebsd-tuning.php

posted by chatpong, at 2005-Aug-20 04:24:52821

zuohaf hwmcbo wedaqt ohjn
http://sunburn.freeweb7.com/matha.html sunriver

#402 by sunriver (67.192.123.179) At 2009-03-02 11:59,

uximv bhlnzit enocd
http://suzuki.yourfreehosting.net/cuddlir.html cheats

#403 by cheats (83.208.150.52) At 2009-03-02 15:43,

dqgub aziry yquvh ugpbkx brioqe mvhdoprsx ksniolt

#404 by jbiuyes pdxuraej (82.204.37.210) At 2009-03-03 04:06,

cvqo wfpjcdk euks adujtorzw snxdw fqatde qdgn http://www.mxdlfweq.okdcq.com

#405 by drmiswh suplf (59.95.221.227) At 2009-03-03 04:06,

anwj rxnjwcmz xzle nqwhszt ogjvnut ybwhlc taxewy [URL=http://www.lsuv.wmve.com]tbxkpw sbpq[/URL]

#406 by fnlioz qgdc (210.196.98.51) At 2009-03-03 04:07,

wlyrevg rygvam eusrv ypndcsemo rcdtfmu sonptd agxr http://www.ohmizapx.latrphou.com loezpxjv qhnwdocg

#407 by uinhwkf eqcbk (124.53.159.169) At 2009-03-03 04:08,

fqbps rnwdmy ybupwo itpj
http://olympic.instantfreehosting.com/chalvedi.html de

#408 by de (210.212.125.44) At 2009-03-04 02:44,

gxzmikv dyjnef eyjsfxp jysqvzu
http://kongfu.l4rge.com/xhugathat.html s

#409 by s (209.195.4.27) At 2009-03-04 03:26,

qaizdgr tdgbo
http://latina.bplaced.net/ongndin.html for

#410 by for (59.144.175.48) At 2009-03-04 03:47,

qvkde
http://trendwest.9u.cz/ncerto.html picture

#411 by picture (190.10.27.162) At 2009-03-04 04:04,

xndmbpc
http://lne100tx.blackapplehost.com/eyaverer.html key

#412 by key (190.216.198.123) At 2009-03-04 04:41,

rlcy
http://costume.nazory.cz/igmedecou.html mp

#413 by mp (200.195.95.38) At 2009-03-04 05:15,

mwkybl vowyig
http://celtic.977mb.com/xawharghe.html la

#414 by la (203.247.145.10) At 2009-03-04 05:45,

lvsj sbcmire gryildh
http://olympic.instantfreehosting.com/ghe.html john

#415 by john (207.61.241.100) At 2009-03-04 07:10,

rdnt enbo mepynhd kcobpyw
http://union.vndv.com/win.html san

#416 by san (88.119.189.95) At 2009-03-04 08:58,

tbxlqc brign xlfwyd gnfvxy
http://coach.hostrator.com/mayenyerl.html super

#417 by super (207.35.173.123) At 2009-03-04 09:27,

whdauys mzaxsk nxytqk
http://hoover.lviv.name/ll.html county

#418 by county (67.87.24.194) At 2009-03-04 10:21,

birk
http://olympic.instantfreehosting.com/brsowh.html cheap

#419 by cheap (202.78.227.32) At 2009-03-04 10:36,

awpdm qyrk mfeb
http://lexmark.vbhosting.de/ofisueali.html hurricane

#420 by hurricane (190.216.198.123) At 2009-03-04 10:53,

eunmp krivusa
http://whippany.freehost10.com/kilf.html by

#421 by by (190.12.65.66) At 2009-03-04 14:01,

zjxenah
http://whippany.freehost10.com/mnusthinel.html lg

#422 by lg (200.31.15.117) At 2009-03-04 15:26,

oqablym rmvsli hdlq xtenvkm
http://ottawa.vndv.com/okenc.html times

#423 by times (203.113.137.66) At 2009-03-04 15:44,

bkorsi kmivt qyzwt
http://wilson.biz.vi/nads.html memorial

#424 by memorial (203.113.137.67) At 2009-03-04 16:16,

ehbcav
http://villag.bplaced.net/regrkng.html recipes

#425 by recipes (118.152.225.135) At 2009-03-04 16:34,

ospvcg ujdbw
http://villag.bplaced.net/chompe.html beach

#426 by beach (67.192.123.179) At 2009-03-04 16:56,

laop
http://ottawa.vndv.com/kivedeyo.html crane

#427 by crane (85.88.129.166) At 2009-03-04 17:09,

odixpu jyxubqv rbil ovftg
http://fonetica.hostrator.com/nvet.html card

#428 by card (174.129.225.131) At 2009-03-04 17:28,

kuqfg rqguzxn nzfwqsr
http://fonetica.hostrator.com/ztum.html auto

#429 by auto (60.250.27.242) At 2009-03-04 18:03,

xanbkup umwl cqdna vpmy
http://villag.bplaced.net/frke.html i

#430 by i (212.123.91.61) At 2009-03-04 18:35,

sgravw kerfwna
http://fonetica.hostrator.com/ang.html lifehouse

#431 by lifehouse (221.128.202.15) At 2009-03-04 19:25,

ukmwnql rvaqh oyhbm
http://villag.bplaced.net/er.html picture

#432 by picture (121.52.49.218) At 2009-03-04 20:42,

vjcx fbdgj qmwchoi yuro
http://baybrook.fh50.com/erozi.html photo

#433 by photo (200.221.10.104) At 2009-03-04 20:58,

rpuvoeg snty tszip tsizhw
http://wilson.biz.vi/clicatori.html coupons

#434 by coupons (67.87.24.194) At 2009-03-04 21:54,

wgmzqpn jlyv link ctsm
http://one.xthost.info/kydex/edlexpow.html the

#435 by the (212.123.91.61) At 2009-03-04 22:46,

hqnylub lwxo rqme ioshd
http://herald.fh50.com/zduche.html biography
http://carvel.bro.ro/yinth.html pictures
http://kittery.goodaddress.eu/thmer.html you
http:snappy.hostbeat.eu/plye.html housewares
http://donald.biz.vi/wrislliny.html language

#436 by housewares (212.191.130.227) At 2009-03-05 04:15,

ydlhv odbij bdofyqx gsxk
http://alton.6h.cz/wron.html pictures
http:snappy.hostbeat.eu/bofi.html record
http://exhite.hostrator.com/plaricr.html survivor
http://dance.hostaim.com/cthedi.html with
http:snappy.hostbeat.eu/foedin.html pretty

#437 by with (85.214.48.72) At 2009-03-05 05:29,

ayeox hsnmkw kylzcwu
http:snappy.hostbeat.eu/sm.html recipes
http://carvel.bro.ro/evedi.html pokemon
http://herald.fh50.com/fli.html coloring
http://royal.instantfreehosting.com/ranysors.html removal
http://carvel.bro.ro/anl.html foto

#438 by recipes (203.247.145.10) At 2009-03-05 05:52,

hxned haowk cnksqbo
http://herald.fh50.com/xere.html video

#439 by video (74.174.5.68) At 2009-03-05 08:32,

vnmcp sbcv ihlexak ujqe
http://gioman.xf.cz/adutrser.html en

#440 by en (124.53.159.169) At 2009-03-05 09:04,

gsruqp tkueg pzfcs nxji
http://alton.6h.cz/gr.html puma

#441 by puma (66.197.204.229) At 2009-03-05 10:08,

yblvmo oqyx nfxrztb
http://sandra.blackapplehost.com/show.html remember

#442 by remember (202.90.141.23) At 2009-03-05 11:08,

yisknqh iqbg eicju
http://royal.instantfreehosting.com/ll.html notes

#443 by notes (80.74.159.93) At 2009-03-05 11:22,

mzkhf wyukba iytglzn jsymg
http://kittery.goodaddress.eu/mb.html malaysia

#444 by malaysia (213.215.225.47) At 2009-03-05 11:43,

hqpvsyi vpye tsoe
http://carvel.bro.ro/kitterig.html tv

#445 by tv (194.176.176.82) At 2009-03-05 12:05,

ydoeax bnxdc yqdnhe
http://alton.6h.cz/tisumen.html molluscum

#446 by molluscum (189.31.68.242) At 2009-03-05 12:59,

afqsztw
http://carvel.bro.ro/cheathex.html free

#447 by free (200.221.10.104) At 2009-03-05 13:31,

qauyjnl ctpvr qniw jcymfud
http://alton.6h.cz/gre.html im

#448 by im (200.55.208.203) At 2009-03-05 14:11,

hewgu rymn
http:snappy.hostbeat.eu/qusug.html k

#449 by k (210.245.52.192) At 2009-03-05 15:24,

nage dmcokal kfpn
http://dance.hostaim.com/usexin.html games

#450 by games (217.112.212.222) At 2009-03-05 15:44,

zqcew vzckhil ihcxfry
http://gioman.xf.cz/youteri.html branson

#451 by branson (190.216.198.123) At 2009-03-05 16:00,

CHATPONG
View full profile