Server Security: an effective way to prevent denial of service attacks - server security, denial of service attack, DOS-education industry

Server Security: an effective way to prevent denial of service attacks - server security

, denial of service attack, DOS-education industry

Server Security: an effective way to prevent denial of service attacks

Currently have a network so that network administrators the most headache attacks, it is a denial of service attacks, referred to as DOS and DDOS. It is a misuse of resources of the attack was to use its own resources through a

Zoom in or not so as to attain the consumption of other resources. The same time many different IP on the server Visit Service failure and even cause the server crashed.

Management server, today the author's experience for you readers some simple and effective method of preventing denial of service attacks, although not completely protective, but the battle with the DDOS can minimize losses.

1, how to find attacks The server CPU utilization and memory through the utilization of simple and effective view the current server load, and if the server suddenly find ultra-load operation, a sudden drop in performance, which may be a sign of attack. However, it also may be normal visit reasons for the increase. How to distinguish between the two situations? Can be determined in accordance with the following two principles under attack.

(1) website traffic suddenly beyond the normal 10 times or even hundred times, but also site of packet arrival from a number of different IP.

(2) a large number of arrival packets (including TCP packets and UDP packets) are not part of Web services to connect, often point to your machine any port. For example your site is Web server, the data packet is sent to your FTP port or other arbitrary port.

2, BANIP address method Sure to attack, ready to use the simple method of shielding IP DOS attacks will be resolved. The DOS attack is very effective in this way, because DOS is often a small amount of IP addresses from, and these IP addresses are fictional disguise. The server or Router IP on the screen after an attacker can effectively prevent DOS attacks. But it was too much trouble for DDOS, we need IP addresses on the analysis, the real IP address shield attack.

Whether to deal with DOS or DDOS We need to install the appropriate server Firewall , And then the firewall log analysis visitors IP, discovered the abnormal large IP access can add the appropriate section of the rules to implement filtering firewall.

Filtering directly on the server of course, will spend a certain server system resources, we now have more effective method is to locate the server through a firewall log illegal IP section, then add an entry to the filter on the router. For example, we find that the illegal DDOS attack for the 211.153.0.0255.255.0.0 IP segment, while the server's address is 61.153.5.1. You can visit the company's core routers, add the following statement to filter the access control list.

Cess-list108denytcp211.153.0.00.0.255.25561.135.5.10.0.0.0, thus achieved the 211.153.0.0255.255.0.0 illegal IP filtering purposes.

Tip: In the access control list that need to use the reverse mask subnet mask, which means that a subnet mask of 0.0.255.255 255.255.0.0.

3, increase the SYN cache method

Although the above-mentioned BANIP method can effectively prevent the DOS and DDOS attacks, but due to the shielding IP functionality, naturally mistook some of the normal access to IP are filtered out.

POST COMMENT

Education and Online Security…What's the link? 'Social media's role in Education' Enable happy education by curbing hunger Graphing Calculators-Understanding and using it for Education Art Courses School in Australia How to prepare for boarding school NGO India - Education, Hiv Aids NGO, Women and Children Ngo with Registration and Formation Education Jobs - Top 5 Jobs In Education Education Teaching Jobs - Tips To Landing A Teaching Job Education And Training Jobs - Top 10 Things You Should Know About Them Teacher Jobs - 5 Tips For Every Teacher Purposes to get education in an alternative medicine institute Education Grants And Single Mothers Funny Bandz School Project