Saturday, June 18, 2011

Antisipasi DDOS / Ping flood dg menutup port ICMP

Tutup port ICMP melalu sysctl, cek dengan menjalankan perintah ini
/sbin/sysctl -A|grep icmp
net.ipv6.icmp.ratelimit = 1000
net.ipv4.icmp_ratemask = 6168
net.ipv4.icmp_ratelimit = 1000
net.ipv4.icmp_errors_use_inbound_ifaddr = 0
net.ipv4.icmp_ignore_bogus_error_responses = 1
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_echo_ignore_all = 0

Kemudian ubah atau tambahkan settingan:
net.ipv4.icmp_echo_ignore_all = 0, menjadi net.ipv4.icmp_echo_ignore_all = 1
pada /etc/sysctl.conf

kemudian reboot network #/etc/init.d/network restart
coba PING bisa tidak ??
Share:

0 comments:

Post a Comment

Followers

Total Pageviews

Definition List

Unordered List

Support