软件包:dtc-xen-firewall(0.5.17-1.2)
small firewall script for your dom0
If running in a production environment, you might want to have a basic firewall running on your dom0 to avoid having DoS attack. This is not the state-of-the-art, but just another attempt to make things a bit more smooth. Comments and contribution are more than welcome!
The main principle of this firewall script is to rate limit connections to both your dom0 and your VPSes. It's principle is NOT block any connection. For example, dtc-xen-firewall denies ssh for 300 seconds after 10 attempts on your dom0, rate limit ping to 5 per seconds on your dom0 and to 50/s globally for all your VPS, and does the same kind of thing for SYN flood attacks. Take care, it also blocks any connection to the port 25, as in a normal dom0, you would install a mail server to send system messages to the administrators, but you don't want to accept any incoming message.
其他与 dtc-xen-firewall 有关的软件包
|
|
|
|
-
- dep: debconf
- Debian 配置管理系统
-
- dep: debconf (>= 0.5)
- Debian 配置管理系统
- 或者 debconf-2.0
- 本虚包由这些包填实: cdebconf, cdebconf-udeb, debconf
-
- dep: iptables
- 数据包过滤和网络地址转换(NAT)管理工具
-
- dep: lsb-base
- Linux 标准规范初始化脚本功能