Denial Of Service Attacks

[MetalheadGautham]

Can someone please suggest me measures to avoid getting denial of service attacks on my system ?

I have ensured that internal defects are lacking on my PC, so under normal usage, it can't be easily hacked, infected by viruses, torjans, worms, etc. Even the programs I use are generally bug free. Not a CD inserted on my PC since its securing has been able to infect it, despite the CD being known to contain viruses. I don't use adware and malware. I am too clever to get phished. Email bombs don't blow up when I open them. But the only feild I am yet to secure my computer (or atleast I am not sure I have secured it) is denial of service attacks.

So can you tell me the list of things to do, so that without affecting, or only minimally affecting normal internet usage, I can escape denial of service attacks, if any ? I use BSNL H500 broadband, so I have variable IP address, just thought you might want to know.

 

[GeekyBoy]

Do you experience DOS attacks often? Plz Explain the situation if you had earlier experienced a DOS attack and maybe we can help.

 

[siddes]

You're unlikely to be the target of a DOS attack unless someone really has got something against you.

And even then, all that will be attacked is the ability of others to contact or visit a site hosted on your computer or maybe just busy up your processor to an extent that your computer slows down considerably.

If you're using a limited BSNL net connection, then the attacker can eat up all your bandwidth. But the point is, why?

Oh, the best defense against a DOS attack is disconnecting from the net

Or switching off your computer

 

[nitish_mythology]

Even I would like to know the answer...
But practically the chances of urs suffering from DOS attacks are remote..n u even dont have a static ip..
Paranoid??

 

[Pathik]

Why should you be concerned abou a DoS attack unless you are hosting a site on your home computer??

 

[ring_wraith]

A DOSA [lol...] is highly unlikely unless some one genuinely has a grudge against you. The Dynamic IP itself is one of the measures adopted to prevent such an occasion.

Still, if you are that paranoid, get yourself a good firewall. It should block all DOSAs [again, lol.]

 

[Faun]

Use Comodo firewall, it has automatic configuration to prevent malicious pings, and DOS attacks. U can manually configure them too.

 

[MetalheadGautham]

well, yes I am paranoid.
and I hence use linux.
and I never ever got attacked.
but I want to be completely secure, so here I am.

 

[praka123]

^use shorewall to secure. !
DOS attacks-flooding with incoming requests?

 

[MetalheadGautham]

^use shorewall to secure. !
DOS attacks-flooding with incoming requests?

I am thinking of webhosting on my PC, so I asked.

shorewall ? what is it ?
and what about suggesting me a good lokkit GUI ?
I heard fedora has a better firewall than ubuntu. Is it true ?

 

[Garbage]

I am thinking of webhosting on my PC, so I asked.

shorewall ? what is it ?
and what about suggesting me a good lokkit GUI ?
I heard fedora has a better firewall than ubuntu. Is it true ?

are you talking about SELinux, which is enabled by default in fedora ??

 

[praka123]

actually lokkit is by default used in fedora

 

[MetalheadGautham]

are you talking about SELinux, which is enabled by default in fedora ??

actually lokkit is by default used in fedora

er... which of the two should I run after again ?

 

[Faun]

I think all linux distros hav IPtables module for firewall

Its the GUI that u can get by 3rd party, Firestarter is one of them (its better for a newbie and feature rcih, lokkit comes for newbie geeks (slightly hard than firestarter)

But beware Firestarter uses it own IPtables modules and shuts down the default IPtables mudules

 

[praka123]

oh!you want to run server?then configuring iptables firewall using utils like shorewall is better

lokkit is for simple home/office use net protection only(the rules for iptables set by lokkit is very simple).

SE linux is good(infact very good) but a pita sadly for intermediate Linux ppl too!

The best thing is,you set up iptables rules acc. to your needs.
refer iptables documentation!

 

[MetalheadGautham]

oh!you want to run server?then configuring iptables firewall using utils like shorewall is better

lokkit is for simple home/office use net protection only(the rules for iptables set by lokkit is very simple).

SE linux is good(infact very good) but a pita sadly for intermediate Linux ppl too!

talking about iptables, I can't connect to the net in ubuntu unless I do a sudo iptables --flush each time I log in. Any possible cause for it ?

And I first and foremost need protection for home use, then to protect me while running servers for a long time.

Can you eloborate a bit more on SE Linux ?

 

[Faun]

check 3.3 section to remedy every reboot flush
*ubuntuforums.org/showthread.php?t=159661
And also get a brief walkthrough, this page is precious