Пакет: dtc-xen-firewall (0.5.13-3)
Връзки за dtc-xen-firewall
Ресурси за Debian:
- Доклади за грешки
- Информация за разработчици (PTS)
- Журнал на промените в Debian
- Авторски права
- Управление на кръпките в Debian
Изтегляне на пакет-източник dtc-xen.
- Начална страница [www.gplhost.com]
A small firewall script for your dom0
If running in a production environment, you might want to have a basic firewall running on your dom0 to avoid having DoS attack. This is not the state-of-the-art, but just another attempt to make things a bit more smooth. Comments and contribution are more than welcome!
The main principle of this firewall script is to rate limit connections to both your dom0 and your VPSes. It's principle is NOT block any connection. For example, dtc-xen-firewall denies ssh for 300 seconds after 10 attempts on your dom0, rate limit ping to 5 per seconds on your dom0 and to 50/s globally for all your VPS, and does the same kind of thing for SYN flood attacks. Take care, it also blocks any connection to the port 25, as in a normal dom0, you would install a mail server to send system messages to the administrators, but you don't want to accept any incoming message.
Други пакети, свързани с dtc-xen-firewall