stop ddos attack linux

Objective Address space layout randomization (ASLR), which can become a technique to circumvent attacks if you know the target code or data location. Because hackers do not know the layout of the entire address space, ASLR technology becomes extremely effective. Only when an executable is compiled to PIE (address-independent executables) can you maximize protection from the ASLR technology, because all of its components are loaded from random addresses. However, when the executable is compiled

If you suspect a Dos attack in Linux, you can enter netstat-angrep-I "server IP address: 80 "awk'' {print} 'sortuniq-csort-nnetstat-angrepSYNwc-l this command will automatically count the number of Tcp connections in various states, if SYN_RECV is very high If you suspect a Dos attack in Linux, you can enter Netstat-

Since the invention of TCP in 1974, after more than 30 years of development, it is now the most important Internet infrastructure protocol, but there are some shortcomings in the TCP protocol.SYN attack is the use of TCP protocol defects, to cause system services to stop the normal response.SYN attack principle TCP takes three handshake before passing data,

Linux VPS System anti-CC attack automatic pull black IP script is divided into 2 versions, the normal version is added to the crontab scheduled tasks performed every 5 minutes. Enhanced version is mainly to make up for the use of crontab execution time interval is only a minimum of 1 minutes, you can make CC protection more stringent, even every 1S execution once! Function Description: Through the Netstat-

-party software Installation/root Root User's home directory/sys contains the hardware status and the system kernel sees the device tree/usr other users apply graphics and command filesFour, switch network card, start networking Services, configure the networkIfup eth0 Start Network cardIfdown eth0 turn off the NICService Network Start/restart start networking ServicesService Network stop Shutdown Network ServiceV. BASIC commandscd = Change Directoryl

First, Linux security introduction1, the impression of Linux security2, whether have encountered the invasion, what are the phenomena, how to solve the3, the process of hacking, how to defendIi. Linux attack and defense1, common Trojan control terminal function (10771TCP, 10991UDP, integrated Control terminal 6886) (Co

Initially thought it was MySQL that the extension between them did not open!Later found that the Trojan did make it initialized, and at first did not use a graphical interfaceThen, modify and turn on all PDO extensionsVIM basic operation (except for inserting, the other command is the premise of pressing ESC):insert: I press ESC to operate (if you want to force exit, you need to add !) ) Exit: Q Exit and Save: WqInquireExample:/XXX instance:/Pdo_Cat View Commands (The following parameters are v