Denial Of Service Attacks

[MetalheadGautham]

Can someone please suggest me measures to avoid getting denial of service attacks on my system ?

I have ensured that internal defects are lacking on my PC, so under normal usage, it can't be easily hacked, infected by viruses, torjans, worms, etc. Even the programs I use are generally bug free. Not a CD inserted on my PC since its securing has been able to infect it, despite the CD being known to contain viruses. I don't use adware and malware. I am too clever to get phished. Email bombs don't blow up when I open them. But the only feild I am yet to secure my computer (or atleast I am not sure I have secured it) is denial of service attacks.

So can you tell me the list of things to do, so that without affecting, or only minimally affecting normal internet usage, I can escape denial of service attacks, if any ? I use BSNL H500 broadband, so I have variable IP address, just thought you might want to know.

[GeekyBoy]

Do you experience DOS attacks often? Plz Explain the situation if you had earlier experienced a DOS attack and maybe we can help.

[siddes]

You're unlikely to be the target of a DOS attack unless someone really has got something against you.

And even then, all that will be attacked is the ability of others to contact or visit a site hosted on your computer or maybe just busy up your processor to an extent that your computer slows down considerably.

If you're using a limited BSNL net connection, then the attacker can eat up all your bandwidth. But the point is, why?

Oh, the best defense against a DOS attack is disconnecting from the net

Or switching off your computer

[nitish_mythology]

Even I would like to know the answer...
But practically the chances of urs suffering from DOS attacks are remote..n u even dont have a static ip..
Paranoid??

[Pathik]

Why should you be concerned abou a DoS attack unless you are hosting a site on your home computer??

[ring_wraith]

A DOSA [lol...] is highly unlikely unless some one genuinely has a grudge against you. The Dynamic IP itself is one of the measures adopted to prevent such an occasion.

Still, if you are that paranoid, get yourself a good firewall. It should block all DOSAs [again, lol.]

[Faun]

Use Comodo firewall, it has automatic configuration to prevent malicious pings, and DOS attacks. U can manually configure them too.

[MetalheadGautham]

well, yes I am paranoid.
and I hence use linux.
and I never ever got attacked.
but I want to be completely secure, so here I am.

[praka123]

^use shorewall to secure. !
DOS attacks-flooding with incoming requests?

[MetalheadGautham]

Originally Posted by praka123

^use shorewall to secure. !
DOS attacks-flooding with incoming requests?

I am thinking of webhosting on my PC, so I asked.

shorewall ? what is it ?
and what about suggesting me a good lokkit GUI ?
I heard fedora has a better firewall than ubuntu. Is it true ?

[Garbage]

Originally Posted by MetalheadGautham

I am thinking of webhosting on my PC, so I asked.

shorewall ? what is it ?
and what about suggesting me a good lokkit GUI ?
I heard fedora has a better firewall than ubuntu. Is it true ?

are you talking about SELinux, which is enabled by default in fedora ??

[praka123]

actually lokkit is by default used in fedora

[MetalheadGautham]

Originally Posted by Garbage

are you talking about SELinux, which is enabled by default in fedora ??

Originally Posted by praka123

actually lokkit is by default used in fedora

er... which of the two should I run after again ?

[Faun]

I think all linux distros hav IPtables module for firewall

Its the GUI that u can get by 3rd party, Firestarter is one of them (its better for a newbie and feature rcih, lokkit comes for newbie geeks (slightly hard than firestarter)

But beware Firestarter uses it own IPtables modules and shuts down the default IPtables mudules

[praka123]

oh!you want to run server?then configuring iptables firewall using utils like shorewall is better

lokkit is for simple home/office use net protection only(the rules for iptables set by lokkit is very simple).

SE linux is good(infact very good) but a pita sadly for intermediate Linux ppl too!

The best thing is,you set up iptables rules acc. to your needs.
refer iptables documentation!

[MetalheadGautham]

Originally Posted by praka123

oh!you want to run server?then configuring iptables firewall using utils like shorewall is better

lokkit is for simple home/office use net protection only(the rules for iptables set by lokkit is very simple).

SE linux is good(infact very good) but a pita sadly for intermediate Linux ppl too!

talking about iptables, I can't connect to the net in ubuntu unless I do a sudo iptables --flush each time I log in. Any possible cause for it ?

And I first and foremost need protection for home use, then to protect me while running servers for a long time.

Can you eloborate a bit more on SE Linux ?

[Faun]

check 3.3 section to remedy every reboot flush
http://ubuntuforums.org/showthread.php?t=159661
And also get a brief walkthrough, this page is precious