Setting Firewall Camfrog pada Server Centos

• Cara pertama Setting Firewall Camfrog Server on linux dengan IPTABLES Standart

echo 1 > /proc/sys/net/ipv4/tcp_syncookies
iptables -A INPUT -p tcp –dport 22 -j ACCEPT #SSH PORT
iptables -A INPUT -p tcp –dport 2000:3000 -j ACCEPT
iptables -A INPUT -p tcp –dport 6000:6010 -j ACCEPT #Port Camfrog
iptables -A INPUT -p tcp –dport 5999 -j ACCEPT #Web Panel
iptables -A INPUT -p udp –dport 5000:15000 -j ACCEPT #UDP Camfrog
iptables -A INPUT -p tcp –tcp-flags ALL NONE -j DROP
iptables -A INPUT -p tcp –tcp-flags SYN,FIN SYN,FIN -j DROP
iptables -A INPUT -p tcp –tcp-flags SYN,RST SYN,RST -j DROP
iptables -A INPUT -p tcp –tcp-flags FIN,RST FIN,RST -j DROP
iptables -A INPUT -p tcp –tcp-flags ACK,FIN FIN -j DROP
iptables -A INPUT -p tcp –tcp-flags ACK,PSH PSH -j DROP
iptables -A INPUT -p tcp –tcp-flags ACK,URG URG -j DROP
iptables -A INPUT -m state –state INVALID -j DROP
iptables -A OUTPUT -m state –state INVALID -j DROP
iptables -A FORWARD -m state –state INVALID -j DROP
iptables -A INPUT -p tcp ! –syn -m state –state NEW -j DROP
iptables -A INPUT -p tcp –tcp-flags ALL ALL -j DROP
iptables -A INPUT -p tcp –tcp-flags ALL NONE -j DROP
iptables -N syn-flood
iptables -A syn-flood -m limit –limit 1/second –limit-burst 4 -j RETURN
iptables -A syn-flood -j DROP
iptables -N udp-flood
iptables -A udp-flood -m limit –limit 4/second –limit-burst 4 -j RETURN
iptables -A udp-flood -j DROP
iptables -A INPUT -i eth0 -p tcp –tcp-flags  SYN,RST,ACK,FIN SYN,ACK -j syn-flood
iptables -A INPUT -i eth0 -p tcp ! –syn -m state –state NEW -j DROP
iptables -A INPUT -i eth0 -p udp -j udp-flood
iptables -A INPUT -i eth0 -f -j DROP
iptables -A INPUT -p icmp –icmp-type echo-request -j DROP
service iptables save

• Cara Kedua Setting APF Firewall + IPTABLES + DDOS DEFLATE Untuk Camfrog Server di Linux

#cd /usr/src
#mkdir utils
#cd utils
#wget http://rfxnetworks.com/downloads/apf-current.tar.gz
#tar xfz apf-current.tar.gz
#cd apf-*
#./install.sh
dan edit bagian ini /etc/apf/conf.apf
#nano /etc/apf/conf.apf
#DEVEL_MODE=”0″
#IG_TCP_CPORTS=”22,2000_3000,6000_6010,5999″
#IG_UDP_CPORTS=”2000_3000,5000_15000″
#USE_AD=”1″
#apf –start
Brute Force Detection
#cd /usr/src/utils
#wget http://rfxnetworks.com/downloads/bfd-current.tar.gz
#tar xfz bfd-current.tar.gz
#cd bfd-*
#./install.sh
Edit /usr/local/bfd/conf.bfd
#nano /usr/local/bfd/conf.bfd
#cari EMAIL_USR=”root” dan ganti dengan EMAIL_USR=”user@emailkamu.tld”
#/usr/local/sbin/bfd -s
DDOS DEFLATE
#cd /usr/src/utils
#mkdir ddos
#cd ddos
#wget http://www.inetbase.com/scripts/ddos/install.sh
#sh install.sh
Edit konfigurasi file, /usr/local/ddos/ddos.conf,
#nano /usr/local/ddos/ddos.conf
#/usr/local/ddos/ddos.sh -c
Tambahkan bagia ini di /etc/rc.d/rc.local supaya setiap reboot/restart server aktif
#/usr/local/sbin/apf –start
#/usr/local/ddos/ddos.sh -c