{"id":747,"date":"2009-09-26T07:42:33","date_gmt":"2009-09-26T07:42:33","guid":{"rendered":"http:\/\/pchero21.com\/?p=747"},"modified":"2009-09-26T07:42:33","modified_gmt":"2009-09-26T07:42:33","slug":"2-%eb%84%a4%ed%8a%b8%ec%9b%8c%ed%81%ac-%ea%b3%84%ec%b8%b5-%ea%b3%b5%ea%b2%a9%ea%b3%bc-%eb%b0%a9%ec%96%b4","status":"publish","type":"post","link":"http:\/\/pchero21.com\/?p=747","title":{"rendered":"2. \ub124\ud2b8\uc6cc\ud06c \uacc4\uce35 \uacf5\uaca9\uacfc \ubc29\uc5b4"},"content":{"rendered":"

  * iptables \ub97c \uc774\uc6a9\ud55c \ub124\ud2b8\uc6cc\ud06c \uacc4\uce35 \ud5e4\ub354\uc758 \uae30\ub85d<\/span><\/p>\n

 iptables \ub85c \ub9cc\ub4e0 \ubc29\ud654\ubcbd\uc740 iptables \uc758 LOG \ud0c0\uac9f\uc744 \uc774\uc6a9\ud574\uc11c IPv4 \ud5e4\ub354\uc758 \uac70\uc758 \ubaa8\ub4e0 \ud56d\ubaa9\uc5d0 \ub300\ud55c \ub85c\uadf8 \ub370\uc774\ud130\ub97c syslog \uc5d0 \uc791\uc131\ud560 \uc218 \uc788\ub2e4.<\/p>\n

 – IP \uc635\uc158\uc758 \uae30\ub85d
 IP \uc635\uc158\uc740 IP \ud1b5\uc2e0\uc5d0 \ub2e4\uc591\ud55c \uc81c\uc5b4 \uae30\ub2a5\uc744 \uc81c\uacf5\ud558\ub294\ub370, \uc774\ub7ec\ud55c \uae30\ub2a5\uc5d0\ub294 \ud0c0\uc784\uc2a4\ud0ec\ud504(timestamp), \ubcf4\uc548 \uae30\ub2a5, \ud2b9\uc218 \ub77c\uc6b0\ud305 \uae30\ub2a5\uc744 \uc704\ud55c \uaddc\uc815\ub4f1\uc774 \uc788\ub2e4. IP \uc635\uc158\uc740 \uac00\ubcc0 \uae38\uc774\ub97c \uac00\uc9c0\uba70 \uc778\ud130\ub137\uc5d0\uc11c \uc0c1\ub300\uc801\uc73c\ub85c \ub4dc\ubb3c\uac8c \uc0ac\uc6a9\ub41c\ub2e4. IP \uc635\uc158\uc774 \uc5c6\uc73c\uba74 IP \ud328\ud0b7 \ud5e4\ub354\ub294 \uc5b8\uc81c\ub098 \uc815\ud655\ud788 20\ubc14\uc774\ud2b8\uc774\ub2e4. iptables \uac00 IP \ud5e4\ub354\uc758 \uc635\uc158\uc744 \uae30\ub85d\ud558\uac8c \ud558\ub824\uba74 \ub2e4\uc74c\uc758 \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud55c\ub2e4.<\/p>\n

 # iptables -A INPUT -j LOG –log-ip-options<\/p><\/blockquote>\n

 – ICMP\uc758 \uae30\ub85d
 iptables LOG \ud0c0\uac9f\uc740 ICMP\ub97c \uae30\ub85d\ud558\uae30 \uc704\ud55c \ucf54\ub4dc\ub97c \uac00\uc9c0\uba70, ICMP \ub294 \ub124\ud2b8\uc6cc\ud06c \uacc4\uce35\uc5d0 \uc874\uc7ac\ud55c\ub2e4. ICMP(RFC 792 \uc5d0\uc11c \uc815\uc758)\ub294 32\ube44\ud2b8\uc5d0 \ubd88\uacfc\ud55c \ub2e8\uc21c\ud55c \ud5e4\ub354\ub97c \uac00\uc9c4\ub2e4. \uc774 \ud5e4\ub354\ub294 \uc720\ud615(8\ube44\ud2b8), \ucf54\ub4dc(8\ube44\ud2b8), \uccb4\ud06c\uc12c(16\ube44\ud2b8) \uc758 \uc138 \uac00\uc9c0 \ud56d\ubaa9\uc73c\ub85c \uad6c\uc131\ub41c\ub2e4. \ub098\uba38\uc9c0 \ud56d\ubaa9\uc740 ICMP \ud328\ud0b7\uc758 \ub370\uc774\ud130 \ubd80\ubd84\uc5d0 \uc18d\ud55c\ub2e4.<\/p>\n

 \ub370\uc774\ud130 \ubd80\ubd84\uc758 \ud2b9\uc815 \ud56d\ubaa9\uc740 ICMP\uc720\ud615\uacfc \ucf54\ub4dc \uac12\uc5d0 \ub530\ub77c \ub2ec\ub77c\uc9c4\ub2e4. \uc608\ub97c \ub4e4\uc5b4 ICMP \uc5d0\ucf54 \uc694\uccad(\uc720\ud6158, \ucf54\ub4dc0)\uacfc \uad00\ub828\ub41c \ud56d\ubaa9\uc5d0\ub294 ID \uc640 \uc21c\uc11c \ubc88\ud638(sequence) \uac12\uc774 \ud3ec\ud568\ub41c\ub2e4.<\/p>\n

 IP \ud5e4\ub354\uc640 \ub9c8\ucc2c\uac00\uc9c0\ub85c LOG \ud0c0\uac9f\uc740 \ud56d\uc0c1 ICMP \uc720\ud615\uacfc \ucf54\ub4dc \ud56d\ubaa9\uc744 \uae30\ub85d\ud558\uba70 ICMP \uccb4\ud06c\uc12c \ud56d\ubaa9\uc740 \uc808\ub300 \uae30\ub85d\ud558\uc9c0 \uc54a\ub294\ub2e4. iptables\uc5d0\ub294 LOG \ud0c0\uac9f\uc774 ICMP \ud328\ud0b7\uc758 \ub370\uc774\ud130 \ubd80\ubd84\uc5d0 \uc18d\ud55c \ud56d\ubaa9\uc744 \ucd9c\ub825\ud558\uac8c \ud560 \uc218 \uc788\ub294 \uba85\ub839 \ud589 \uc778\uc790\uac00 \uc5c6\ub2e4.<\/p>\n

  * \ub124\ud2b8\uc6cc\ud06c \uacc4\uce35 \uacf5\uaca9 \uc815\uc758<\/span><\/p>\n

 \ub124\ud2b8\uc6cc\ud06c \uacc4\uce35 \uacf5\uaca9\uc740 \ub9d0\ub2e8 \ud638\uc2a4\ud2b8\uc758 \ub124\ud2b8\uc6cc\ud06c \uc2a4\ud0dd \uad6c\ud604\uc5d0 \uc874\uc7ac\ud558\ub294 \ucde8\uc57d\uc810\uc744 \uacf5\uaca9\ud558\uac70\ub098 \ub124\ud2b8\uc6cc\ud06c \uacc4\uce35 \uc790\uc6d0\uc744 \uc18c\ube44\ud558\uac70\ub098 \uc0c1\uc704 \uacc4\uce35\uc5d0 \ub300\ud55c \uacf5\uaca9 \uc804\ub2ec\uc744 \uc228\uae30\uae30 \uc704\ud574 \ub124\ud2b8\uc6cc\ud06c \uacc4\uce35\uc758 \ud5e4\ub354 \ud56d\ubaa9\uc744 \uc545\uc6a9\ud558\ub294 \ud328\ud0b7\ub4e4\ub85c \uc815\uc758\ub41c\ub2e4.<\/p>\n

 \ub124\ud2b8\uc6cc\ud06c \uacf5\uaca9\uc740 \uc544\ub798\uc640 \uac19\uc774 \uc138 \uc885\ub958\ub85c \ub098\ub25c\ub2e4.<\/p>\n

 – \ud5e4\ub354 \uc545\uc6a9 : \uc545\uc758\uc801\uc73c\ub85c \uad6c\uc131\ub410\uac70\ub098 \uae68\uc9c4, \ub610\ub294 \ubcc0\uc870\ub41c \ub124\ud2b8\uc6cc\ud06c \uacc4\uce35 \ud5e4\ub354\ub97c \ud3ec\ud568\ud558\ub294 \ud328\ud0b7. \uc608\ub97c \ub4e4\uc5b4 \uc2a4\ud478\ud551\ub41c \ucd9c\ubc1c\uc9c0 \uc8fc\uc18c\ub97c \uac00\uc9c0\ub294 IP \ud328\ud0b7\uacfc \ube44\ud604\uc2e4\uc801 \uc778 \ub2e8\ud3b8\ud654 \uc624\ud504\uc14b(fragment offset) \uac12\uc744 \ud3ec\ud568\ud558\ub294 \ud328\ud0b7\uc774 \uc788\ub2e4.<\/p>\n

 – \ub124\ud2b8\uc6cc\ud06c \uc2a4\ud0dd \uacf5\uaca9 : \ub9d0\ub2e8 \ud638\uc2a4\ud2b8\uc758 \ub124\ud2b8\uc6cc\ud06c \uc2a4\ud0dd \uad6c\ud604\uc5d0 \uc874\uc7ac\ud558\ub294 \ucde8\uc57d\uc810\uc744 \uacf5\uaca9\ud558\uac8c \uc124\uacc4\ub41c \ud2b9\uc218 \ucef4\ud3ec\ub10c\ud2b8\ub97c \ud3ec\ud568\ud558\ub294 \ud328\ud0b7. \uc989, \ub124\ud2b8\uc6cc\ud06c \uacc4\uce35 \uc815\ubcf4\ub97c \ucc98\ub9ac\ud558\ub294 \ucf54\ub4dc \uc790\uccb4\uac00 \uacf5\uaca9 \ubaa9\ud45c\ub2e4. \ub300\ud45c\uc801\uc778 \uc608\ub85c\ub294 \ub9ac\ub205\uc2a4 \ucee4\ub110(\ubc84\uc804 2.6.9\uc640 \uadf8 \uc774\uc804 \ubc84\uc804)\uc5d0\uc11c \ubc1c\uacac\ub41c \uc778\ud130\ub137 \uadf8\ub8f9 \uad00\ub9ac \ud504\ub85c\ud1a0\ucf5c(IGMP, Internet Group Management Protocol) \uc11c\ube44\uc2a4 \uac70\ubd80(DoS, Denial of Service) \ucde8\uc57d\uc810\uc774 \uc788\ub2e4<\/p>\n

 – \ub300\uc5ed \ud3ed\ud3ec\ud654 : \ubaa9\ud45c \ub124\ud2b8\uc6cc\ud06c\uc5d0\uc11c \uc0ac\uc6a9 \uac00\ub2a5\ud55c \ubaa8\ub4e0 \ub300\uc5ed\ud3ed\uc744 \ud3ec\ud654\uc2dc\ud0a4\uac8c \uc124\uacc4\ub41c \ud328\ud0b7. ICMP \ub97c \ud1b5\ud574 \uc804\uc1a1\ub418\ub294 \ubd84\uc0b0 \uc11c\ube44\uc2a4 \uac70\ubd80(DDoS, Distributed Denial of Service) \uacf5\uaca9\uc774 \ub300\ud45c\uc801\uc778 \uc608\uc774\ub2e4.<\/p>\n

  * \ub124\ud2b8\uc6cc\ud06c \uacc4\uce35 \uc545\uc6a9<\/span><\/p>\n

 \ub124\ud2b8\uc6cc\ud06c \uacc4\uce35\uc740 \uc804 \uc138\uacc4 \uc5b4\ub514\uc11c\ub4e0\uc9c0 \ucd9c\ubc1c\uc9c0\uc5d0\uc11c \ubaa9\uc801\uc9c0\uae4c\uc9c0 \ud328\ud0b7\uc744 \ub77c\uc6b0\ud305\ud560 \uc218 \uc788\uc73c\uba70, \uc774\ub97c \uc774\uc6a9\ud558\uba74 \uc804 \uc138\uacc4\uc758 \ubaa8\ub4e0 \ubaa9\ud45c\ub97c \uacf5\uaca9\ud560 \uc218 \uc788\ub2e4. IPv4\ub294 \uc5b4\ub5a4 \uc778\uc99d \uae30\ubc95\ub3c4 \uc81c\uacf5\ud558\uc9c0 \uc54a\uae30 \ub54c\ubb38\uc5d0(\uc778\uc99d\uc740 IPSec \ud504\ub85c\ucf5c\uc774\ub098 \uc0c1\uc704 \uacc4\uce35 \ub9e4\ucee4\ub2c8\uc998\uc758 \uc5ed\ud560\ub85c \ub0a8\uaca8\ub450\uc5c8\ub2e4) \uacf5\uaca9\uc790\ub294 \uc27d\uac8c \uc870\uc791\ub41c \ud5e4\ub354\ub098 \ub370\uc774\ud130\ub97c \uac00\uc9c0\ub294 IP \ud328\ud0b7\uc744 \ub9cc\ub4e4\uc5b4\ub0b4\uace0 \uc774\ub97c \ub124\ud2b8\uc6cc\ud06c\ub85c \ud37c\ub728\ub9b4 \uc218 \uc788\ub2e4. \uc774\ub7f0 \ud328\ud0b7\uc740 \uc758\ub3c4\ub41c \ubaa9\ud45c\uc5d0 \ub3c4\ub2ec\ud558\uae30 \uc804\uc5d0 \ubc29\ud654\ubcbd\uc774\ub098 \uc811\uadfc \uc81c\uc5b4 \ubaa9\ub85d(ACL: Access Control List)\uc744 \uc0ac\uc6a9\ud558\ub294 \ub77c\uc6b0\ud130\uc640 \uac19\uc740 \uc778\ub77c\uc778 \ud544\ud130\ub9c1 \uc7a5\uce58\uc5d0 \uc758\ud574 \ud544\ud130\ub9c1\ub420 \uc218 \uc788\uc9c0\ub9cc \uadf8\ub807\uc9c0 \uc54a\uc740 \uacbd\uc6b0\ub3c4 \ub9ce\ub2e4.<\/p>\n

 – Nmap ICMP Ping
 \ub3d9\uc778\ud55c \uc11c\ube0c\ub137\uc774 \uc788\uc9c0 \uc54a\ub294 \uc2dc\uc2a4\ud15c\uc744 \uc2a4\uce94\ud558\uae30 \uc704\ud574 Nmap\uc774 \uc0ac\uc6a9\ub418\uba74 \ubaa9\ud45c \ud638\uc2a4\ud2b8\uc758 \ud3ec\ud2b8 80\uc5d0 ICMP \uc5d0\ucf54 \uc694\uccad\uacfc TCP ACK\ub97c \uc804\uc1a1\ud558\ub294 \ubc29\ubc95\uc73c\ub85c \ud638\uc2a4\ud2b8 \ubc1c\uacac\uc744 \uc218\ud589\ud55c\ub2e4(\ud638\uc2a4\ud2b8 \ubc1c\uacac\uc740 Nmap -P0 \uba85\ub839 \ud589 \uc778\uc790\ub97c \uc0ac\uc6a9\ud574\uc11c \ube44\ud65c\uc131\ud654\ud560 \uc218 \uc788\uc9c0\ub9cc \uae30\ubcf8\uc801\uc73c\ub85c\ub294 \ud65c\uc131\ud654\ub3fc\uc788\ub2e4). Nmap \uc5d0\ucf54 \uc694\uccad\uc740 ICMP \ud5e4\ub354 \uc678\uc5d0\ub294 \uc5b4\ub5a4 \ub370\uc774\ud130\ub3c4 \ud3ec\ud568\ud558\uc9c0 \uc54a\ub294\ub2e4\ub294 \uc810\uc5d0\uc11c Nmap\uc774 \uc0dd\uc131\ud558\ub294 ICMP \uc5d0\ucf54 \uc694\uccad\uc740 ping \ud504\ub85c\uadf8\ub7a8\uc774 \uc0dd\uc131\ud558\ub294 \uc5d0\ucf54 \uc694\uccad\uacfc \ub2e4\ub974\ub2e4. \uadf8\ub7ec\ubbc0\ub85c \uc774\ub7f0 \ud328\ud0b7\uc774 iptables\uc5d0 \uae30\ub85d\ub418\uba74 IP \uae38\uc774 \ud56d\ubaa9\uc740 \ubc18\ub4dc\uc2dc 28\uc774 \ub41c\ub2e4.<\/p>\n

 – IP \uc2a4\ud478\ud551
 IP \ub97c \ud1b5\ud55c \ud1b5\uc2e0\uc758 \uacbd\uc6b0 \ud328\ud0b7\uc758 \ucd9c\ubc1c\uc9c0 \uc8fc\uc18c\uc5d0\ub294 \uc81c\ud55c\uc774 \uc804\ud600 \uc5c6\ub2e4. \uc6d0\uc2dc \uc18c\ucf13(\ud2b9\uc815 \uae30\uc900\uc5d0 \ub530\ub77c \ud328\ud0b7\uc744 \uc0dd\uc131\ud558\ub294 \uc800\uc218\uc900 \ud504\ub85c\uadf8\ub798\ubc0d API)\uc744 \uc0ac\uc6a9\ud558\uba74 \uc784\uc758\uc758 \ucd9c\ubc1c\uc9c0 \uc8fc\uc18c\ub97c \uac00\uc9c0\ub294 IP \ud328\ud0b7\uc744 \uc804\uc1a1\ud560 \uc218 \uc788\ub2e4. \ucd9c\ubc1c\uc9c0 \uc8fc\uc18c\uac00 \ub85c\uceec \ub124\ud2b8\uc6cc\ud06c \ubb38\ub9e5\uc5d0\uc11c \ubd24\uc744 \ub54c \ub9d0\uc774 \uc548 \ub418\ub294 \uacbd\uc6b0 \ud574\ub2f9 \ud328\ud0b7\uc740 \uc2a4\ud478\ud551\ub410\ub2e4\uace0 \ud55c\ub2e4. \uad00\ub9ac\uc790\ub294 \ub0b4\ubd80 \ub124\ud2b8\uc6cc\ud06c\uc758 \ubc94\uc704\uc5d0 \uc18d\ud558\uc9c0 \uc54a\ub294 \ucd9c\ubc1c\uc9c0 \uc8fc\uc18c\ub97c \uac00\uc9c4 \ud328\ud0b7\uc740 \ud3ec\uc6cc\ub529\ud558\uc9c0 \uc54a\uac8c \ub77c\uc6b0\ud130\uc640 \ubc29\ud654\ubcbd\uc744 \uc124\uc815\ud560 \uc218 \uc788\uc9c0\ub9cc \ub9ce\uc740 \ub124\ud2b8\uc6cc\ud06c\uac00 \uc774\ub7f0 \uc2dd\uc758 \uc81c\uc5b4\ub97c \ud558\uc9c0 \uc54a\ub294\ub2e4.<\/p>\n

 \ubcf4\uc548 \uad00\uc810\uc5d0\uc11c \uc2a4\ud478\ud551\ub41c \ud328\ud0b7(\uacfc \ubcf4\ud1b5 IP \ud328\ud0b7)\uc5d0 \ub300\ud574 \uc54c\uc544\uc57c \ud560 \uac00\uc7a5 \uc911\uc694\ud55c \uac83\uc740 \ucd9c\ubc1c\uc9c0 \uc8fc\uc18c\ub97c \ubbff\uc744 \uc218 \uc5c6\ub2e4\ub294 \uac83\uc774\ub2e4. \uc0ac\uc2e4 \uc644\uc804\ud55c \uacf5\uaca9\uc774 \ub2e8 \ud558\ub098\uc758 \uc2a4\ud478\ud551\ub41c \ud328\ud0b7\uc744 \ud1b5\ud574 \uc804\ub2ec\ub420 \uc218\ub3c4 \uc788\ub2e4.<\/p>\n

 \ub9ce\uc740 \ubcf4\uc548 \uc18c\ud504\ud2b8\uc6e8\uc5b4(\uacf5\uaca9\uacfc \ubc29\uc5b4 \ubaa8\ub450 \ud3ec\ud568)\uac00 \ucd9c\ubc1c\uc9c0 IP \uc8fc\uc18c\ub97c \uc2a4\ud478\ud551\ud560 \uc218 \uc788\ub2e4. \ubd84\uc0b0 \uc11c\ube44\uc2a4 \uac70\ubd80(DDos)\ub3c4\uad6c\ub294 \uc77c\ubc18\uc801\uc73c\ub85c IP \uc2a4\ud478\ud551\uc744 \ud544\uc218\uc801\uc778 \uac83\uc73c\ub85c \uac04\uc8fc\ud558\uba70, hping\uc774\ub098 Nmap\uacfc \uac19\uc774 \uc798 \uc54c\ub824\uc9c4 \ub3c4\uad6c \uc5ed\uc2dc \ucd9c\ubc1c\uc9c0 \uc8fc\uc18c\ub97c \uc2a4\ud478\ud551\ud560 \uc218 \uc788\ub2e4.<\/p>\n

 – IP \ub2e8\ud3b8\ud654
 IP \ud328\ud0b7\uc744 \uc880 \ub354 \uc791\uc740 \ud328\ud0b7\uc73c\ub85c \ucabc\uac1c\ub294 \uac83\uc740 IP\uc758 \uc8fc\uc694 \uae30\ub2a5 \uc911 \ud558\ub098\ub2e4. IP \ud328\ud0b7\uc744 \ucabc\uac1c\ub294 \uacfc\uc815\uc744 \ub2e8\ud3b8\ud654(fragmentation)\ub77c\uace0 \ud558\uba70, \ub2e8\ud3b8\ud654\ub294 \ub370\uc774\ud130 \ub9c1\ud06c MTU \ud06c\uae30\uac00 \ub108\ubb34 \uc791\uc544 \ud328\ud0b7\uc744 \ucc98\ub9ac\ud560 \uc218 \uc5c6\ub294 \ub124\ud2b8\uc6cc\ud06c\ub85c IP \ud328\ud0b7\uc774 \ub77c\uc6b0\ud305\ub420 \ub54c\ub9c8\ub2e4 \ud544\uc694\ud558\ub2e4. \ud55c \ub370\uc774\ud130 \ub9c1\ud06c \uacc4\uce35\uc5d0\uc11c \ub2e4\ub978 \ub370\uc774\ud130 \ub9c1\ud06c \uacc4\uce35\uc73c\ub85c \uc804\uc1a1\ub418\ub294 IP \ud328\ud0b7\uc774 MTU\ub97c \ucd08\uacfc\ud558\uc9c0 \uc54a\uac8c MTU \ud06c\uae30\uac00 \uc11c\ub85c \ub2e4\ub978 \ub450 \ub370\uc774\ud130 \ub9c1\ud06c \uacc4\uce35\uc744 \uc5f0\uacb0\ud558\ub294 \uac83\uc740 \ub77c\uc6b0\ud130\uc758 \uc5ed\ud560\uc774\ub2e4. \ubaa9\uc801\uc9c0 \ud638\uc2a4\ud2b8\uc758 IP \uc2a4\ud0dd\uc740 \ud328\ud0b7 \ub0b4\ubd80\uc5d0 \ucea1\uc290\ud654\ub41c \ud504\ub85c\ud1a0\ucf5c\uc774 \ub2e4\uc74c \uacc4\uce35\uc758 \uc2a4\ud0dd\uc73c\ub85c \uc804\ub2ec\ub420 \ub54c \ubcf8\ub798\uc758 \ud328\ud0b7\uc744 \uc0dd\uc131\ud558\uae30 \uc704\ud574 IP \ub2e8\ud3b8\uc744 \uc7ac\uc870\ub9bd\ud55c\ub2e4.<\/p>\n

 \uacf5\uaca9\uc790\ub294 \uacf5\uaca9\uc744 \uad6c\uc131\ud55c \ud6c4 \uc774\ub97c \ub2e4\uc218\uc758 IP \ub2e8\ud3b8\uc73c\ub85c \uc815\uad50\ud558\uac8c \ucabc\uac1c\ub294 \ubc29\ubc95\uc73c\ub85c IP \ub2e8\ud3b8\ud654\ub97c IDS \ud68c\ud53c \ub9e4\ucee4\ub2c8\uc998\uc73c\ub85c \uc774\uc6a9\ud560 \uc218 \uc788\ub2e4. \uc644\uc804\ud788 \uad6c\ud604\ub41c IP \uc2a4\ud0dd\uc740 \ubaa8\ub450 \ub2e8\ud3b8\ud654\ub41c \ud2b8\ub798\ud53d\uc744 \uc7ac\uc870\ub9bd\ud560 \uc218 \uc788\uc9c0\ub9cc \uacf5\uaca9\uc744 \ud0d0\uc9c0\ud558\uae30 \uc704\ud574 IDS\uac00 \ubaa9\uc801\uc9c0 IP \uc2a4\ud0dd\uc774 \uc0ac\uc6a9\ud558\ub294 \uac83\uacfc \ub3d9\uc77c\ud55c \uc54c\uace0\ub9ac\uc998\uc744 \uc0ac\uc6a9\ud574\uc11c \ud2b8\ub798\ud53d\uc744 \uc7ac\uc870\ub9bd\ud560 \uc218\ub3c4 \uc788\ub2e4. IP \uc2a4\ud0dd\uc758 \uc7ac\uc870\ub9bd \uc54c\uace0\ub9ac\uc998 \uad6c\ud604\uc774 \uc57d\uac04\uc529 \ub2e4\ub974\uae30 \ub54c\ubb38\uc5d0(\uc608\ub97c \ub4e4\uc5b4 \uc911\ubcf5\ub41c \ub2e8\ud3b8\ud654\uc5d0 \ub300\ud574 \uc2dc\uc2a4\ucf54 IOS IP \uc2a4\ud0dd\uc740 \ub9c8\uc9c0\ub9c9 \ub2e8\ud3b8\ud654 \uc815\ucc45\uc5d0 \ub530\ub77c \ud2b8\ub798\ud53d\uc744 \uc7ac\uc870\ub9bd\ud558\ub294 \ubc18\uba74 \uc708\ub3c4\uc6b0 XP\uc758 \uc2a4\ud0dd\uc740 \uccab \ubc88\uc9f8 \ub2e8\ud3b8\ud654 \uc815\ucc45\uc5d0 \ub530\ub77c \uc7ac\uc870\ub9bd\ud55c\ub2e4) IDS\uac00 \ub3d9\uc77c\ud55c \uc54c\uace0\ub9ac\uc998\uc744 \uc0ac\uc6a9\ud558\ub294 \uac83\uc740 \ud798\ub4e0 \uc77c\uc774\ub2e4. \ub2e8\ud3b8\ud654\ub41c \ud2b8\ub798\ud53d\uc744 \uc0dd\uc131\ud558\ub294 \ucd5c\uace0\uc758 \ud45c\uc900\uc740 \ub355 \uc18d\uc73c\uc774 fragroute \ub3c4\uad6c\ub2e4.(http:\/\/www.monkey.org \ucc38\uc870)<\/p>\n

 – \uc791\uc740 TTL \uac12
 \ubaa8\ub4e0 \ub77c\uc6b0\ud130\ub294 IP \ud328\ud0b7\uc774 \ub2e4\ub978 \uc2dc\uc2a4\ud15c\uc73c\ub85c \ud3ec\uc6cc\ub529\ub420 \ub54c\ub9c8\ub2e4 IP \ud5e4\ub354\uc758 TTL \uac12\uc744 1\uc529 \uac10\uc18c\uc2dc\ucf1c\uc57c \ud55c\ub2e4. \ub85c\uceec \uc11c\ube0c\ub137 \ub0b4\uc5d0 TTL \uac12\uc774 1\uc778 \ud328\ud0b7\uc774 \ub098\ud0c0\ub098\uba74 \ub204\uad70\uac00 \ub85c\uceec \uc11c\ube0c\ub137\uc774\ub098 \ub85c\uceec \uc11c\ube0c\ub137\uc744 \ud1b5\ud574 \ub77c\uc6b0\ud305\ub418\ub294 \uc11c\ube0c\ub137\uc5d0 \uc874\uc7ac\ud558\ub294 IP \uc8fc\uc18c\uc5d0 \ub300\ud574 traceroute \ud504\ub85c\uadf8\ub7a8(\ub610\ub294 tcptracerouote \uc640 \uac19\uc740 \ubcc0\ud615)\uc744 \uc0ac\uc6a9\ud558\uace0 \uc788\uc744 \uac00\ub2a5\uc131\uc774 \ub192\ub2e4. \uc774\ub294 \ubcf4\ud1b5 \ub124\ud2b8\uc6cc\ud06c \uc5f0\uacb0 \ubb38\uc81c\ub97c \ud574\uacb0\ud558\ub824\ub294 \uc0ac\ub78c\uc778 \uacbd\uc6b0\uac00 \ub9ce\uc9c0\ub9cc \uc7a0\uc7ac\uc801 \uacf5\uaca9 \ubaa9\ud45c\ub85c\uc758 \ud649(hop)\uc744 \uc54c\uc544\ub0b4\uae30 \uc704\ud574 \ub124\ud2b8\uc6cc\ud06c\ub97c \uc815\ud0d0\ud558\uace0 \uc788\ub294 \uc0ac\ub78c\uc77c \uc218\ub3c4 \uc788\ub2e4.<\/p>\n

 – \uc2a4\uba38\ud504 \uacf5\uaca9
 \uc2a4\uba38\ud504(Smurf) \uacf5\uaca9\uc740 \uacf5\uaca9\uc790\uac00 ICMP \uc5d0\ucf54 \uc694\uccad\uc744 \ub124\ud2b8\uc6cc\ud06c \ube0c\ub85c\ub4dc\uce90\uc2a4\ud2b8 \uc8fc\uc18c\ub85c \uc2a4\ud478\ud551\ud558\ub294 \uae30\uc220\ub85c \uc624\ub798\ub410\uc9c0\ub9cc \ub6f0\uc5b4\ub09c \uac83\uc774\ub2e4. \uc2a4\ud478\ud551\ub41c \uc8fc\uc18c\ub294 \uc758\ub3c4\ub41c \ubaa9\ud45c\uc774\uba70, \uc774 \uacf5\uaca9\uc758 \ubaa9\uc801\uc740 \ube0c\ub85c\ub4dc\uce90\uc2a4\ud2b8 \uc8fc\uc18c\ub97c \ud1b5\ud55c \uc5d0\ucf54 \uc694\uccad\uc5d0 \uc751\ub2f5\ud558\ub294 \uc2dc\uc2a4\ud15c\uc73c\ub85c\ubd80\ud130 \ubaa9\ud45c\uc5d0 \uac00\ub2a5\ud55c \ub9ce\uc740 ICMP \uc5d0\ucf54 \uc694\uccad \ud328\ud0b7\uc774 \uc804\uc1a1\ub418\uac8c \ud558\ub294 \uac83\uc774\ub2e4. \ub124\ud2b8\uc6cc\ud06c\uac00 \ube0c\ub85c\ub4dc\uce90\uc2a4\ud2b8 \uc8fc\uc18c\uc5d0 \ub300\ud55c ICMP \uc5d0\ucf54 \uc694\uccad\uc744 \uc801\uc808\ud788 \uc81c\uc5b4(\uc608\ub97c \ub4e4\uc5b4 \uc2dc\uc2a4\ucf54 \ub77c\uc6b0\ud130\uc5d0\uc11c no ip directed-broadcast \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9)\ud558\uc9c0 \uc54a\uc740 \ucc44 \ub3d9\uc791\ud55c\ub2e4\uba74 \uc5d0\ucf54 \uc694\uccad\uc744 \uc218\uc2e0\ud558\ub294 \ubaa8\ub4e0 \ud638\uc2a4\ud2b8\ub294 \uc2a4\ud478\ud551\ub41c \ucd9c\ubc1c\uc9c0 \uc8fc\uc18c\ub85c \uc751\ub2f5\ud560 \uac83\uc774\ub2e4. \uacf5\uaca9\uc790\ub294 \ub300\uaddc\ubaa8 \ub124\ud2b8\uc6cc\ud06c\uc758 \ube0c\ub85c\ub4dc\uce90\uc2a4\ud2b8 \uc8fc\uc18c\ub97c \uc0ac\uc6a9\ud574\uc11c \ubaa9\ud45c\ub97c \ud5a5\ud574 \uc0dd\uc131\ub418\ub294 \ud328\ud0b7\uc758 \uc218\ub97c \uc99d\uac00\uc2dc\ud0ac \uc218 \uc788\ub2e4.
 
 \uc2a4\uba38\ud504 \uacf5\uaca9\uc740 \uc804\uc6a9 \uc81c\uc5b4 \ucc44\ub110\uc744 \uc0ac\uc6a9\ud558\uba70 \ub300\uc751\ud560 \uc218 \uc788\ub294 \uc26c\uc6b4 \ub77c\uc6b0\ud130 \uc124\uc815\uc774 \uc5c6\ub294 DDoS \uacf5\uaca9\uc744 \uc218\ud589\ud558\ub294 \ub3c4\uad6c\uc5d0 \ube44\ud558\uba74 \uad6c\uc2dd\uc774\ub2e4. \uadf8\ub7ec\ub098 \uc2a4\uba38\ud504 \uacf5\uaca9\uc740 \uc218\ud589\ud558\uae30 \ub9e4\uc6b0 \uc26c\uc6b0\uba70, \ucd5c\ucd08\uc758 \uc18c\uc2a4 \ucf54\ub4dc(http:\/\/www.phreak.org)\ub97c \uc27d\uac8c \uad6c\ud560 \uc218 \uc788\uae30 \ub54c\ubb38\uc5d0 \uc5b8\uae09\ud560\ub9cc\ud55c \uac00\uce58\ub294 \uc788\ub2e4.<\/p>\n

 – DDoS \uacf5\uaca9
 \ub124\ud2b8\uc6cc\ud06c \uacc4\uce35\uc758 DDoS \uacf5\uaca9\uc740 \ub3d9\uc2dc\uc5d0 \ubaa9\ud45c IP \uc8fc\uc18c\ub85c \ud328\ud0b7\uc744 \ud50c\ub7ec\ub529(flooding)\ud558\uae30 \uc704\ud574 \ub9ce\uc740 \uc218\uc758 \uc2dc\uc2a4\ud15c(\uc7a0\uc7ac\uc801\uc73c\ub85c \uc218\ucc9c \uac1c)\uc744 \uc0ac\uc6a9\ud55c\ub2e4. \uc774 \uacf5\uaca9\uc758 \ubaa9\uc801\uc740 \uc815\ub2f9\ud55c \ud1b5\uc2e0\uc744 \ub9c9\uae30 \uc704\ud788\u3150 \ubaa9\ud45c \ub124\ud2b8\uc6cc\ud06c\uc758 \ub300\uc5ed\ud3ed\uc744 \uc4f0\ub808\uae30 \ub370\uc774\ud130\ub85c \ucd5c\ub300\ud55c \uc7a0\uc2dd\uc2dc\ud0a4\ub294 \uac83\uc774\ub2e4. \ub108\ubb34\ub098 \ub9ce\uc740 \uc2dc\uc2a4\ud15c\uc774 \uad11\ub300\uc5ed\uc744 \ud1b5\ud574 \uc778\ud130\ub137\uc5d0 \uc5f0\uacb0\ub3fc \uc788\uae30 \ub54c\ubb38\uc5d0 DDoS \uacf5\uaca9\uc740 \uc880 \ub354 \ub300\ucc98\ud558\uae30 \uc5b4\ub824\uc6b4 \ub124\ud2b8\uc6cc\ud06c \uacc4\uce35 \uacf5\uaca9 \uc911 \ud558\ub098\ub2e4. \uacf5\uaca9\uc790\uac00 \ube60\ub978 \uc778\ud130\ub137 \uc5f0\uacb0\uc744 \uac00\uc9c4 \uc77c\ubd80 \uc2dc\uc2a4\ud15c\uc5d0 \uc131\uacf5\uc801\uc73c\ub85c \uce68\ud22c\ud558\uba74 \ub300\ubd80\ubd84\uc758 \uc0ac\uc774\ud2b8\uc5d0 \uc190\ud574\ub97c \ub07c\uce58\ub294 DDoS \uacf5\uaca9\uc744 \uc218\ud589\ud560 \uc218 \uc788\ub2e4.<\/p>\n

 DDoS \uc5d0\uc774\uc804\ud2b8\uac00 \uc0dd\uc131\ud558\ub294 \uac01 \ud328\ud0b7\uc744 \uc2a4\ud478\ud551\ud560 \uc218 \uc788\uae30 \ub54c\ubb38\uc5d0 \ud328\ud0b7\uc774 \uacf5\uaca9 \ubaa9\ud45c\uc5d0 \ub3c4\ub2ec\ud55c \uc2dc\uc810\uc5d0 \uc774\ub7f0 \ud328\ud0b7\uc758 \ucd9c\ubc1c\uc9c0 IP \uc8fc\uc18c\uc5d0 \uc5b4\ub5a4 \uac12\uc744 \ud560\ub2f9\ud558\ub294 \uac83\uc740 \uc77c\ubc18\uc801\uc73c\ub85c \ubb34\uc758\ubbf8\ud55c\ub2e4.<\/p>\n

 \uc77c\ubc18\uc801\uc73c\ub85c DDoS \uc5d0\uc774\uc804\ud2b8\uc640 \uad00\ub828\ub41c \uc81c\uc5b4 \ud1b5\uc2e0\uc744 \ud0d0\uc9c0\ud558\ub294 \uac83\uc774 \ud50c\ub7ec\ub529 \ud328\ud0b7 \uc790\uccb4\ub97c \ud0d0\uc9c0\ud558\ub294 \uac83\ubcf4\ub2e4 \ub354 \ud6a8\uacfc\uc801\uc774\ub2e4. \uc608\ub97c \ub4e4\uc5b4 \ubd88\ubd84\uba85\ud55c \ud3ec\ud2b8 \ubc88\ud638\ub97c \ud1b5\ud574 \uc81c\uc5b4 \ub178\ub4dc\uc5d0\uc11c \uc880\ube44 \ub178\ub4dc\ub85c \uc804\uc1a1\ub418\ub294 \uba85\ub839\uc5b4\ub97c \ud0d0\uc9c0\ud558\ub294 \uac83\uc740 \uc88b\uc740 \uc804\ub7b5\uc774\ub2e4.(\uc2a4\ub178\ud2b8 \uaddc\uce59\uc9d1\ud569\uc758 \uc5ec\ub7ec \uc11c\uba85\uc774 \uc774\ub7f0 \uc720\ud615\uc758 \ud1b5\uc2e0\uc744 \ucc3e\ub294\ub2e4) \uc774\ub7f0 \uc804\ub7b5\uc740 \uc81c\uc5b4 \ud1b5\uc2e0\uc744 \ud1b5\ud574 \uac10\uc5fc\ub41c<\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

  * iptables \ub97c \uc774\uc6a9\ud55c \ub124\ud2b8\uc6cc\ud06c \uacc4\uce35 \ud5e4\ub354\uc758 \uae30\ub85d  iptables \ub85c \ub9cc\ub4e0 \ubc29\ud654\ubcbd\uc740 iptables \uc758 LOG \ud0c0\uac9f\uc744 \uc774\uc6a9\ud574\uc11c IPv4 \ud5e4\ub354\uc758 \uac70\uc758 \ubaa8\ub4e0 \ud56d\ubaa9\uc5d0 \ub300\ud55c \ub85c\uadf8 \ub370\uc774\ud130\ub97c syslog \uc5d0 \uc791\uc131\ud560 \uc218 \uc788\ub2e4.  – IP \uc635\uc158\uc758 \uae30\ub85d IP \uc635\uc158\uc740 IP \ud1b5\uc2e0\uc5d0 \ub2e4\uc591\ud55c \uc81c\uc5b4 … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[52],"tags":[],"_links":{"self":[{"href":"http:\/\/pchero21.com\/index.php?rest_route=\/wp\/v2\/posts\/747"}],"collection":[{"href":"http:\/\/pchero21.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/pchero21.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/pchero21.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/pchero21.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=747"}],"version-history":[{"count":0,"href":"http:\/\/pchero21.com\/index.php?rest_route=\/wp\/v2\/posts\/747\/revisions"}],"wp:attachment":[{"href":"http:\/\/pchero21.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=747"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/pchero21.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=747"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/pchero21.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=747"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}