Re: Securing socket server
From: David Sworder (GilGrissom_at_CSILasVegas.com)
Date: 04/07/04
- Next message: Chris A. R.: "Re: I've Had Enough"
- Previous message: Peder Y: "LB_SETITEMHEIGHT example message"
- In reply to: Ignacio Machin \( .NET/ C# MVP \): "Re: Securing socket server"
- Next in thread: Juan: "Re: Securing socket server"
- Reply: Juan: "Re: Securing socket server"
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 7 Apr 2004 16:31:30 -0700
Yes, and in addition, maintain a blacklist. If a particular client IP
address trys to execute an invalid command or tries to connect multiple
times simultaneously [in an attempt to overwhelm your system], drop the
connection and store that IP address in a Hashtable somewhere so that all
future connection attempts from that IP will be dropped.
"Ignacio Machin ( .NET/ C# MVP )" <ignacio.machin AT dot.state.fl.us> wrote
in message news:en5bauNHEHA.548@TK2MSFTNGP09.phx.gbl...
> HI Juan,
>
> Always authenticate the client first, and if possible try to restrict the
> IP sources other than that there is nothing much you can do to avoid a
> hacker to connect to your server.
> You can use a couple of techniques to try to minimize the possible
> ocurrence of a break in, for example disconnect the client if an unknow
> command is received (I do this) or if you know that no more than a certain
> numbers of clients will connect at the same time you can control how
manies
> connection are live at the same time. Also if the protocol you defined is
> text in the ruotine where you get the command check if the receiving
string
> is sending a command bigger than your limit, if so drop the conneciton.
>
> Hope this help,
>
> --
> Ignacio Machin,
> ignacio.machin AT dot.state.fl.us
> Florida Department Of Transportation
>
> "Juan" <juan_mauricio_lopez@ANTISPAMhotmail.com> wrote in message
> news:eoj6HINHEHA.3952@TK2MSFTNGP10.phx.gbl...
> > Where can I find information on how to secure a socket server? I'd like
to
> > implement the necessary measures to avoid hackers attacks and to
> > authenticate the clients...
> >
> > thanks,
> > Juan.
> >
> >
>
>
- Next message: Chris A. R.: "Re: I've Had Enough"
- Previous message: Peder Y: "LB_SETITEMHEIGHT example message"
- In reply to: Ignacio Machin \( .NET/ C# MVP \): "Re: Securing socket server"
- Next in thread: Juan: "Re: Securing socket server"
- Reply: Juan: "Re: Securing socket server"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
