めも

yum install kon2 kon2-fonts
yum remove samba
#yum remove finger portmap
chkconfig --level 345 portmap off
chkconfig --level 345 finger off
chkconfig --level 345 sshd off
chkconfig --level 345 cups off
chkconfig --level 345 smartd off #Virtual Serverなので
chkconfig --level 345 xinetd off
chkconfig --level 345 netfs off #切っていいのかなぁ
chkconfig --level 345 rpcgssd off

syn_flood対策

sysctl -w net.ipv4.tcp_syncookies=1 > /dev/null
sed -i '/net.ipv4.tcp_syncookies/d' /etc/sysctl.conf
echo "net.ipv4.tcp_syncookies=1" >> /etc/sysctl.conf

Smurf対策

sysctl -w net.ipv4.icmp_echo_ignore_broadcasts=1 > /dev/null
sed -i '/net.ipv4.icmp_echo_ignore_broadcasts/d' /etc/sysctl.conf
echo "net.ipv4.icmp_echo_ignore_broadcasts=1" >> /etc/sysctl.conf

via:ファイアウォール構築(iptables) - CentOSで自宅サーバー構築