Denial of service attacks -- kernel parameters?

[Bob Carback]

Are there any kernel parameters on HP-UX 11.23 (11iv2 ia64)that should be tuned to prevent common denial of service attacks?

[A. Clay Stephenson · Accepted solution]

You really defend DOS attacks by shutting down any unneeded listeners or port monitors rather than modifying kernel tunables.

[James R. Ferguson]

Hi Bob:

One that comes to mind is 'executable_stack'. This controls whether or not you are vulnerable to stack buffer overflow attacks.

Have a look at the manpages for 'executable_stack' for more information.

http://docs.hp.com/en/B2355-60105/executable_stack.5.html

Regards!

...JRF...

[Bob Carback]

Thanks!

[Bob Carback]

All I needed to know!