Securing socket server

[Juan]

Where can I find information on how to secure a socket server? I'd like to
implement the necessary measures to avoid hackers attacks and to
authenticate the clients...

thanks,
Juan.

[Ignacio Machin \( .NET/ C# MVP \)]

HI Juan,

Always authenticate the client first, and if possible try to restrict the
IP sources other than that there is nothing much you can do to avoid a
hacker to connect to your server.
You can use a couple of techniques to try to minimize the possible
ocurrence of a break in, for example disconnect the client if an unknow
command is received (I do this) or if you know that no more than a certain
numbers of clients will connect at the same time you can control how manies
connection are live at the same time. Also if the protocol you defined is
text in the ruotine where you get the command check if the receiving string
is sending a command bigger than your limit, if so drop the conneciton.

Hope this help,

--
Ignacio Machin,
ignacio.machin AT dot.state.fl.us
Florida Department Of Transportation

"Juan" <ju*****************@ANTISPAMhotmail.com> wrote in message
news:eo**************@TK2MSFTNGP10.phx.gbl...

Where can I find information on how to secure a socket server? I'd like to
implement the necessary measures to avoid hackers attacks and to
authenticate the clients...

thanks,
Juan.

[David Sworder]

Yes, and in addition, maintain a blacklist. If a particular client IP
address trys to execute an invalid command or tries to connect multiple
times simultaneously [in an attempt to overwhelm your system], drop the
connection and store that IP address in a Hashtable somewhere so that all
future connection attempts from that IP will be dropped.

"Ignacio Machin ( .NET/ C# MVP )" <ignacio.machin AT dot.state.fl.us> wrote
in message news:en*************@TK2MSFTNGP09.phx.gbl...

HI Juan,

Always authenticate the client first, and if possible try to restrict the
IP sources other than that there is nothing much you can do to avoid a
hacker to connect to your server.
You can use a couple of techniques to try to minimize the possible
ocurrence of a break in, for example disconnect the client if an unknow
command is received (I do this) or if you know that no more than a certain
numbers of clients will connect at the same time you can control how manies connection are live at the same time. Also if the protocol you defined is
text in the ruotine where you get the command check if the receiving string is sending a command bigger than your limit, if so drop the conneciton.

Hope this help,

--
Ignacio Machin,
ignacio.machin AT dot.state.fl.us
Florida Department Of Transportation

"Juan" <ju*****************@ANTISPAMhotmail.com> wrote in message
news:eo**************@TK2MSFTNGP10.phx.gbl...

Where can I find information on how to secure a socket server? I'd like to implement the necessary measures to avoid hackers attacks and to
authenticate the clients...

thanks,
Juan.

[Juan]

Thanks, those measures make a lot of sense... I also want to encrypt the
password for transmission... any resources I can use on how to do this?

Juan.
"David Sworder" <Gi********@CSILasVegas.com> escribió en el mensaje
news:OU**************@TK2MSFTNGP12.phx.gbl...

Yes, and in addition, maintain a blacklist. If a particular client IP
address trys to execute an invalid command or tries to connect multiple
times simultaneously [in an attempt to overwhelm your system], drop the
connection and store that IP address in a Hashtable somewhere so that all
future connection attempts from that IP will be dropped.

"Ignacio Machin ( .NET/ C# MVP )" <ignacio.machin AT dot.state.fl.us> wrote in message news:en*************@TK2MSFTNGP09.phx.gbl...

HI Juan,

Always authenticate the client first, and if possible try to restrict the

IP sources other than that there is nothing much you can do to avoid a
hacker to connect to your server.
You can use a couple of techniques to try to minimize the possible
ocurrence of a break in, for example disconnect the client if an unknow
command is received (I do this) or if you know that no more than a certain numbers of clients will connect at the same time you can control how manies

connection are live at the same time. Also if the protocol you defined is text in the ruotine where you get the command check if the receiving

string

is sending a command bigger than your limit, if so drop the conneciton.

Hope this help,

--
Ignacio Machin,
ignacio.machin AT dot.state.fl.us
Florida Department Of Transportation

"Juan" <ju*****************@ANTISPAMhotmail.com> wrote in message
news:eo**************@TK2MSFTNGP10.phx.gbl...

Where can I find information on how to secure a socket server? I'd

like to implement the necessary measures to avoid hackers attacks and to
authenticate the clients...

thanks,
Juan.