⭐ 欢迎来到虫虫下载站！ | 📦 资源下载 📁 资源专辑 ℹ️ 关于我们
⭐ 虫虫下载站
📤 上传资源

📄 1629.html

📁 著名的linux英雄站点的文档打包
💻 HTML
📖 第 1 页 / 共 3 页
字号:
🔍
123 
<br>
######################################################################<br>
##Set up UDP<br>
#Outgoing Traceroute<br>
iptables -A FORWARD -p udp -s 192.168.9.0/24 --sport 32769:65535 --dport 33434:33523 -j ACCEPT<br>
<br>
#Incoming Traceroute<br>
iptables -A FORWARD -p udp -s 192.168.9.0/24 --dport 32769:65535 --sport 33434:33523 -j ACCEPT<br>
<br>
#Time exceeded<br>
iptables -A FORWARD -p udp -s 192.168.9.0/24 --dport 11 -j ACCEPT<br>
<br>
#Port not found<br>
iptables -A FORWARD -p udp -s 192.168.9.0/24 --dport 3 -j ACCEPT<br>
<br>
#DNS<br>
iptables -A FORWARD -p udp -s 192.168.9.0/24 --dport 53 -j ACCEPT<br>
<br>
#SNMP<br>
iptables -A FORWARD -p udp -s 192.168.9.0/24 --dport 161 -j ACCEPT<br>
<br>
#DHCP<br>
iptables -A FORWARD -p udp -s 192.168.9.0/24 --sport 68 --dport 67 -j ACCEPT<br>
<br>
#Time Server<br>
iptables -A FORWARD -p udp -s 192.168.9.0/24 --sport 1024:65535 --dport 123 -j ACCEPT<br>
<br>
######################################################################<br>
##Allow outward browsing<br>
iptables -A FORWARD -p tcp -s 192.168.9.0/24 --dport 80 -j ACCEPT<br>
<br>
##Allow outward ssh<br>
iptables -A FORWARD -p tcp -s 192.168.9.0/24 --dport 22 -j ACCEPT<br>
<br>
##Allow outward ftp<br>
iptables -A FORWARD -p tcp -s 192.168.9.0/24 --dport 21 -j ACCEPT<br>
<br>
##Allow outward telnet<br>
iptables -A FORWARD -p tcp -s 192.168.9.0/24 --dport 23 -j ACCEPT<br>
<br>
##Allow outward smtp<br>
iptables -A FORWARD -p tcp -s 192.168.9.0/24 --dport 25 -j ACCEPT<br>
<br>
##Allow outward pop<br>
iptables -A FORWARD -p tcp -s 192.168.9.0/24 --dport 110 -j ACCEPT<br>
<br>
###Block HTTP Request from outside that are not authorized<br>
iptables -A FORWARD -p tcp --dport 80 -j DROP<br>
iptables -A FORWARD -p tcp --dport 80 -m limit --limit 5/minute -j LOG --log-level notice --log-prefix "Dropped HTTP: "<br>
<br>
#Allow Telnet out<br>
iptables -A FORWARD -p tcp -s 192.168.9.0/24 --dport 23 -j ACCEPT<br>
<br>
#Deny ports<br>
##telnet<br>
iptables -A FORWARD -p tcp --dport 23 -m limit --limit 5/minute -j LOG --log-level notice --log-prefix "Denied Telnet: "<br>
<br>
#Deny ports<br>
##telnet<br>
iptables -A FORWARD -p tcp --dport 23 -m limit --limit 5/minute -j LOG --log-level notice --log-prefix "Denied Telnet: "<br>
iptables -A FORWARD -p tcp --dport 23 -j DROP<br>
<br>
##Deny BO<br>
iptables -A FORWARD -p udp --dport 31337 -m limit --limit 5/minute -j LOG --log-level notice --log-prefix "Denied BO: "<br>
iptables -A FORWARD -p udp --dport 31337 -j DROP<br>
<br>
#Deny and log ftp on all others<br>
#iptables -A FORWARD -p tcp -s 192.168.9.0/24 --dport 21 -j DROP<br>
#iptables -A FORWARD -p tcp --dport 21 -m limit --limit 5/minute -j LOG --log-level notice --log-prefix "Denied FTP: "<br>
<br>
#Deny suspicious traffic <br>
iptables -A FORWARD -p tcp --destination-port 1080 -j DROP<br>
iptables -A FORWARD -p tcp --destination-port 8080 -j DROP<br>
iptables -A FORWARD -p tcp --destination-port 8000 -j DROP<br>
iptables -A FORWARD -p tcp --destination-port 8081 -j DROP<br>
<br>
##Allow all outgoing traffic<br>
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 3128 （转发至squid）<br>
iptables -A FORWARD -s 192.168.9.0/24 -j ACCEPT<br>
<br>
#Set to drop all packets not accepted by rules above<br>
iptables -A FORWARD -j DROP<br>
<br>
也把它放到/etc/init.d中，这样就可以随着xinet.d一起启动了。iptables的语法这里就不详细说了，网上很多。<br>
<br>
最后就是squid的配置，这需要仔细说一下，随RH发布的squid的配置有问题，性能受限。建议先卸除，到www.squid-cache.org下载最新的2.5stable1。然后重新编译，编译前需做以下准备工作：<br>
1。编辑/usr/include/bits/types.h中__FD_SETSIZE值至32768<br>
2。ulimit -HSn 32768<br>
然后到squid src包目录编译squid ，./configure, make all, make install.....<br>
squid会安装在缺省的/usr/local/squid下，squid的可执行文件在安装目录的bin子目录下，配置文件在etc子目录下<br>
<br>
Squid配置文件为：/usr/local/squid/etc/squid.conf，以下为我的配置：<br>
http_port 8080<br>
cache_mem 32 MB<br>
cache_swap_low 90<br>
cache_swap_high 95<br>
maximum_object_size 4096 KB<br>
cache_dir ufs /usr/local/squid/cache 10000 16 256<br>
cache_access_log /usr/local/squid/logs/access.log<br>
cache_log /usr/local/squid/logs/cache.log<br>
dns_nameservers 202.96.209.5<br>
unlinkd_program /usr/local/squid/bin/unlinkd<br>
acl acllist src 192.168.9.0/255.255.255.0<br>
acl regular_days time MTWHF 8:00-19:00<br>
acl movie urlpath_regex "/etc/squid/banned.list"（把过滤关键字写到文件中去）<br>
acl banned url_regex iij4u.or.jp(做些控制)<br>
acl cache_prevent1 url_regex cgi-bin /?<br>
acl cache_prevent2 url_regex Servlet<br>
acl all src 0.0.0.0/0.0.0.0<br>
acl manager proto cache_object<br>
acl localhost src 127.0.0.1/255.255.255.255<br>
acl SSL_ports port 443 563<br>
acl Safe_ports port 80 # http<br>
acl Safe_ports port 21 # ftp<br>
acl Safe_ports port 443 563 # https, snews<br>
acl Safe_ports port 70 # gopher<br>
acl Safe_ports port 210 # wais<br>
acl Safe_ports port 1025-65535 # unregistered ports<br>
acl Safe_ports port 280 # http-mgmt<br>
acl Safe_ports port 488 # gss-http<br>
acl Safe_ports port 591 # filemaker<br>
acl Safe_ports port 777 # multiling http<br>
http_access deny movie regular_days<br>
no_cache deny cache_prevent1<br>
no_cache deny cache_prevent2<br>
http_access deny banned<br>
http_access allow all<br>
http_access deny !Safe_ports<br>
http_access deny CONNECT !SSL_ports<br>
icp_access allow all<br>
http_access allow manager localhost<br>
http_access deny manager<br>
http_access allow localhost<br>
http_access deny all<br>
client_lifetime 2 hours<br>
half_closed_clients off<br>
cache_effective_user squid<br>
cache_effective_group squid(请注意squid对cache及log目录有读写权)<br>
httpd_accel_host virtual<br>
httpd_accel_port 80<br>
httpd_accel_with_proxy on<br>
httpd_accel_uses_host_header on <br>
<br>
同时在/etc/init.d中的启动脚本里加上这句ulimit -HSn 32768<br>
这样squid启动时在cache.log中就可以看到如此语句：<br>
2003/03/05 09:30:53| Starting Squid Cache version 2.5.STABLE1-20030303 for i686-pc-linux-gnu...<br>
2003/03/05 09:30:53| Process ID 12939<br>
2003/03/05 09:30:53| With 32768 file descriptors available<br>
<br>
此时的squid拥有32768个file descriptors（缺省为1024），如果用户很多，缺省值会成为瓶颈，极度影响squid的速度（它会报错说running out of file descriptors），我曾经在板上发问，结果没人理我(，还是自力更生，丰衣足食。<br>
<br>
启动squid：/usr/local/squid/bin/squid -D<br>
<br>
大功告成！整个出internet的http流量就全朝squid走了，用户不知道，同时又可完成封锁的功能。<br>
<br>
好辛苦啊！
</FONT><br>
                                      </TD>
                                    </TR>
                                <TR>
                                <TD colSpan=2><FONT 
                                class=middlefont></FONT><BR>
                                        <FONT 
                                class=normalfont>全文结束</FONT> </TD>
                                    </TR>
                                <TR>
                                <TD background="images/dot.gif" tppabs="http://www.linuxhero.com/docs/images/dot.gif" colSpan=2 
                                height=10></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></DIV></TD>
                        <TD vAlign=top width="20%" 
                      background="images/line.gif" tppabs="http://www.linuxhero.com/docs/images/line.gif" rowSpan=2> 
                          <DIV align=center> 
                            <table class=tableoutline cellspacing=1 cellpadding=4 
                        width="100%" align=center border=0>
                              <tr class=firstalt> 
                                <td noWrap background="images/bgline.gif" tppabs="http://www.linuxhero.com/docs/images/bgline.gif" colspan=2 height=21>
                                <font class=normalfont><b>所有分类</b></font></td>
                              </tr>
<tr class=secondalt> <td noWrap width=27%> <font class=normalfont>1:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type1.html" tppabs="http://www.linuxhero.com/docs/type1.html">非技术类</a></font></td>    </tr>  </table></td></tr><tr class=firstalt> <td noWrap width=27%> <font class=normalfont>2:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type2.html" tppabs="http://www.linuxhero.com/docs/type2.html">基础知识</a></font></td>    </tr>  </table></td></tr><tr class=secondalt> <td noWrap width=27%> <font class=normalfont>3:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type3.html" tppabs="http://www.linuxhero.com/docs/type3.html">指令大全</a></font></td>    </tr>  </table></td></tr><tr class=firstalt> <td noWrap width=27%> <font class=normalfont>4:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type4.html" tppabs="http://www.linuxhero.com/docs/type4.html">shell</a></font></td>    </tr>  </table></td></tr><tr class=secondalt> <td noWrap width=27%> <font class=normalfont>5:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type5.html" tppabs="http://www.linuxhero.com/docs/type5.html">安装启动</a></font></td>    </tr>  </table></td></tr><tr class=firstalt> <td noWrap width=27%> <font class=normalfont>6:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type6.html" tppabs="http://www.linuxhero.com/docs/type6.html">xwindow</a></font></td>    </tr>  </table></td></tr><tr class=secondalt> <td noWrap width=27%> <font class=normalfont>7:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type7.html" tppabs="http://www.linuxhero.com/docs/type7.html">kde</a></font></td>    </tr>  </table></td></tr><tr class=firstalt> <td noWrap width=27%> <font class=normalfont>8:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type8.html" tppabs="http://www.linuxhero.com/docs/type8.html">gnome</a></font></td>    </tr>  </table></td></tr><tr class=secondalt> <td noWrap width=27%> <font class=normalfont>9:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type9.html" tppabs="http://www.linuxhero.com/docs/type9.html">输入法类</a></font></td>    </tr>  </table></td></tr><tr class=firstalt> <td noWrap width=27%> <font class=normalfont>10:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type10.html" tppabs="http://www.linuxhero.com/docs/type10.html">美化汉化</a></font></td>    </tr>  </table></td></tr><tr class=secondalt> <td noWrap width=27%> <font class=normalfont>11:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type11.html" tppabs="http://www.linuxhero.com/docs/type11.html">网络配置</a></font></td>    </tr>  </table></td></tr><tr class=firstalt> <td noWrap width=27%> <font class=normalfont>12:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type12.html" tppabs="http://www.linuxhero.com/docs/type12.html">存储备份</a></font></td>    </tr>  </table></td></tr><tr class=secondalt> <td noWrap width=27%> <font class=normalfont>13:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type13.html" tppabs="http://www.linuxhero.com/docs/type13.html">杂项工具</a></font></td>    </tr>  </table></td></tr><tr class=firstalt> <td noWrap width=27%> <font class=normalfont>14:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type14.html" tppabs="http://www.linuxhero.com/docs/type14.html">编程技术</a></font></td>    </tr>  </table></td></tr><tr class=secondalt> <td noWrap width=27%> <font class=normalfont>15:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type15.html" tppabs="http://www.linuxhero.com/docs/type15.html">网络安全</a></font></td>    </tr>  </table></td></tr><tr class=firstalt> <td noWrap width=27%> <font class=normalfont>16:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type16.html" tppabs="http://www.linuxhero.com/docs/type16.html">内核技术</a></font></td>    </tr>  </table></td></tr><tr class=secondalt> <td noWrap width=27%> <font class=normalfont>17:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type17.html" tppabs="http://www.linuxhero.com/docs/type17.html">速度优化</a></font></td>    </tr>  </table></td></tr><tr class=firstalt> <td noWrap width=27%> <font class=normalfont>18:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type18.html" tppabs="http://www.linuxhero.com/docs/type18.html">apache</a></font></td>    </tr>  </table></td></tr><tr class=secondalt> <td noWrap width=27%> <font class=normalfont>19:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type19.html" tppabs="http://www.linuxhero.com/docs/type19.html">email</a></font></td>    </tr>  </table></td></tr><tr class=firstalt> <td noWrap width=27%> <font class=normalfont>20:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type20.html" tppabs="http://www.linuxhero.com/docs/type20.html">ftp服务</a></font></td>    </tr>  </table></td></tr><tr class=secondalt> <td noWrap width=27%> <font class=normalfont>21:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type21.html" tppabs="http://www.linuxhero.com/docs/type21.html">cvs服务</a></font></td>    </tr>  </table></td></tr><tr class=firstalt> <td noWrap width=27%> <font class=normalfont>22:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type22.html" tppabs="http://www.linuxhero.com/docs/type22.html">代理服务</a></font></td>    </tr>  </table></td></tr><tr class=secondalt> <td noWrap width=27%> <font class=normalfont>23:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type23.html" tppabs="http://www.linuxhero.com/docs/type23.html">samba</a></font></td>    </tr>  </table></td></tr><tr class=firstalt> <td noWrap width=27%> <font class=normalfont>24:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type24.html" tppabs="http://www.linuxhero.com/docs/type24.html">域名服务</a></font></td>    </tr>  </table></td></tr><tr class=secondalt> <td noWrap width=27%> <font class=normalfont>25:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type25.html" tppabs="http://www.linuxhero.com/docs/type25.html">网络过滤</a></font></td>    </tr>  </table></td></tr><tr class=firstalt> <td noWrap width=27%> <font class=normalfont>26:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type26.html" tppabs="http://www.linuxhero.com/docs/type26.html">其他服务</a></font></td>    </tr>  </table></td></tr><tr class=secondalt> <td noWrap width=27%> <font class=normalfont>27:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type27.html" tppabs="http://www.linuxhero.com/docs/type27.html">nfs</a></font></td>    </tr>  </table></td></tr><tr class=firstalt> <td noWrap width=27%> <font class=normalfont>28:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type28.html" tppabs="http://www.linuxhero.com/docs/type28.html">oracle</a></font></td>    </tr>  </table></td></tr><tr class=secondalt> <td noWrap width=27%> <font class=normalfont>29:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type29.html" tppabs="http://www.linuxhero.com/docs/type29.html">dhcp</a></font></td>    </tr>  </table></td></tr><tr class=firstalt> <td noWrap width=27%> <font class=normalfont>30:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type30.html" tppabs="http://www.linuxhero.com/docs/type30.html">mysql</a></font></td>    </tr>  </table></td></tr><tr class=secondalt> <td noWrap width=27%> <font class=normalfont>31:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type31.html" tppabs="http://www.linuxhero.com/docs/type31.html">php</a></font></td>    </tr>  </table></td></tr><tr class=firstalt> <td noWrap width=27%> <font class=normalfont>32:</font> </td><td noWrap width=73%>   <table width=100% border=0>    <tr>       <td><font class=normalfont><a href="type32.html" tppabs="http://www.linuxhero.com/docs/type32.html">ldap</a></font></td>    </tr>  </table></td></tr>                            </table>
                          </DIV></TD></TR>
                    <TR vAlign=top>
                        <TD width="80%"> 
                          <DIV align=center><BR>
                          </DIV>
                        </TD></TR></TBODY></TABLE></TD></TR>
                </TABLE></TD></TR>
          </TABLE>
      <TABLE cellSpacing=0 cellPadding=4 width="100%" bgColor=#eeeeee 
        border=0><TBODY>
        <TR>
          <TD width="50%">
              <P><FONT class=middlefont>版权所有 &copy; 2004 <A 
            href="mailto:bjchenxu@sina.com">linux知识宝库</A><BR>
                违者必究. </FONT></P>
            </TD>
          <TD width="50%">
              <DIV align=right><FONT class=middlefont>Powered by: <A 
            href="mailto:bjchenxu@sina.com">Linux知识宝库</A> Version 0.9.0 </FONT></DIV>
            </TD></TR></TBODY></TABLE>
      <CENTER></CENTER></TD></TR>
    </TABLE></CENTER></BODY></HTML>
123

⌨️ 快捷键说明

复制代码 Ctrl + C
搜索代码 Ctrl + F
全屏模式 F11
切换主题 Ctrl + Shift + D
显示快捷键 ?
增大字号 Ctrl + =
减小字号 Ctrl + -