⭐ 欢迎来到虫虫下载站！ | 📦 资源下载 📁 资源专辑 ℹ️ 关于我们
⭐ 虫虫下载站
📤 上传资源

📄 0240network-secure-1.htm

📁 鸟哥的linux私房菜
💻 HTM
📖 第 1 页 / 共 3 页
字号:
🔍
123 
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
	>
<html lang="zh-TW">
<head>
	<meta http-equiv="Content-Type" content="text/html; charset=gb2312" >
	<meta name="Author" content="VBird, 鸟哥" >
	<meta name="Description" content="认识 iptables 与 TCP_Wrappers 的概念！" >
	<title>鸟哥的 Linux 私房菜 -- 认识网路安全</title>
	<style type="text/css">
	 	body {
			background-color: #D3D3D3;
			color: #000000;
			background-attachment:fixed ;
		}
				body,th,td,input,select,textarea,select,checkbox {
			font-family: '新细明体', 'Times New Roman', serif;
			font-size: 11pt ;
		}
		a:link		{text-decoration: none; color: blue}
		a:visited	{text-decoration: none; color: blue}
		a:active	{text-decoration: none; color: blue}
		a:hover		{text-decoration: underline; color: #ff0000}
				table.head1	{width:100%; background-color: #FFCCCC; 
				 border-style:groove;border-width:5px;border-color: #FFCCCC; margin:0;
				 padding: 5px 5px}
		   		   td.head1	{font: 10pt "新细明体", serif; color: #000099; }
		   		   td.info1	{font: 11pt "新细明体", serif; color: #000066; text-align:center; width:14%}
		   td.info2	{font: 11pt "新细明体", serif; color: #000066; text-align:center; width:12%}
		    *.info21	{font: 11pt "新细明体", serif; color: #000066; }
		    *.info22	{font: 11pt "新细明体", serif; color: blue  ; }
		    *.info23	{font: 11pt "新细明体", serif; color: green ; }
		   td.info3	{font: 11pt "新细明体", serif; color: #000066; text-align:justify}
				*.text_head0	{font-size:18pt; font-family:'标楷体','Times New Roman','Times', serif; }
		*.text_head_en	{font-size:18pt; font-family:'Times New Roman','Times', serif; }
				*.text_h1	{font: 15pt "新细明体", serif; color: #0000BB; font-weight: bold }
				*.text_h2	{font: 13pt "新细明体", serif; color: #0000BB; font-weight: bold }
				*.text_import1	{font:  11pt "新细明体", serif; color: #000088; font-weight: bold  }
		*.text_import2	{font:  11pt "新细明体", serif; color: #000088; font-weight: normal}
		*.text_vbird	{font:  11pt "新细明体", serif; color: #000088; font-weight: normal; 
				 font-style: italic;}
		*.text_history	{font:  10pt "新细明体", serif; color: #000066; }
		*.text_date	{font:  10pt "新细明体", serif; color: #3333FF; }
				*.block1	{padding: 10px 20px 10px 25px; text-align:left }
				*.block2	{padding: 10px 0px  10px 25px; text-align:left }
	    table.term2		{width: 350px; background-color: #000000;
				 border-style:groove;border-width:3px;border-color: #FFCCCC; margin:10px 0px;}
	    	    table.term		{width: 580px; background-color: #000000;
				 border-style:groove;border-width:3px;border-color: #FFCCCC; margin:10px 0px;}
	       	       td.term		{font:  10pt "细明体", Fixedsys, serif; color: #FFFFFF; }
		*.term_hd	{font:  10pt "细明体", Fixedsys, serif; color: #BBBBBB; }
		*.term_note	{font:  10pt "细明体", Fixedsys, serif; color: #777777; font-weight: normal }
		*.term_note_b	{font:  10pt "细明体", Fixedsys, serif; color: #FF77FF; font-weight: bolder }
		*.term_command	{font:  10pt "细明体", Fixedsys, serif; color: yellow ; font-weight: bolder }
		*.term_write	{font:  10pt "细明体", Fixedsys, serif; color: yellow ; font-weight: normal }
		*.term_say	{font:  10pt "细明体", Fixedsys, serif; color: #FF6666; font-weight: normal }
	</style>
	<script language="JaveScript" type="text/javascript" src="/include/java.js"></script>
</head>
<body style="margin:0; padding:0">
<center>


<!-- 这里是关于页首按钮处的按钮程式 -->
<div style="text-align:center">
<span style="font-weight:bolder; color:#3333FF"><span class="text_head0">鸟哥的<span class="text_head_en"> 
	Linux </span>私房菜</span></span><br />
<span style="color:#000080">为取得较佳浏览结果，请爱用 <a href="http://moztw.org" target="_blank">firefox</a>
	浏览本网页</span><br />
<a href="http://linux.vbird.org/" target="_blank"
	onmouseover="document.head_icon1.src='../images/icon_VBird_on.jpg'"
	onfocus="document.head_icon1.src='../images/icon_VBird_on.jpg'"
	onmouseout="document.head_icon1.src='../images/icon_VBird_off.jpg'">
	<img alt="前往鸟哥的 Linux 私房菜馆首页" title="前往鸟哥的 Linux 私房菜馆首页" name="head_icon1"
		src="../images/icon_VBird_off.jpg" border="0" /></a>
<a target="_blank" href="http://linux.vbird.org/linux_basic"
	onmouseover="document.head_icon2.src='../images/icon_basic_on.jpg'"
	onfocus="document.head_icon2.src='../images/icon_basic_on.jpg'"
	onmouseout="document.head_icon2.src='../images/icon_basic_off.jpg'">
	<img src="../images/icon_basic_off.jpg" border="0" 
		alt="前往 Linux 基础文件，新手请从头学起" 
		title="前往 Linux 基础文件，新手请从头学起" name="head_icon2" /></a>
<a target="_blank" href="http://linux.vbird.org/linux_server"
	onmouseover="document.head_icon3.src='../images/icon_server_on.jpg'"
	onfocus="document.head_icon3.src='../images/icon_server_on.jpg'"
	onmouseout="document.head_icon3.src='../images/icon_server_off.jpg'">
	<img src="../images/icon_server_off.jpg" border="0"
		alt="前往 Linux 架站文件，网路基础那章节请务必参考！" 
		title="前往 Linux 架站文件，网路基础那章节请务必参考！" name="head_icon3" /></a>
<a target="_blank" href="http://linux.vbird.org/linux_security"
	onmouseover="document.head_icon4.src='../images/icon_security_on.jpg'"
	onfocus="document.head_icon4.src='../images/icon_security_on.jpg'"
	onmouseout="document.head_icon4.src='../images/icon_security_off.jpg'">
	<img src="../images/icon_security_off.jpg" border="0"
		alt="前往『网路安全』相关文件网页" title="前往『网路安全』相关文件网页" name="head_icon4" /></a>
<a href="http://phorum.vbird.org" target="_blank"
	onmouseover="document.head_icon5.src='../images/icon_forum_on.jpg'"
	onfocus="document.head_icon5.src='../images/icon_forum_on.jpg'"
	onmouseout="document.head_icon5.src='../images/icon_forum_off.jpg'">
	<img src="../images/icon_forum_off.jpg" border="0"
		alt="前往 Linux 新手讨论区，发问前务必查阅发文规则" 
		title="前往 Linux 新手讨论区，发问前务必查阅发文规则" name="head_icon5" /></a>
<a target="_blank" href="http://linux.vbird.org/adsl"
	onmouseover="document.head_icon6.src='../images/icon_adsl_on.jpg'"
	onfocus="document.head_icon6.src='../images/icon_adsl_on.jpg'"
	onmouseout="document.head_icon6.src='../images/icon_adsl_off.jpg'">
	<img src="../images/icon_adsl_off.jpg" border="0"
		alt="前往『ADSL连线分享』相关文件网页" title="前往『ADSL连线分享』相关文件网页" name="head_icon6" /></a>
<a href="http://www.study-area.org" target="_blank"
	onmouseover="document.head_icon7.src='../images/icon_study-area.jpg'"
	onfocus="document.head_icon7.src='../images/icon_study-area.jpg'"
	onmouseout="document.head_icon7.src='../images/icon_study-area.jpg'">
	<img src="../images/icon_study-area.jpg" border="0"
		alt="前往 Study Area 网站" title="前往 Study Area 网站" name="head_icon7" /></a>
<br />
</div>


<table summary="本文内容的排版" style="width:750px; 
	background-image:url('../images/VBirdLinux.jpg');
	background-attachment:fixed;" border="0" cellspacing="0" cellpadding="0">
<tr><td style="width:16px; height:16px; background-image:url('../images/border-top-left.jpg'); 
	font-size:6px">  </td>
    <td style="width:718px; height:16px; font-size:6px;
	background-image:url('../images/border-top-center.jpg')">  </td>
    <td style="width:16px; height:16px; background-image:url('../images/border-top-right.jpg');
	font-size:6px">  </td></tr>
<tr><td style="width:16px; font-size:6px;
	background-image:url('../images/border-middle-left.jpg')">  </td>
    <td width="718">

<!-- 本文的档头部分 -->
<div style="text-align:center">
    <a href="0240network-secure-1.php">
    <span class="text_head0">认识网路安全</span></a><br />
</div>
    <div style="text-align:left">
        <a href="0240network-secure-1.php?thisscreen=800x600"><!--切换解析度为 800x600--></a>
    </div>
    <div style="text-align:right">
        <span class="text_history">最近更新日期∶2006/09/06</span>
    </div>


<!-- 本文的档头部分 -->
<table class="head1" summary="排版∶文章档头的说明"><tr><td class="head1">
	在介绍了『<a href="0110network_basic.php">网路基础</a>』、『<a href="0210port_limit.php">限制连线
	port number </a>』、『<a href="0220upgrade.php">网路升级套件</a>』之后，再来准备要上
	Internet 了吗？！如果只是想要上 Internet 去浏览，那么自然没有问题，如果是想要对
	Internet 开放网路服务，那么最好还是先认识一下网路安全会比较好一些。什么？套件也更新了，
	port 也关闭了，还需要认识什么网路安全啊？！呵呵！当然啦！因为难保我们的主机不会被新的套件漏洞以及阻断式攻击
	(DoS)所困扰啊！在这个章节里面，我们会稍微介绍一些基础的网路防护观念，尤其是系统管理员应该要做的事情呐！
</td></tr></table><br />


<!-- 本文的连结区部分 -->
<div class=block1>
<span class="text_h1">
1. <a href="#packet_flow">网路封包连线进入主机的流程</a><br />
	<span class=text_h2>
	    1.1 <a href="#packet_flow_2">封包进入主机的流程</a><br />
	    1.2 <a href="#packet_flow_protect">主机能作的保护∶权限设定、套件更新、SELinux</a><br />
	</span>
2. <a href="#acl">主机的细部权限规划∶ACL 的使用</a><br />
	<span class=text_h2>
	    2.1 <a href="#acl_what">什么是 ACL ？</a><br />
	    2.2 <a href="#acl_support">如何启动 ACL？</a><br />
	    2.3 <a href="#acl_use">ACL 的设定技巧</a>∶ <a href="#getfacl">getfacl</a>
		, <a href="#setfacl">setfacl</a><br />
	</span>
3. <a href="#attack">一些常见的攻击手法与主机的保护方式</a><br />
4. <a href="#repair">被入侵后的修复工作</a><br />
	<span class=text_h2>
	    4.1 <a href="#repair_need">网管人员的额外技巧与任务</a><br />
	    4.2 <a href="#repair_step">入侵恢复工作</a><br />
	</span>
123

⌨️ 快捷键说明

复制代码 Ctrl + C
搜索代码 Ctrl + F
全屏模式 F11
切换主题 Ctrl + Shift + D
显示快捷键 ?
增大字号 Ctrl + =
减小字号 Ctrl + -