Здраствуите
Может тут найду решения,как можно защититься с помощью Fail2ban от SQL Injection на Nginx, допустим от такои инъекции
' and 1=2 UNION ALL SELECT @@version,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null-- &cache=true
Здравствуйте ребят можете помочь какие то идеями бороться хоть с слабыми DoS атаками на Cisco 800 ! ?
Здравствуйте как возможно установить Модуль FTP PHP 5.3 Gentoo !?
2014/12/12 21:06:30 [error] 31331#0: *1 directory index of «/var/www/localhost/host.privat-server.net/public_html/» is forbidden, client: ***********, server: host.privat-server.net, request: «GET / HTTP/1.1», host: «host.privat-server.net»
2014/12/12 21:06:36 [info] 31331#0: *2 client closed connection while waiting for request, client: ***********, server: 0.0.0.0:80
403 Forbidden
Вот такая проблема как возможно решить ?
Пробовал менять права на папках не помогло (
bzip2: Compressed file ends unexpectedly;
perhaps it is corrupted? *Possible* reason follows.
bzip2: Inappropriate ioctl for device
Input file = (stdin), output file = (stdout)
It is possible that the compressed file(s) have become
corrupted.
You can use the -tvv option to test integrity of such files.
You can use the `bzip2recover' program to attempt to recover
data from undamaged sections of corrupted files.
tar: Unexpected EOF in archive
tar: Unexpected EOF in archive
tar: Error is not recoverable: exiting now
Вот такая проблема может ктоа знаит решения ?
Connection closed by server with exitcode 1
Вот такая проблема !
Порт открыт с роутера ! и в Iptables тоже !
[root@localhost ~]# iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all — anywhere anywhere local_input all — anywhere anywhere ACCEPT all — anywhere anywhere match-set allow src udp_input udp — anywhere anywhere tcp_input tcp — anywhere anywhere icmp_input icmp — anywhere anywhere ACCEPT all — anywhere anywhere ctstate RELATED,ESTABLISHED DROP all — anywhere anywhere
Chain FORWARD (policy ACCEPT) target prot opt source destination
Chain OUTPUT (policy ACCEPT) target prot opt source destination REJECT tcp — anywhere anywhere match-set steamips dst tcp dpt:27038 reject-with tcp-reset
Chain dns_input (1 references) target prot opt source destination DROP all — anywhere anywhere recent: UPDATE seconds: 2 hit_count: 10 name: DNSAMP side: source mask: 255.255.255.255 ACCEPT all — anywhere anywhere recent: SET name: DNSAMP side: source mask: 255.255.255.255 DROP all — anywhere anywhere
Chain ftp_input (1 references) target prot opt source destination ACCEPT tcp — anywhere anywhere tcp dpts:60000:61000 ACCEPT all — anywhere anywhere ctstate NEW limit: up to 15/sec burst 30 mode srcip LOG all — anywhere anywhere ctstate NEW limit: avg 1/min burst 5 LOG level warning prefix " FW ftp flood: " ACCEPT all — anywhere anywhere ctstate RELATED,ESTABLISHED DROP all — anywhere anywhere
Chain hlds_ff (1 references) target prot opt source destination DROP all — anywhere anywhere STRING match «by ZeaL» ALGO name kmp TO 100 DROP all — anywhere anywhere STRING match «Brute» ALGO name kmp TO 100
Chain hlds_input (1 references) target prot opt source destination hlds_ff all — anywhere anywhere STRING match «|ffffffff|» ALGO name kmp TO 32 DROP all — anywhere anywhere STRING match «|281b003075777131|» ALGO name kmp TO 32 ACCEPT all — anywhere anywhere limit: up to 303/sec burst 600 mode srcip-dstip-dstport LOG all — anywhere anywhere limit: avg 1/min burst 2 LOG level warning prefix " FW hlds flood: " DROP all — anywhere anywhere
Chain http_input (1 references) target prot opt source destination DROP all — anywhere anywhere #conn src/32 > 10 ACCEPT all — anywhere anywhere ctstate NEW limit: up to 15/sec burst 30 mode srcip LOG all — anywhere anywhere ctstate NEW limit: avg 1/min burst 5 LOG level warning prefix " FW http flood: " ACCEPT all — anywhere anywhere ctstate RELATED,ESTABLISHED DROP all — anywhere anywhere
Chain icmp_input (1 references) target prot opt source destination ACCEPT icmp — anywhere anywhere icmp echo-request limit: up to 2/sec burst 4 mode srcip DROP icmp — anywhere anywhere icmp echo-request ACCEPT all — anywhere anywhere
Chain local_input (1 references) target prot opt source destination ACCEPT all — anywhere anywhere
Chain samp_input (1 references) target prot opt source destination
Chain ssh_input (2 references) target prot opt source destination ACCEPT all — anywhere anywhere ctstate NEW limit: up to 10/sec burst 20 mode srcip LOG all — anywhere anywhere ctstate NEW limit: avg 1/min burst 5 LOG level warning prefix " FW ssh flood: " ACCEPT all — anywhere anywhere ctstate RELATED,ESTABLISHED DROP all — anywhere anywhere
Chain tcp_input (1 references) target prot opt source destination ACCEPT tcp — anywhere anywhere tcp dpt:25565 ftp_input tcp — anywhere anywhere multiport dports ftp,60000:61000 http_input tcp — anywhere 192.168.1.105.in-addr.arpa multiport dports http,webcache,dnsix ACCEPT tcp — anywhere 192.168.1.105.in-addr.arpa tcp dpt:mysql match-set allowmysql src ACCEPT tcp — anywhere 192.168.1.105.in-addr.arpa tcp dpt:https match-set allowsquid src ssh_input tcp — anywhere anywhere tcp dpt:oa-system ssh_input tcp — anywhere anywhere tcp dpt:ssh ACCEPT tcp — anywhere anywhere tcp dpt:personal-agent ACCEPT tcp — !0.1.168.192.in-addr.arpa/24 192.168.1.105.in-addr.arpa multiport dports netbios-ssn,microsoft-ds ACCEPT tcp — anywhere anywhere multiport dports 6881,ndmp:emcrmird ACCEPT all — anywhere anywhere ctstate RELATED,ESTABLISHED DROP all — anywhere anywhere
Chain udp_input (1 references) target prot opt source destination hlds_input udp — anywhere anywhere udp dpts:icl-twobase1:30000 samp_input udp — anywhere anywhere udp dpts:cbt:7780 dns_input udp — anywhere 192.168.1.105.in-addr.arpa udp dpt:domain ACCEPT udp — anywhere 192.168.1.105.in-addr.arpa multiport dports 6881,ndmp:10005 ACCEPT all — anywhere anywhere ctstate RELATED,ESTABLISHED DROP all — anywhere anywhere
здравствуйте у меня проблема вот данная команда не хочет работать на Linux Mint 17
-A INPUT -m set --match-set allow src -j ACCEPT
как заставить ее работать ?
Здравствуйте тут вопрос! Мне немного стыдно за него ....
Каким образом возможно установить php-ssh ? Пробовал dev-php/pecl-ssh2
но тут вот такая ошибка ! http://rghost.ru/56512093
Nginx.conf
http://bpaste.net/show/368788/
vhost.a/localhost
http://bpaste.net/show/368792/
Проблема и вот логи
http://bpaste.net/show/368793/
Помогите решить проблему пожалуйста !
Bad argument `:INPUT' Try `iptables -h' or 'iptables --help' for more information. Bad argument `:FORWARD' Try `iptables -h' or 'iptables --help' for more information. Bad argument `:OUTPUT' Try `iptables -h' or 'iptables --help' for more information. Bad argument `—hex-string' Try `iptables -h' or 'iptables --help' for more information. Bad argument `—hex-string' Try `iptables -h' or 'iptables --help' for more information. Bad argument `—hex-string' Try `iptables -h' or 'iptables --help' for more information. Bad argument `—dport' Try `iptables -h' or 'iptables --help' for more information. Bad argument `—dport' Try `iptables -h' or 'iptables --help' for more information. Bad argument `—state' Try `iptables -h' or 'iptables --help' for more information. Bad argument `—state' Try `iptables -h' or 'iptables --help' for more information. Bad argument `—state' Try `iptables -h' or 'iptables --help' for more information. Bad argument `—state' Try `iptables -h' or 'iptables --help' for more information. Bad argument `—state' Try `iptables -h' or 'iptables --help' for more information. Bad argument `—dport' Try `iptables -h' or 'iptables --help' for more information. Bad argument `—state' Try `iptables -h' or 'iptables --help' for more information. Bad argument `—string' Try `iptables -h' or 'iptables --help' for more information. Bad argument `—string' Try `iptables -h' or 'iptables --help' for more information. Bad argument `—string' Try `iptables -h' or 'iptables --help' for more information. Bad argument `—string' Try `iptables -h' or 'iptables --help' for more information.
iptables-save # Generated by iptables-save v1.4.18 on Fri Apr 4 11:13:13 2014 *mangle :PREROUTING ACCEPT [17:872] :INPUT ACCEPT [17:872] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [29:4576] :POSTROUTING ACCEPT [29:4576] COMMIT # Completed on Fri Apr 4 11:13:13 2014 # Generated by iptables-save v1.4.18 on Fri Apr 4 11:13:13 2014 *nat :PREROUTING ACCEPT [0:0] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [2:296] :POSTROUTING ACCEPT [2:296] COMMIT # Completed on Fri Apr 4 11:13:13 2014 # Generated by iptables-save v1.4.18 on Fri Apr 4 11:13:13 2014 *filter :INPUT ACCEPT [17:872] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [36:5624] COMMIT # Completed on Fri Apr 4 11:13:13 2014
И само правила:
#!/bin/sh iptables -t filter -F iptables -t nat -F iptables -t mangle -F
iptables :INPUT ACCEPT [228396514:18700273796] iptables :FORWARD ACCEPT [0:0] iptables :OUTPUT ACCEPT [283964126:35711014275] iptables -A INPUT -p udp -m udp -m string —hex-string «|178f5230e2e17d73d6bc6562f1ed29e0|» —algo kmp —to 65535 -j DROP iptables -A INPUT -p udp -m udp -m string —hex-string «|d50000806e000000|» —algo kmp —to 65535 -j DROP iptables -A INPUT -p udp -m udp -m string —hex-string «|ffffffff6765746368616c6c656e6765000000000000|» —algo kmp —to 65535 -j DROP iptables -A INPUT -p udp -m udp —dport 27015 -m hashlimit —hashlimit-upto 100/sec —hashlimit-burst 100 —hashlimit-mode srcip —hashlimit-name CSS -j ACCEPT iptables -A INPUT -p udp -m udp —dport 27015 -j DROP iptables -A INPUT -p udp -m state —state NEW -m udp —dport 21 -j ACCEPT iptables -A INPUT -p tcp -m state —state NEW -m tcp —dport 21 -j ACCEPT iptables -A INPUT -p tcp -m state —state NEW -m tcp —dport 22 -j ACCEPT iptables -A INPUT -p tcp -m state —state NEW -m tcp —dport 80 -j ACCEPT iptables -A INPUT -p udp -m state —state NEW -m udp —dport 80 -j ACCEPT iptables -A INPUT -p tcp —dport 80 -m state —state NEW -m limit —limit 5/minute —limit-burst 200 -j ACCEPT iptables -A INPUT -m state —state RELATED,ESTABLISHED -m limit —limit 5/second —limit-burst 5 -j ACCEPT iptables -A INPUT -m string —string «XBrute» —algo kmp —to 65535 -j DROP iptables -A INPUT -m string —string «HLBrute 1.10» —algo kmp —to 65535 -j DROP iptables -A INPUT -m string —string «HLBrute» —algo kmp —to 65535 -j DROP iptables -A INPUT -m string —string «XBrute by ZeaL» —algo kmp —to 65535 -j DROP
Помогите,в чем проблема !?
Многоуважаемые дамы и джентльмены ! У меня есть вопрос , точение проблема на который не могу найти ответ или решение ...
Проблема в том что я когда открываю через PortForwardin порты 44405 55901 55919 с ип 192.168.0.39 то я не могу зайти на сервер через GlobalIP внешнии ип (http://ip-address.ru/) тока через 192.168.0.39 а другие уже могут через GlobalIP внешнии ип
Задача в том как зделати штоб я мог заить через GlobalIP внешнии ип !D-Link DIR-300NRU rev.B6
возможно установить gps на ноутбук ?
и какой же GPS ?
2014/01/18 05:04:02 [error] 16977#0: *13 FastCGI sent in stderr: «PHP message: PHP Notice: Undefined index: logs_droper in /usr/share/nginx/www/config.php on line 53» while reading response header from upstream, client: 127.0.0.1, server: localhost, request: «GET /config.php HTTP/1.1», upstream: «fastcgi://unix:/var/run/php5-fpm.sock:», host: «127.0.0.1»
Перенос gentoo с виртуальной машины на ноутбук !
Как установит чтобы поддержал MSSQL СКРИПТЫ
