2006隨手札記

Network Resource Access Controls

*Netfilter
#iptables

#chkconfig --list iptables
iptables 0:off 1:off 2:on 3:on 4:on 5:on 6:off

(1)Rule Targets
DROP, ACCEPT, LOG, REJECT, custom chain

System Service Access Controls

*chkconfig控制服務在開機後是否自動啟動
(1)
#chkconfig --list

#chkconfig name {on|off}
#chkconfi vsftpd on

#chkconfig --level levels name {on|off}

LAB

*Logging to a centralized loghost

%server1的log複寫一份到server118


(1) server1
#vi /etc/syslog.conf
加入 user,* @server118

Syslogd and Klogd Configuration

configuration: /etc/syslog.conf

Syntax:
facility.priority log_location

Ex:
mail.info /dev/tty8

System Performance and Security

*即時監看log
#tail -f /var/log/[logfile]

*查看網路狀態
＃netstat -tupln
-n : do not resolve IP address to host name
-t : list TCP connections
-u : list UDP connections