我希望我的iptables规则在启动时自动加载。根据Debian上的Wiki,这可以通过在/etc/network/if-pre-up.d/中放置一个名为iptables的脚本来完成。 cat /etc/network/if-pre-up.d/iptables #!/bin/sh /sbin/iptables-restore < /etc/firewall/iptables.rules /sbin/ip6tables-restore < /etc/firewall/ip6tables.rules 该脚本有效:如果我以root用户身份运行,则应用防火墙规则。但是在重新启动时,没有防火墙规则。我究竟做错了什么? 根据要求:/ etc / network / interfaces(我没有触摸此文件) user@DebianVPS:~$ cat /etc/network/interfaces # This file describes the network interfaces available on your system # and how to activate them. For more information, see interfaces(5). # The loopback network interface auto lo iface …
我有一台运行Debian 6.0且安装了logcheck的服务器。昨天,我收到此消息: Jan 19 19:15:10 hostname sshd[28397]: Authentication tried for root with correct key but not from a permitted host (host=4.red-2-140-77.dynamicip.rima-tde.net, ip=2.140.77.4). 我不知道这是谁,我怀疑他是偶然在那儿的。 现在,我该怎么办? 我要做的第一件事是禁用ssh密码身份验证,并切换到公用/专用密钥。我还检查了authorized_keys文件,只看到了我的公钥 接下来是什么? 我怎么知道其他人在我的机器上做了什么?
我一生中第一次有这样的事情: root@peklan:~# aptitude install git-core No packages will be installed, upgraded, or removed. 0 packages upgraded, 0 newly installed, 0 to remove and 0 not upgraded. Need to get 0 B of archives. After unpacking 0 B will be used. FATAL -> Failed to fork. 有人可以解释如何摆脱此消息吗?
我正在尝试使用IPtables的TRACE目标,但似乎无法记录任何跟踪信息。我想使用这里描述的内容: iptables的调试器。 来自TRACE的iptables男子: This target marks packes so that the kernel will log every rule which match the packets as those traverse the tables, chains, rules. (The ipt_LOG or ip6t_LOG module is required for the logging.) The packets are logged with the string prefix: "TRACE: tablename:chain- name:type:rulenum " where type …