iptables -A INPUT -p tcp -m state --state NEW --dport 22 -m recent --update --seconds 90 -j DROP
iptables -A INPUT -p tcp -m state --state NEW --dport 22 -m recent --set -j ACCEPT
### ipfw
options IPFIREWALL # поддержка файрвола
options IPFIREWALL_VERBOSE # поддержка логирования
options IPDIVERT # поддержка divert-сокетов (нужна для natd)
options DUMMYNET # поддержка шейпера dummynet
### ipf
options IPFILTER # поддержка файрвола
options IPFILTER_LOG # поддержка логирования
### pf
device pf # поддержка файрвола
device pflog # поддержка логирования
device pfsync # отслеживание состояния
options ALTQ # поддержка шейпера ALTQ
### ipfw
firewall_enable="YES" # поддержка файрвола
firewall_type="/etc/ipfw.rules" # тип (способ инициализации)
natd_enable="YES" # поддержка natd
### ipf
ipfilter_enable="YES" # поддержка файрвола
ipfilter_rules="/etc/ipf.rules" # файл с правилами
ipnat_enable="YES" # поддержка ipnat
ipnat_rules="/etc/ipnat.rules" # файл с правилами NAT
### pf
pf_enable="YES" # поддержка файрвола
pf_rules="/etc/pf.rules" # файл с правилами
// ipfw
add check-state
add allow tcp from any to any out setup via rl0 keep-state
// ipf
pass out on rl0 proto tcp from any to any flags S keep state
// pf
pass out on rl0 proto tcp from any to any flags S/SA keep state// ipfw (должен быть запущен natd на порту 8668)
add divert 8668 ip from 10.10.0/24 to any out via bge0
add divert 8668 ip from any to 1.2.3.4 in via bge0
// ipf (правила выносятся в ipnat.rules, запускаются командой ipnat)
map rl0 10.10.0.0/24 -> 1.2.3.4/32
// pf (размещаются в общей конфигурации перед правилами фильтрации)
nat on rl0 from 10.10.0.0/24 to any -> 1.2.3.4/32
// ipfw
add pipe 1 ip from any to 192.168.0.0/24
pipe 1 config bw 128Kbit/s
// pf
altq on rl0 cbq queue q_limited
queue q_limited bandwidth 128Kb cbq(default)
pass quick from any to 192.168.0.0/24 keep state queue q_limited
root@img:/etc/apache2# service apache2 restart
[....] Restarting web server: apache2[Sun Mar 02 14:57:09 2014] [warn] NameVirtualHost 127.0.0.1:81 has no VirtualHosts
... waiting [Sun Mar 02 14:57:10 2014] [warn] NameVirtualHost 127.0.0.1:81 has no VirtualHosts
. ok
root@img:/etc/apache2#
#NameVirtualHost 127.0.0.1:81
Listen 81root@img:/etc/apache2# service apache2 restart
[ ok ] Restarting web server: apache2 ... waiting .
root@img:/etc/apache2#http://eltex.nsk.ru/product/mes3124#http://vyos.net/rate-limit output 15360000 2880000 5760000 conform-action transmit exceed-action droprate-limit output ‘rate’ ‘burst_norm’ ‘burst_max’ conform-action transmit exceed-action drop
[root@s24 cron.daily]# ./freshclam
LibClamAV Warning: Cannot dlopen libclamunrar_iface: file not found - unrar support unavailable
[root@s24 cron.daily]# yum install clamav-devel
Loaded plugins: fastestmirror, presto
Loading mirror speeds from cached hostfile
epel/metalink | 24 kB 00:00
* base: centos-mirror.rbc.ru
* epel: mirror.logol.ru
* extras: centos-mirror.rbc.ru
* rpmforge: mirror.awanti.com
* updates: centos-mirror.rbc.ru
CentALT | 951 B 00:00
base | 3.7 kB 00:00
endpoint | 951 B 00:00
extras | 3.4 kB 00:00
rpmforge | 1.9 kB 00:00
updates | 3.4 kB 00:00
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package clamav-devel.x86_64 0:0.98.1-1.el6 will be installed
--> Finished Dependency Resolution
Dependencies Resolved
=======================================================================================================================================
Package Arch Version Repository Size
=======================================================================================================================================
Installing:
clamav-devel x86_64 0.98.1-1.el6 CentALT 46 k
Transaction Summary
=======================================================================================================================================
Install 1 Package(s)
Total download size: 46 k
Installed size: 76 k
Is this ok [y/N]: y
Downloading Packages:
Setting up and reading Presto delta metadata
Processing delta metadata
Package(s) data still to download: 46 k
clamav-devel-0.98.1-1.el6.x86_64.rpm | 46 kB 00:00
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
Installing : clamav-devel-0.98.1-1.el6.x86_64 1/1
Verifying : clamav-devel-0.98.1-1.el6.x86_64 1/1
Installed:
clamav-devel.x86_64 0:0.98.1-1.el6
Complete!
[root@s24 cron.daily]# ./freshclam
[root@s24 cron.daily]#ipmitool
apt-get install ipmitool
ipmitool -h
ipmitool -H IP_ipmi_SuperMicro -L User -U Login -P PasSwoRd sdr
CPU1 Temp | 0x00 | ok
CPU2 Temp | 0x00 | ok
System Temp | 18 degrees C | ok
CPU1 Vcore | 1.19 Volts | ok
CPU2 Vcore | 1.18 Volts | ok
+1.5V | 1.51 Volts | ok
+5V | 5.22 Volts | ok
+5VSB | 5.18 Volts | ok
+12V | 12.19 Volts | ok
-12V | -12.00 Volts | ok
+3.3V | 3.26 Volts | ok
+3.3VSB | 3.24 Volts | ok
VBAT | 3.19 Volts | ok
Fan1 | 8370 RPM | ok
Fan2 | 8370 RPM | ok
Fan3 | 8370 RPM | ok
Fan4 | 8370 RPM | ok
Fan5 | 14040 RPM | ok
Fan6 | 14040 RPM | ok
Fan7 | no reading | ns
Fan8 | no reading | ns
P1-DIMM1A Temp | 17 degrees C | ok
P1-DIMM1B Temp | no reading | ns
P1-DIMM2A Temp | 19 degrees C | ok
P1-DIMM2B Temp | no reading | ns
P1-DIMM3A Temp | 19 degrees C | ok
P1-DIMM3B Temp | no reading | ns
P2-DIMM1A Temp | 18 degrees C | ok
P2-DIMM1B Temp | no reading | ns
P2-DIMM2A Temp | 17 degrees C | ok
P2-DIMM2B Temp | no reading | ns
P2-DIMM3A Temp | 18 degrees C | ok
P2-DIMM3B Temp | no reading | ns
Intrusion | 0x00 | ok
PS Status | 0x00 | oksysctl -a | egrep -i 'hw.machine|hw.model|hw.ncpu'
hw.machine: amd64
hw.model: Intel® Core(TM)2 Duo CPU E4500 @ 2.20GHz
hw.ncpu: 2
hw.machine_arch: amd64pciconf -lv | grep -A4 em
em0@pci0:13:0:0: class=0x020000 card=0x108c15d9 chip=0x108c8086 rev=0x03 hdr=0x00
vendor = 'Intel Corporation'
device = 'Intel Corporation 82573E Gigabit Ethernet Controller (Copper) (82573E)'
class = network
subclass = ethernet
em1@pci0:14:0:0: class=0x020000 card=0x109a15d9 chip=0x109a8086 rev=0x00 hdr=0x00
vendor = 'Intel Corporation'
device = 'Intel PRO/1000 PL Network Adaptor (82573L)'
class = network
subclass = ethernet