iptables防火墙配置教程及代码.doc

例题1 配置基于IP的虚拟主机1. 配置虚拟网络接口rootlocalhost # ifconfig eth0:1 11 uprootlocalhost # ifconfig eth0:2 22 up如果希望实现永久配置，需要创建并改写ifcfg-eth0:1和ifcfg-eth0:2文件创建ifcfg-eth0:1和ifcfg-eth0:2文件，复制ifcfg-eth0文件内容到这两个文件中，并将其中设备名和IP地址做如图1，图2所示的修改rootlocalhost #cd /etc/sysconfig/network-scripts/rootlocalhost network-scripts# cp ifcfg-eth0 ifcfg-eth0:1rootlocalhost network-scripts# cp ifcfg-eth0 ifcfg-eth0:2rootlocalhost network-scripts# vi ifcfg-eth0:1图1 ifcfg-eth0:1内容rootlocalhost network-scripts# vi ifcfg-eth0:2图2 ifcfg-eth0:2内容2. 向/etc/hosts文件增加两条IP地址与域名的映射rootlocalhost network-scripts# echo 11 www.ipvhost1.me /etc/hostsrootlocalhost network-scripts# echo 22 www.ipvhost2.me /etc/hosts3. 创建web站点11和22的文件目录树rootlocalhost network-scripts# mkdir -p /var/www/vhosts/11,222/htdocs,logs,conf,cgi-binrootlocalhost network-scripts# echo 11/var/www/vhosts/11/htdocs/index.htmlrootlocalhost network-scripts# echo 22/var/www/vhosts/22/htdocs/index.htmlrootlocalhost network-scripts# tree /var/www/vhosts/var/www/vhosts|- 11| |- cgi-bin| |- conf| |- htdocs| | - index.html| - logs- 22 |- cgi-bin |- conf |- htdocs | - index.html - logs10 directories, 2 filesrootlocalhost network-scripts# vi /etc/httpd/vhosts.d/ip-vhosts.confrootlocalhost network-scripts# apachectl -S /service httpd configtestVirtualHost configuration:11:80 www.ipvhost1.me (/etc/httpd/conf.d/ip-vhosts.conf:1)22:80 www.ipvhost2.me (/etc/httpd/conf.d/ip-vhosts.conf:10)Syntax OKrootlocalhost htdocs# vi /etc/httpd/conf/httpd.conf/使用IP地址访问/使用IP地址访问/使用域名访问/使用域名访问 例题2 配置基于域名的虚拟主机rootlocalhost htdocs# echo /etc/hosts rootlocalhost htdocs# echo /etc/hosts rootlocalhost htdocs# mkdir -p /var/www/vhosts/,net/htdocs,logs,conf,cgi-binrootlocalhost htdocs# echo /var/www/vhosts//htdocs/index.htmlrootlocalhost htdocs# echo /var/www/vhosts//htdocs/index.htmlrootlocalhost htdocs#mkdir /etc/httpd/vhost.drootlocalhost htdocs# vi /etc/httpd/vhosts.d/.confrootwww www# cp /etc/httpd/vhosts.d/,net.confrootwww www# vi /etc/httpd/vhosts.d/.conf rootwww vhosts.d# service httpd configtestSyntax OKrootwww vhosts.d# service httpd restart 例题3 在主配置文件中配置对/server-status访问的基本认证rootwww conf.d# vi /etc/httpd/conf.d/server-status.confrootwww conf.d# mkdir /etc/httpd/passwd/htpasswd建立和更新用于基本认证的存储用户名/密码的文本文件。rootwww conf.d# htpasswd -bcm /etc/httpd/passwd/jamond 1106 1106passwdAdding password for user 1106rootwww conf.d# cat /etc/httpd/passwd/jamond1106:$apr1$G4/Lb.$DwAkUzAO/lMCml2E5pdhc0rootwww conf.d# htpasswd -bm /etc/httpd/passwd/jamond 1105 1105passwdAdding password for user 1105rootwww conf.d# cat /etc/httpd/passwd/jamond1106:$apr1$G4/Lb.$DwAkUzAO/lMCml2E5pdhc01105:$apr1$8u1Hc/.$cRgnhXPkjXEygoJymL9kH/rootwww conf.d# chown apache /etc/httpd/passwd/jamondrootwww conf.d# service httpd configtesthttpd: apr_sockaddr_info_get() failed for httpd: Could not reliably determine the servers fully qualified domain name, using for ServerNameSyntax OKrootwww conf.d# service httpd restartStopping httpd: OK Starting httpd: httpd: apr_sockaddr_info_get() failed for httpd: Could not reliably determine the servers fully qualified domain name, using for ServerName OK 例题4 在虚拟主机下使用.htaccess文件配置认证和授权rootwww conf.d# vi /etc/httpd/vhosts.d/.confrootwww conf.d# service httpd restartStopping httpd: OK Starting httpd: httpd: apr_sockaddr_info_get() failed for httpd: Could not reliably determine the servers fully qualified domain name, using for ServerName OK rootwww # echo digest,private/var/www/vhosts//htdocs/private/index.htmlrootwww # vi /var/www/vhosts//htdocs/private/.htaccessrootwww # cd /var/www/vhosts//conf/rootwww conf# htdigest -c digest_pa