4월 2015 - 어느용

tar 사용법

tar Basic compress

tar cvfz public_html.tgz public_html

1	tar cvfz public_html.tgz public_html

tar Basic compress with date

tar -czvf public_html_`date +%Y%m%d`.tgz public_html

1	tar -czvf public_html_`date +%Y%m%d`.tgz public_html

tar increase compress

tar -g /backup/snap-shot-www -czvf /backup/backup_www_0.tgz /var/www/
tar -g /backup/snap-shot-www -czvf /backup/backup_www_`date +%Y%m%d`.tgz /var/www/

1 2	tar -g /backup/snap-shot-www -czvf /backup/backup_www_0.tgz /var/www/ tar -g /backup/snap-shot-www -czvf /backup/backup_www_`date +%Y%m%d`.tgz /var/www/

tar compress remote backup

tar cvfz - /var/www | ssh user@host "cat > /backup/www.tgz"

1	tar cvfz - /var/www \| ssh user@host "cat > /backup/www.tgz"

tar compress remote decompress

tar cvfz - /var/www | ssh user@host "tar xvfz -"

1	tar cvfz - /var/www \| ssh user@host "tar xvfz -"

tar remote compress backup

ssh user@host "tar -zcf - /var/www/" > /_backup/www.tgz

1	ssh user@host "tar -zcf - /var/www/" > /_backup/www.tgz

iptables 목록들

Basic IP Block

iptables -A INPUT -i eth0 -p tcp -s 1.1.1.1 -j DROP

1	iptables -A INPUT -i eth0 -p tcp -s 1.1.1.1 -j DROP

Allow incoming SSH

iptables -A INPUT -i eth0 -m state --state NEW,ESTABLISHED -m tcp -p tcp -s 1.1.1.1 --dport 22 -j ACCEPT

1	iptables -A INPUT -i eth0 -m state --state NEW,ESTABLISHED -m tcp -p tcp -s 1.1.1.1 --dport 22 -j ACCEPT

Allow incoming SSH from a Sepcific Network

iptables -A INPUT -i eth0 -m state --state NEW,ESTABLISHED -m tcp -p tcp -s 1.1.1.1/24 --dport 22 -j ACCEPT

1	iptables -A INPUT -i eth0 -m state --state NEW,ESTABLISHED -m tcp -p tcp -s 1.1.1.1/24 --dport 22 -j ACCEPT

Combine Multiple Ports roles

iptables -A INPUT -i eth0 -m state --state NEW,ESTABLISHED -m tcp -p tcp -s 1.1.1.1/24 --dport 22,80,443 -j ACCEPT

1	iptables -A INPUT -i eth0 -m state --state NEW,ESTABLISHED -m tcp -p tcp -s 1.1.1.1/24 --dport 22,80,443 -j ACCEPT

Load Balance Incoming Web Traffic

iptables -A PREROUTING -i eth0 -p tcp --dport 443 -m state --state NEW -m nth --counter 0 --every 3 --packet 0 -j DNAT --to-destination 192.168.1.101:443
iptables -A PREROUTING -i eth0 -p tcp --dport 443 -m state --state NEW -m nth --counter 0 --every 3 --packet 1 -j DNAT --to-destination 192.168.1.102:443
iptables -A PREROUTING -i eth0 -p tcp --dport 443 -m state --state NEW -m nth --counter 0 --every 3 --packet 2 -j DNAT --to-destination 192.168.1.103:443

iptables -A PREROUTING -i eth0 -p tcp --dport 443 -m state --state NEW -m nth --counter 0 --every 3 --packet 0 -j DNAT --to-destination 192.168.1.101:443

iptables -A PREROUTING -i eth0 -p tcp --dport 443 -m state --state NEW -m nth --counter 0 --every 3 --packet 1 -j DNAT --to-destination 192.168.1.102:443

iptables -A PREROUTING -i eth0 -p tcp --dport 443 -m state --state NEW -m nth --counter 0 --every 3 --packet 2 -j DNAT --to-destination 192.168.1.103:443

Prevent Dos Attack

iptables -A INPUT -p tcp --dport 80 -m limit --limit 25/minute --limit-burst 100 -j ACCEPT

1	iptables -A INPUT -p tcp --dport 80 -m limit --limit 25/minute --limit-burst 100 -j ACCEPT

Port Forwarding 422-> 22

iptables -t nat -A PREROUTING -p tcp -d 192.168.102.37 --dport 422 -j DNAT --to 192.168.102.37:22

1	iptables -t nat -A PREROUTING -p tcp -d 192.168.102.37 --dport 422 -j DNAT --to 192.168.102.37:22

어느용

참고자료

최신 글

보관함

tar 사용법

iptables 목록들

태그

링크

메타