{"id":145,"date":"2014-12-02T15:51:22","date_gmt":"2014-12-02T07:51:22","guid":{"rendered":"http:\/\/blog.haostudio.net\/hwp\/?p=145"},"modified":"2017-07-25T00:15:09","modified_gmt":"2017-07-24T16:15:09","slug":"%e7%94%a8debian%e6%89%93%e9%80%a0%e7%b0%a1%e6%98%93%e9%98%b2%e7%81%ab%e7%89%86","status":"publish","type":"post","link":"https:\/\/blog.haostudio.net\/hwp\/%e7%94%a8debian%e6%89%93%e9%80%a0%e7%b0%a1%e6%98%93%e9%98%b2%e7%81%ab%e7%89%86\/","title":{"rendered":"\u7528Debian\u6253\u9020\u7c21\u6613\u9632\u706b\u7246"},"content":{"rendered":"<!--more-->\n<h1>\u7528Debian\u6253\u9020\u7c21\u6613\u9632\u706b\u7246<\/h1>\n<p>\u5bb6\u88e1\u662f\u4f7f\u7528\u4e00\u53f0linux PC, \u5beb\u4e86\u4e00\u4e9bshell script \u53caiptables \u4f86\u7576\u4f5c\u9632\u706b\u7246\u53carouter\u4f7f\u7528, \u6700\u8fd1\u5c07\u5b83\u7a0d\u5fae\u6574\u7406\u4e86\u4e00\u4e0b, \u4e26\u653e\u5728<a href=\"https:\/\/github.com\/haotseng\/Defender\">GitHub<\/a> \u4f9b\u6709\u8208\u8da3\u7684\u4eba\u53ef\u4ee5\u62ff\u53bb\u4fee\u6539\u4f7f\u7528.<\/p>\n<p>\u9019\u500b\u7a0b\u5f0f\u540d\u7a31\u53d6\u540d\u53eb\u505adefender.\u5b89\u88dd\u65b9\u5f0f\u5982\u4e0b. \u5f9eGitHub \u5c07\u7a0b\u5f0fclone \u4e00\u4efd\u5230local disk.<\/p>\n<pre><code># cd \/root\n1. git clone https:\/\/github.com\/haotseng\/Defender.git\n<\/code><\/pre>\n<p>\u62f7\u8c9d\u88e1\u9762\u7684defender \u76ee\u9304\u5230\/root\u4e2d<\/p>\n<pre><code># cd Defender\n1. cp -a defender \/root\n1. cd \/root\/defender\n<\/code><\/pre>\n<p>\u5efa\u7acb\u4e26\u4fee\u6539\u8a2d\u5b9a\u6a94\u4ee5\u7b26\u5408\u4f60\u81ea\u5df1\u7684\u74b0\u5883.<\/p>\n<pre><code># cp defender.conf.sample defender.conf\n1. vi defender.conf\n<\/code><\/pre>\n<p>\u62f7\u8c9dfirewall.modules \u88e1\u9762\u7684\u81ea\u5df1\u60f3\u8981\u7684iptables \u8a2d\u5b9a\u6a94\u653e\u5230firewall.d \u76ee\u9304\u4e2d. \u4e26\u4e14\u4fee\u5167\u5bb9\u4ee5\u7b26\u5408\u81ea\u5df1\u7684\u9700\u6c42.<\/p>\n<h1>cp .\/firewall.modules\/*.sh .\/firewall.d<\/h1>\n<p>\u4f7f\u7528\u4ee5\u4e0b\u6307\u4ee4\u4f86\u555f\u52d5\u7a0b\u5f0f<\/p>\n<h1>.\/defender start<\/h1>\n<p>\u4e5f\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u6307\u4ee4\u4f86reset \u6240\u6709\u7684\u8a2d\u5b9a.<\/p>\n<h1>.\/defender stop<\/h1>\n<p>\u88e1\u9762\u4e5f\u9644\u4e86\u4e00\u500b\u9069\u7528\u65bcdebian \u7684init script, \u53ef\u4ee5\u7528\u65bc\u958b\u6a5f\u6642\u81ea\u52d5\u555f\u52d5. \u7576\u4f60\u7684\u9632\u706b\u7246\u90fd\u5df2\u7d93\u8a2d\u5b9a\u597d\u4e86\u7684\u6642\u5019, \u53ef\u4ee5\u4f7f\u7528\u4e0b\u5217\u65b9\u5f0f\u5b89\u88dd, \u4f7f\u5176\u80fd\u5920\u958b\u6a5f\u6642\u81ea\u52d5\u555f\u52d5.<\/p>\n<pre><code># cd \/Defender\n1. cp .\/init_script\/defender \/etc\/init.d\n1. update-rc.d defender defaults\n<\/code><\/pre>\n<p>\u5982\u6b64, \u958b\u6a5f\u6642, \u5c31\u80fd\u5920\u81ea\u5df1\u555f\u52d5\u4e86.<\/p>\n<p>\u6709\u8208\u7814\u7a76\u9019\u500bshell script \u7684\u4eba\u53ef\u4ee5\u767c\u73fe, \u5b83\u53ef\u4ee5\u81ea\u52d5\u5075\u6e2c\u6a5f\u5668\u5c0d\u5916\u7684IP, \u4e26\u4e14\u81ea\u52d5\u4fee\u6539iptables\u7684\u8a2d\u5b9a.\n\u5c0d\u65bc\u5bb6\u4e2d\u975e\u56fa\u5b9aIP\u7684\u4eba, \u9084\u883b\u9069\u7528\u7684.<\/p>\n<p>\u9019\u500b\u7a0b\u5f0f\u5c1a\u672a\u5b8c\u5099, \u9084\u5728\u601d\u8003Qos\u53caRouter\u7684\u61c9\u7528.<\/p>","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,58,12],"tags":[47,60,59,61],"class_list":["post-145","post","type-post","status-publish","format-standard","hentry","category-linux","category-security","category-12","tag-iptables","tag-qos","tag-router","tag-shell-script"],"_links":{"self":[{"href":"https:\/\/blog.haostudio.net\/hwp\/wp-json\/wp\/v2\/posts\/145","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.haostudio.net\/hwp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.haostudio.net\/hwp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.haostudio.net\/hwp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.haostudio.net\/hwp\/wp-json\/wp\/v2\/comments?post=145"}],"version-history":[{"count":5,"href":"https:\/\/blog.haostudio.net\/hwp\/wp-json\/wp\/v2\/posts\/145\/revisions"}],"predecessor-version":[{"id":399,"href":"https:\/\/blog.haostudio.net\/hwp\/wp-json\/wp\/v2\/posts\/145\/revisions\/399"}],"wp:attachment":[{"href":"https:\/\/blog.haostudio.net\/hwp\/wp-json\/wp\/v2\/media?parent=145"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.haostudio.net\/hwp\/wp-json\/wp\/v2\/categories?post=145"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.haostudio.net\/hwp\/wp-json\/wp\/v2\/tags?post=145"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}