主页 / user-172876

abkrim's questions

Martin Hope
abkrim
Asked: 2019-06-04 06:22:31 +0800 CST
  • 1

我有一个带有 Exim 和 ASSP 的服务器 centos 7 有时，我需要使用另一台服务器如何智能中继发送邮件。

如果智能服务器（运行 postfix）出现错误（退回，从一封电子邮件的远程服务器目的地返回一封禁止邮件，...）智能服务器可以与我的服务器 Centos 通信。

host domain_of_my_centos_host [176.XX.XX.205] refused to talk to me: 451 4.7.1 Please try again later

我试图找到 eviatr this 的方法，或者知道它是否是我的配置错误。

exim
Martin Hope
abkrim
Asked: 2016-08-22 00:12:00 +0800 CST
  • 0

我正在尝试在 Mod Security 的白名单中添加 Google IP 范围

我使用 Cpanel+Apache 2.4+ModSecurity 2.9.0+OWASP 规则

在几个帖子中，我看到了这个 conf

SecRule REMOTE_ADDR "@ipMatch XX.XX.XX.XX,66.249.64.0/19" "phase:1,nolog,allow,ctl:ruleEngine=Off"

但是只有在添加 id:rule 时才会失败

SecRule REMOTE_ADDR "@ipMatch XX.XX.XX.XX,66.249.64.0/19" "phase:1,id:'981033',t:none,nolog,pass,ctl:ruleEngine=Off"
apache-2.4 mod-security cpanel
Martin Hope
abkrim
Asked: 2016-08-06 00:19:49 +0800 CST
  • 0

禁用完整的 Selinux

首先编辑/etc/selinux/config

SELINUX=disabled

也尝试添加到grub.conf selinux=0

kernel /vmlinuz-2.6.32-642.3.1.el6.x86_64 ro root=/dev/mapper/vg-lv_root rd_NO_LUKS  KEYBOARDTYPE=pc KEYTABLE=es rd_NO_MD SYSFONT=latarcyrheb-sun16 crashkernel=auto LANG=es_ES.UTF-8 rd_LVM_LV=vg/lv_swap rd_NO_DM rd_LVM_LV=vg/lv_root selinux=0 rhgb quiet
    initrd /initramfs-2.6.32-642.3.1.el6.x86_64.img

重启机器并验证

root@srv107 [~]# sestatus
SELinux status:                 disabled

哎呀

问题依然存在。尝试从其他主机访问时使用端口 24、10050、10051 的多个服务出现错误：

#telnet srv107.XXXXXXX.net 10051
Trying 5.XXX.XX.101...
telnet: connect to address 5.XXX.XX.101: No route to host

在主机上查看 selinux 登录操作

type=USER_START msg=audit(1470384283.115:17): user pid=2348 uid=0 auid=0 ses=1 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=213.XXX.XX.35 addr=213.XXX.XX.35 terminal=/dev/pts/0 res=success'
type=CRYPTO_KEY_USER msg=audit(1470384283.116:18): user pid=2348 uid=0 auid=0 ses=1 msg='op=destroy kind=server fp=59:ff:74:ff:7f:4b:a8:5b:60:20:60:c7:a5:4b:c8:ae direction=? spid=2348 suid=0  exe="/usr/sbin/sshd" hostname=? addr=213.XXX.XX.35 terminal=pts/0 res=success'
type=CRYPTO_KEY_USER msg=audit(1470384283.116:19): user pid=2348 uid=0 auid=0 ses=1 msg='op=destroy kind=server fp=7b:0d:45:79:16:08:c4:3f:30:0f:3d:76:86:07:48:c5 direction=? spid=2348 suid=0  exe="/usr/sbin/sshd" hostname=? addr=213.XXX.XX.35 terminal=pts/0 res=success'
type=CRED_REFR msg=audit(1470384283.116:20): user pid=2348 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=213.XXX.XX.35 addr=213.XXX.XX.35 terminal=ssh res=success'
type=USER_ACCT msg=audit(1470384301.929:21): user pid=2413 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1470384301.929:22): user pid=2413 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1470384301.929:23): pid=2413 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
type=USER_START msg=audit(1470384301.935:24): user pid=2413 uid=0 auid=0 ses=2 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1470384305.615:25): user pid=2413 uid=0 auid=0 ses=2 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1470384305.615:26): user pid=2413 uid=0 auid=0 ses=2 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
centos selinux centos6
Martin Hope
abkrim
Asked: 2015-05-04 23:45:15 +0800 CST
  • 2

我在我所有的服务器端口 24 上使用 SSH。更改端口后出现错误，因为 Selinux 阻止服务器 SSHD 重启

4 08:08:02 kvm452 sshd[18297]: error: Bind to port 24 on 0.0.0.0 failed: Permission denied.
May  4 08:08:02 kvm452 sshd[18297]: error: Bind to port 24 on :: failed: Permission denied.
May  4 08:08:02 kvm452 sshd[18297]: fatal: Cannot bind any address.

但是如果 Selinux 它是活动的（Centos 6.X）端口 24 它被分配给 Cyrus

lmtp_port_t                    tcp      24
lmtp_port_t                    udp      24

好吧，我喜欢更改端口以将端口 24 与 SSHD 一起使用

semanage port -a -t ssh_port_t -p tcp 24
    /usr/sbin/semanage: Port tcp/24 already defined

试试delete chain semanage port -d -p tcp 24 /usr/sbin/semanage：port tcp/24 is defined in policy,不能删除

尝试几个选项，但我没有看到解决方案。在手册页上只说：

 -d, --delete
      Delete a OBJECT record NAME
ssh
Martin Hope
abkrim
Asked: 2012-06-26 20:03:19 +0800 CST
  • 2

我得到一台带有 LSI MEgarad 卡的机器。我知道 Virtual Diska 有什么：

Adapter: 0
Product Name: LSI MegaRAID SAS 9260-4i
Memory: 512MB
BBU: Absent
Serial No: SV11807006
==============================================================================
Number of DISK GROUPS: 3

但我不知道每个虚拟磁盘 (0,1,2) 上有什么磁盘，什么磁盘是 HotSpare ...

 MegaCli -LDInfo -Lall -aAll


 Adapter 0 -- Virtual Drive Information:
 Virtual Disk: 0 (Target Id: 0)
 Name:
 RAID Level: Primary-5, Secondary-0, RAID Level Qualifier-3
 Size:16.371 TB
 State: Optimal
 Stripe Size: 64 KB
 Number Of Drives per span:3
 Span Depth:3
 ....
 Check Consistency        : Completed 46%, Taken 254 min.

 Virtual Disk: 1 (Target Id: 1)
 Name:
 RAID Level: Primary-0, Secondary-0, RAID Level Qualifier-0
 Size:2.728 TB
 State: Optimal
 Stripe Size: 64 KB
 Number Of Drives:1
 Span Depth:1

 Virtual Disk: 2 (Target Id: 2)
 Name:
 RAID Level: Primary-0, Secondary-0, RAID Level Qualifier-0
 Size:2.728 TB
 Stripe Size: 64 KB
 Number Of Drives:1
 Span Depth:1

我正在寻找 MegaCli 命令以了解每个虚拟磁盘的磁盘映射

谢谢

raid shell megacli