我已经阅读了与 Log4j 相关的安全漏洞。
如何检查我的服务器上是否安装了 Log4j?我的特定服务器使用Ubuntu 18.04.6 LTS
.
我已经安装了许多第三方软件包,其中一些可能包含它。
是否有命令在我的服务器上运行以检查是否安装了 Log4j?
我正在使用 Ubuntu 18.04.1 LTS 配置新服务器(droplet)。我安装了 apache 并配置了虚拟主机。服务器名称是www.speedysoftware.com,这是 的值/etc/hostname
。问题是,我试图将http://www.speedysoftware.com/重定向到特定的虚拟主机,但它被重定向到默认的虚拟主机。另一方面,http ://www.speedysoft.com/和http://www.speedy-software.com/被重定向到正确的虚拟主机,应该与http://www.speedysoftware 相同。 com/
文件/etc/apache2/sites-available/000-default.conf
:
<VirtualHost *:80>
# The ServerName directive sets the request scheme, hostname and port that
# the server uses to identify itself. This is used when creating
# redirection URLs. In the context of virtual hosts, the ServerName
# specifies what hostname must appear in the request's Host: header to
# match this virtual host. For the default virtual host (this file) this
# value is not decisive as it is used as a last resort host regardless.
# However, you must set it for any further virtual host explicitly.
ServerAdmin [email protected]
DocumentRoot /var/www/general
<Directory /var/www/general>
Options +FollowSymLinks
Options -Indexes
AllowOverride All
Require all granted
</Directory>
# Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
# error, crit, alert, emerg.
# It is also possible to configure the loglevel for particular
# modules, e.g.
#LogLevel info ssl:warn
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
# For most configuration files from conf-available/, which are
# enabled or disabled at a global level, it is possible to
# include a line for only one particular virtual host. For example the
# following line enables the CGI configuration for this host only
# after it has been globally disabled with "a2disconf".
#Include conf-available/serve-cgi-bin.conf
</VirtualHost>
# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
文件/etc/apache2/sites-available/speedysoftware.conf
:
<VirtualHost *:80>
# The ServerName directive sets the request scheme, hostname and port that
# the server uses to identify itself. This is used when creating
# redirection URLs. In the context of virtual hosts, the ServerName
# specifies what hostname must appear in the request's Host: header to
# match this virtual host. For the default virtual host (this file) this
# value is not decisive as it is used as a last resort host regardless.
# However, you must set it for any further virtual host explicitly.
ServerName www.speedysoftware.com
ServerAlias speedysoftware.com *.speedysoftware.com
ServerAlias speedy-software.com *.speedy-software.com
ServerAlias speedysoft.com *.speedysoft.com
# ... (more ServerAliases)
ServerAdmin [email protected]
DocumentRoot /var/www/speedysoftware
<Directory /var/www/speedysoftware>
Options +FollowSymLinks
Options -Indexes
AllowOverride All
Require all granted
</Directory>
# Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
# error, crit, alert, emerg.
# It is also possible to configure the loglevel for particular
# modules, e.g.
#LogLevel info ssl:warn
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
# For most configuration files from conf-available/, which are
# enabled or disabled at a global level, it is possible to
# include a line for only one particular virtual host. For example the
# following line enables the CGI configuration for this host only
# after it has been globally disabled with "a2disconf".
#Include conf-available/serve-cgi-bin.conf
</VirtualHost>
# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
可以看到http://www.speedy-soft.com/被重定向到默认的虚拟主机,这是正确的。配置有什么问题?
进行更改后,我重新加载了设置sudo systemctl restart apache2
。
关于重定向,在这种情况下我不想重定向。我希望它们被视为独立的网站,尽管它们指向同一个虚拟主机。在其他情况下,我会重定向,例如我将http://www.speedypedia.org/重定向到http://www.speedypedia.info/,然后重定向http://ww.speedysoftware.com/(或任何其他子域,包括http://speedysoftware.com/)到http://www.speedysoftware.com/。
更新- 我检查了http://ww.speedysoftware.com/、http://www.speedysoftware.com/和http://speedysoftware.com/都指向正确的虚拟主机。只有http://www.speedysoftware.com/不会导致正确的虚拟主机。
我正在尝试设置一个 Ookla 服务器进行速度测试。我的操作系统是 Ubuntu(20.04 LTS),我安装了脚本,也将其设置为在重新启动后启动,但我不知道如何设置它以使用 HTTPS。测试页面说我的服务器通过了,netgauge
但是失败了。我还想知道在将服务器上传到 Ookla 之前如何使用服务器进行速度测试?我想知道速度是多少以及它的性能如何。我在 Ookla 的网站上没有找到太多文档,例如我没有找到如何设置 HTTPS。如果我从 Let's encrypt 获得证书,如何安装和使用我的证书?websocket
crossdomain
https
为了安装服务器,我点击了https://www.speedtest.net/speedtest-servers上的链接。