主页 / user-423912

Muhammad Dyas Yaskur's questions

Martin Hope
Muhammad Dyas Yaskur
Asked: 2020-12-11 19:43:24 +0800 CST
  • 0

为什么启用 ufw 后我无法 ping 任何域/主机名？

[root@ip-172-31-23-37 ec2-user]# ping google.com
ping: google.com: Name or service not known
[root@ip-172-31-23-37 ec2-user]# ufw disable
Firewall stopped and disabled on system startup
[root@ip-172-31-23-37 ec2-user]# ping google.com
PING google.com (74.125.24.100) 56(84) bytes of data.
64 bytes from 74.125.24.100 (74.125.24.100): icmp_seq=1 ttl=100 time=2.14 ms
64 bytes from 74.125.24.100 (74.125.24.100): icmp_seq=2 ttl=100 time=2.19 ms
^C
--- google.com ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 2.149/2.170/2.192/0.051 ms
[root@ip-172-31-23-37 ec2-user]# ufw enable
Command may disrupt existing ssh connections. Proceed with operation (y|n)? y
Firewall is active and enabled on system startup
[root@ip-172-31-23-37 ec2-user]# ping google.com
ping: google.com: Name or service not known

除了使用命令定义之外，我已禁用所有传出流量ufw default deny outgoing。ufw状态：

80                         ALLOW OUT   Anywhere
443                        ALLOW OUT   Anywhere
3306                       ALLOW OUT   Anywhere
2465                       ALLOW OUT   Anywhere
3306/tcp                   ALLOW OUT   Anywhere
3306/udp                   ALLOW OUT   Anywhere
127.0.0.1 3306             ALLOW OUT   Anywhere
80 (v6)                    ALLOW OUT   Anywhere (v6)
443 (v6)                   ALLOW OUT   Anywhere (v6)
3306 (v6)                  ALLOW OUT   Anywhere (v6)
2465 (v6)                  ALLOW OUT   Anywhere (v6)
3306/tcp (v6)              ALLOW OUT   Anywhere (v6)
3306/udp (v6)              ALLOW OUT   Anywhere (v6)

我已经设置接受 icmp 到/etc/ufw/before.rules文件

# allow outbound icmp
-A ufw-before-output -p icmp -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
-A ufw-before-output -p icmp -m state --state ESTABLISHED,RELATED -j ACCEPT
firewall domain-name-system ping hostname ufw
Martin Hope
Muhammad Dyas Yaskur
Asked: 2020-05-08 07:22:33 +0800 CST
  • 0

目前我已经使用如下通配符子域配置：

<VirtualHost *:80>
    ServerAlias *.domain
    ErrorLog /tmp/error.log
    CustomLog /tmp/access.log combined
    VirtualDocumentRoot /var/www/%1/public
<Directory "/var/www">
    DirectoryIndex index.php
    Options Indexes FollowSymLinks
    AllowOverride All
    Require all granted
</Directory>
</VirtualHost>

但如果我输入 sub.sub.domain 将返回默认虚拟主机。如何配置到主/根域的路径？我在conf下尝试过，但仍然没有奏效：

<VirtualHost *:80>
    ServerAlias *.*.domain
    ErrorLog /tmp/error.log
    CustomLog /tmp/access.log combined
    VirtualDocumentRoot /var/www/%2/public
<Directory "/var/www">
    DirectoryIndex index.php
    Options Indexes FollowSymLinks
    AllowOverride All
    Require all granted
</Directory>
</VirtualHost>

我将 %2 更改为 %1 仍然不起作用。

什么是正确的语法？

subdomain virtualhost domain apache-2.4
Martin Hope
Muhammad Dyas Yaskur
Asked: 2019-06-28 23:38:30 +0800 CST
  • 2

为什么我访问 http 或 https 时，我的 ec2 实例总是在大约 60 秒后超时？大约 60 秒后总是返回：

网络错误 (tcp_error)

发生通信错误：“操作超时” Web 服务器可能已关闭、太忙或遇到其他问题，使其无法响应请求。您可能希望稍后再试一次。

如需帮助，请联系您的网络支持团队。

有时会返回：

网关超时

网关没有收到来自更新服务器或应用程序的及时响应。

我使用最大超时的 apache web 服务器和 PHP。我没有在我的 EC2 中使用 ELB/负载均衡器，也从未创建任何 ELB。我试图在互联网上找到解决方案，但总是找到 ELB 设置。

linux