Skip to content

Instantly share code, notes, and snippets.

@streamj
streamj / nginx
Last active December 30, 2015 09:09 — forked from mustafaturan/nginx
#!/bin/sh
#
# nginx - this script starts and stops the nginx daemon
#
# chkconfig: - 85 15
# description: Nginx is an HTTP(S) server, HTTP(S) reverse \
# proxy and IMAP/POP3 proxy server
# processname: nginx
# config: /usr/local/nginx/conf/nginx.conf
# pidfile: /usr/local/nginx/logs/nginx.pid
#!/bin/bash
#允许 DNS, FTP, NTP, SSH, SMTP, HTTP/HTTPS, whois
#提供 NAT
#允许内部网络用户 SSH, 不允许用户从其他任何地方访问,除非运行一个用于验证的fwknop
#接受来自内部网络和外部网络的 ICMP 回显请求,非回显请求 ICMP 会被丢弃
#有默认日志记录和丢弃规则
IPTABLES=/sbin/iptables
MODPROBE=/sbin/modprobe
INT_NET=192.168.10.0/24