This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/bash | |
#允许 DNS, FTP, NTP, SSH, SMTP, HTTP/HTTPS, whois | |
#提供 NAT | |
#允许内部网络用户 SSH, 不允许用户从其他任何地方访问,除非运行一个用于验证的fwknop | |
#接受来自内部网络和外部网络的 ICMP 回显请求,非回显请求 ICMP 会被丢弃 | |
#有默认日志记录和丢弃规则 | |
IPTABLES=/sbin/iptables | |
MODPROBE=/sbin/modprobe | |
INT_NET=192.168.10.0/24 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/sh | |
# | |
# nginx - this script starts and stops the nginx daemon | |
# | |
# chkconfig: - 85 15 | |
# description: Nginx is an HTTP(S) server, HTTP(S) reverse \ | |
# proxy and IMAP/POP3 proxy server | |
# processname: nginx | |
# config: /usr/local/nginx/conf/nginx.conf | |
# pidfile: /usr/local/nginx/logs/nginx.pid |