admin – 第 6 页 – C/C++程序员之家

#转载# CC攻击和防御二：防御篇

By admin | 2018/02/25

上篇介绍了《CC攻击的测试和CC攻击的危害》，本篇介绍下CC攻击的防御方案 WAF即Web应用防护系统，也称“…

Read More Read More

#转载# CC攻击和防御一：测试篇

By admin | 2018/02/25

声明实验所提及的工具，均为自己编写。读者请不要索取任何源码，作者也从未参与任何压力测试。测试单站仅持续5分钟…

Read More Read More

#proxmox# proxmox的nat网络配置示例

By admin | 2018/02/23

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

iface eno1 inet manual

auto vmbr0
iface vmbr0 inet static
    address xxx.xxx.xxx.xxx
    netmask 255.255.255.0
    gateway xxx.xxx.xxx.1
    bridge_ports eno1
    bridge_stp off
    bridge_fd 0

# The RPN network
allow-hotplug eno2
iface eno2 inet dhcp

auto vmbr1
iface vmbr1 inet static
    address 10.10.10.1
    netmask 255.255.255.0
    bridge_ports none
    bridge_stp off
    bridge_fd 0
    post-up echo 1 &gt; /proc/sys/net/ipv4/ip_forward
    post-up iptables -t nat -A POSTROUTING -s '10.10.10.0/24' -o vmbr0 -j MASQUERADE
    post-down iptables -t nat -D POSTROUTING -s '10.10.10.0/24' -o vmbr0 -j MASQUERADE
    # linux
    post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 1022 -j DNAT --to 10.10.10.10:22
    post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 1022 -j DNAT --to 10.10.10.10:22
    post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 1122 -j DNAT --to 10.10.10.11:22
    post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 1122 -j DNAT --to 10.10.10.11:22
    post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 1222 -j DNAT --to 10.10.10.12:22
    post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 1222 -j DNAT --to 10.10.10.12:22
    post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 1322 -j DNAT --to 10.10.10.13:22
    post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 1322 -j DNAT --to 10.10.10.13:22
    post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 1422 -j DNAT --to 10.10.10.14:22
    post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 1422 -j DNAT --to 10.10.10.14:22
    # windows
    post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 13389 -j DNAT --to 10.10.10.101:3389
    post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 13389 -j DNAT --to 10.10.10.101:3389
    post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 23389 -j DNAT --to 10.10.10.102:3389
    post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 23389 -j DNAT --to 10.10.10.102:3389
    post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 33389 -j DNAT --to 10.10.10.103:3389
    post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 33389 -j DNAT --to 10.10.10.103:3389
    post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 43389 -j DNAT --to 10.10.10.104:3389
    post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 43389 -j DNAT --to 10.10.10.104:3389
    post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 53389 -j DNAT --to 10.10.10.105:3389
    post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 53389 -j DNAT --to 10.10.10.105:3389

# This file describes the network interfaces available on your system

# and how to activate them. For more information, see interfaces(5).

# The loopback network interface

auto lo

iface lo inet loopback

iface eno1 inet manual

auto vmbr0

iface vmbr0 inet static

address xxx.xxx.xxx.xxx

netmask 255.255.255.0

gateway xxx.xxx.xxx.1

bridge_ports eno1

bridge_stp off

bridge_fd 0

# The RPN network

allow-hotplug eno2

iface eno2 inet dhcp

auto vmbr1

iface vmbr1 inet static

address 10.10.10.1

netmask 255.255.255.0

bridge_ports none

bridge_stp off

bridge_fd 0

post-up echo 1 > /proc/sys/net/ipv4/ip_forward

post-up iptables -t nat -A POSTROUTING -s '10.10.10.0/24' -o vmbr0 -j MASQUERADE

post-down iptables -t nat -D POSTROUTING -s '10.10.10.0/24' -o vmbr0 -j MASQUERADE

# linux

post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 1022 -j DNAT --to 10.10.10.10:22

post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 1022 -j DNAT --to 10.10.10.10:22

post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 1122 -j DNAT --to 10.10.10.11:22

post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 1122 -j DNAT --to 10.10.10.11:22

post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 1222 -j DNAT --to 10.10.10.12:22

post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 1222 -j DNAT --to 10.10.10.12:22

post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 1322 -j DNAT --to 10.10.10.13:22

post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 1322 -j DNAT --to 10.10.10.13:22

post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 1422 -j DNAT --to 10.10.10.14:22

post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 1422 -j DNAT --to 10.10.10.14:22

# windows

post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 13389 -j DNAT --to 10.10.10.101:3389

post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 13389 -j DNAT --to 10.10.10.101:3389

post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 23389 -j DNAT --to 10.10.10.102:3389

post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 23389 -j DNAT --to 10.10.10.102:3389

post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 33389 -j DNAT --to 10.10.10.103:3389

post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 33389 -j DNAT --to 10.10.10.103:3389

post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 43389 -j DNAT --to 10.10.10.104:3389

post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 43389 -j DNAT --to 10.10.10.104:3389

post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 53389 -j DNAT --to 10.10.10.105:3389

post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 53389 -j DNAT --to 10.10.10.105:3389

#异常# python把str形态的unicode转中文

By admin | 2018/01/29

python3 把unicode转中文，把str形态的unicode转中文今天用py3.5爬东西的时候，爬到…

Read More Read More

Docker教程总结八：(容器的时区配置)

By admin | 2018/01/11

命令行方式

# “ro”的意思是只读(read-only)模式，可以保证其挂载卷不被 Docker 容器内部文件系统配置所覆盖。
docker run -v /etc/localtime:/etc/localtime:ro -v /etc/timezone:/etc/timezone:ro ...

1 2	# “ro”的意思是只读(read-only)模式，可以保证其挂载卷不被 Docker 容器内部文件系统配置所覆盖。 docker run -v /etc/localtime:/etc/localtime:ro -v /etc/timezone:/etc/timezone:ro ...