关于本站转型的通知

由于博主自进入高中以来学习强度逐步加大,Lzy Tech Space网站(即本站)已逐渐长草,背离原先的初衷。
现决定:
Lzy Tech Space
(即本站) 更名为Lzy’s Study。
网站主要内容由英文文章改为与日常学习有关的文章(含原先在Lzy Technoloy博客发布的与考试有关的文章)。
主题改为Isola主题。
特此通知

Lzy Technology博客
Lzy Tech Space网站
2018年12月21日

Happy 16th Birthday

Today is my 16th birthday.In fact 10.10 are my birthday.But according to the local custom(celebrate lunar birthday).So today celebrate.

My has invited two friends to my home.A friend family name is Xin and another family name is Chen.Because some reason,family name is Chen friend didn’t come to my home.We have lunch/chat and eat cake.We have a good time.

Otherwise.because I last mouth no time,I didn’t write some article.I feel this blog theme design is too complexity. Whereupon my has changed a Chinese themes:Pure.I feel this theme is good now.

CSF Firewall installs course

CSF Firewall is foreign certain company development free software.It may install Linux OS.It may remit server pressure,possess automatically block brute forces cracking password IP, manage open ports, immune lightweight DDOS, and CC,and so on function.At the same time,install and manage are very easy.In we often practical cPanel and DirectAdmin have GUI.

Under introduce how to install it.

1.CSF supports under often practical linux OS

RedHat Enterprise v5 to v7
CentOS v5 to v7
CloudLinux v5 to v7
Fedora v20 to v22
openSUSE v10, v11, v12
Debian v3.1 – v9
Ubuntu v6 to v15
Slackware v12

CSF Web Site Index

2.In Linux SSH run under command:

apt-get install perl-libwww-perl perl iptables #Debian/Ubuntu
yum install perl-libwww-perl perl iptables #CentOS/RHEL/CloudLinux
rm -fv csf.tgz
wget https://download.configserver.com/csf.tgz
tar -xzf csf.tgz
cd csf
sh install.sh

Half minute after.installed.if before installed APF Firewall,please uninstall.

sh /etc/csf/remove_apf_bfd.sh

Test CSF Firewall whether install success.

perl /etc/csf/csftest.pl
If the above information is displayed, the installation is successful.

3.CSF Firewall configuration.

If you use the DirectAdmin panel, go directly to the administrator and select CSF Security & Firewall to enter the graphical interface Settings.

If you use the WHM/cPanel panel, log in to the WHM, plugin, CSF Security & Firewall configuration information.

Other users please look down.

CSF Config Path:/etc/csf/csf.conf
Allow Config Path:/etc/csf/csf.allow

Deny Config Path:/etc/csf/csf.deny

Download csf.conf from server ,open it filed.

Ⅰ.Port floods to attack protection

Edition files line 524,input rules:

PORTFLOOD = "22;tcp;5;300,80;tcp;20;5"

Description:

If there are five or more connections to TCP port 22 within 300 seconds, block the IP address from accessing port 22 at least 300 seconds after the last packet is found, i.e. there is a 300 second “quiet” period before the block is cancelled.

If there are more than 20 connections to TCP port 80 within 5 seconds, block the IP address from accessing port 80 at least 5 seconds after the last packet is found, that is, there is a 5 second “quiet” period before the block is canceled.

Ⅱ.Input open port

Edition files line 139,input rules:

#Input Port
TCP_IN = "Port1,Port2,Port3........"
#Export Port
TCP_IN = "Port1,Port2,Port3........"
#In cases where some programs require you to open a range of ports, such as the passive mode of FTP, you can open a range of 30000-35000 ports using a similar approach.

Ⅲ.Start CSF Firewall

Edition csf.conf,change TESTING = “1” to TESTING = “0”.in Linux SSH run under command:

/etc/init.d/csf -s
/etc/init.d/lfd start

Ⅳ.Unblock IP: modify /etc/csf/csf.deny to remove the IP that needs to be unblocked.

Lzy Tech Space is set

Today,my english blog,Lzy Tech Space is set.

This blog domain uses lzy20021010.top(My Chinese blog used domain).Hosting uses OVZLa frees US hosting.Blog System uses WordPress.

This blog main content :

1.Translation my Chinese blog(Lzy Technology) excellent article.Apply foreigner understand Chinese product and technology.

2.Release some inadequacy article of Chinese blog,for example web agent.

3.Put up advertisement,get a little revenue.

As for to update frequency.because of my still student,therefore update frequency probably only once or twice a month.

Besides reader can point my error,think you.