码迷,mamicode.com
首页 > 系统相关 > 详细

Linux课程第二十二天学习笔记

时间:2016-12-09 01:11:28      阅读:258      评论:0      收藏:0      [点我收藏+]

标签:linux学习   linux笔记   linux课程   

####################空壳邮件####################
[root@maillinux ~]# vim /etc/named.rfc1912.zones
-----------------------------------------------
 37 zone "westos.org" IN {
 38         type master;
 39         file "westos.org.zone";
 40         allow-update { none; };
 41 };
 42
:wq
-----------------------------------------------
[root@maillinux ~]# cd /var/named
[root@maillinux named]# cp -p westos.com.zone westos.org.zone
##一定要加"-p"参数
[root@maillinux named]# vim westos.org.zone
-----------------------------------------------
  1 $TTL 1D
  2 @       IN SOA  dns.westos.org. root.westos.org. (
  3                                         0       ; serial
  4                                         1D      ; refresh
  5                                         1H      ; retry
  6                                         1W      ; expire
  7                                         3H )    ; minimum
  8                 NS      dns.westos.org.
  9 dns             A       172.25.50.100
 10 westos.org.     MX 1    172.25.50.100.
:wq
-----------------------------------------------
[root@maillinux named]# dig -t mx westos.org |grep MX
;westos.org.            IN    MX
westos.org.        86400    IN    MX    1 172.25.50.100.
[root@maillinux named]# rm -fr /etc/postfix/main.cf
[root@maillinux named]# yum reinstall postfix -y
......
[root@maillinux named]# systemctl restart postfix.service
[root@maillinux named]# vim /etc/postfix/main.cf
-----------------------------------------------
 75 myhostname = maillinux.linux.com

 83 mydomain = linux.com

 98 myorigin = westos.org

113 inet_interfaces = all

116 #inet_interfaces = localhost

140 local_transport = error:local delivery disabled    ##不允许本地投递

164 mydestination =                    ##不接收任何邮件

313 relayhost = 172.25.50.200                ##指定真实的邮件服务器IP地址
:wq
-----------------------------------------------
[root@maillinux named]# systemctl restart postfix.service

[root@mailwestos ~]# vim /etc/postfix/main.cf
-----------------------------------------------
264 mynetworks = 172.25.50.0/24
:wq
-----------------------------------------------
[root@mailwestos ~]# systemctl restart postfix.service
[root@mailwestos ~]# cd /home/vmail/
[root@mailwestos vmail]# ls
mail  westos.org
[root@mailwestos vmail]# rm -fr *
[root@mailwestos vmail]# ls

[root@maillinux named]# mail admin@westos.org
Subject: test
test
test
.
EOT
[root@maillinux named]# mailq
Mail queue is empty

[root@mailwestos vmail]# ls
westos.org
[root@mailwestos vmail]# cd westos.org/
[root@mailwestos westos.org]# ls
admin
[root@mailwestos westos.org]# cd admin/
[root@mailwestos admin]# ls
cur  new  tmp


#####################
#####  Apache    #####
#####################
Apche提供httpd协议

--网站主流架构--
lamp=linux apache mysql php
lnmp=linux nginx mysql php
以上都是开源软件,所以成为主流

--网站开发语言--
静态:html
动态:php cgi jsp asp

--中间件(翻译语言)--
tomcat jboss 等等

squid代理软件
反向代理,也就是通常所说的Web服务器加速
通过在Internet上增加一个高速的Web缓冲服务器(即:Web反向代理服务器),来降低实际的Web服务器的负载。

go语言

nmap著名的黑客软件

index.html里写的是html语句


[root@localhost ~]# hostnamectl set-hostname web1.westos.com
[root@localhost ~]# reboot
等待重启
[root@web1 ~]# yum install httpd -y
......
[root@web1 ~]# cd /var/www/html/
[root@web1 html]# ls
[root@web1 html]# vim index.html
测试http://172.25.254.115
[root@web1 html]# echo hello world >file
测试http://172.25.254.115/file

[root@web1 html]# netstat -antlpe |grep httpd
tcp6       0      0 :::80                   :::*                    LISTEN      0          78225      4642/httpd         
[root@web1 html]# rpm -qc httpd
/etc/httpd/conf.d/autoindex.conf
/etc/httpd/conf.d/userdir.conf
/etc/httpd/conf.d/welcome.conf
/etc/httpd/conf.modules.d/00-base.conf
/etc/httpd/conf.modules.d/00-dav.conf
/etc/httpd/conf.modules.d/00-lua.conf
/etc/httpd/conf.modules.d/00-mpm.conf
/etc/httpd/conf.modules.d/00-proxy.conf
/etc/httpd/conf.modules.d/00-systemd.conf
/etc/httpd/conf.modules.d/01-cgi.conf
/etc/httpd/conf/httpd.conf
/etc/httpd/conf/magic
/etc/logrotate.d/httpd
/etc/sysconfig/htcacheclean
/etc/sysconfig/httpd

==index优先级==
[root@web1 html]# vim /etc/httpd/conf/httpd.conf
164     DirectoryIndex file index.html
[root@web1 html]# systemctl reload httpd
测试http://172.25.254.115
hello world
[root@web1 html]# rm -fr file
测试http://172.25.254.115
web1.westos.com 123
[root@web1 html]# rm -fr index.html
测试http://172.25.254.115
apache测试页
##有问题,发现还是web1.westos.com 123,不知怎么又好了,可能是缓存

==http手册==
[root@web1 html]# yum install httpd-manual -y
......
[root@web1 html]# systemctl restart httpd
测试http://172.25.254.115/manual

==更改访问目录==
[root@web1 html]# getenforce
Enforcing
[root@web1 html]# ls -Zd
drwxr-xr-x. root root system_u:object_r:httpd_sys_content_t:s0 .
[root@web1 html]# mkdir -p /www/westos
[root@web1 html]# semanage fcontext -a -t httpd_sys_content_t ‘/www/westos(/.*)?‘
[root@web1 html]# restorecon -RvvF /www/
restorecon reset /www context unconfined_u:object_r:default_t:s0->system_u:object_r:default_t:s0
restorecon reset /www/westos context unconfined_u:object_r:default_t:s0->system_u:object_r:httpd_sys_content_t:s0

[root@web1 html]# cd /www/westos/
[root@web1 westos]# ls
[root@web1 westos]# vim index.html
  1 /www/westos’s page
[root@web1 westos]# vim /etc/httpd/conf/httpd.conf
120 DocumentRoot "/www/westos"
121 <Directory "/www/westos">
122     Require all granted
123 </Directory>
[root@web1 westos]# systemctl reload httpd
[root@web1 westos]# vim index.html
/www/westos’s page
测试http://172.25.254.115

==更改端口号==
[root@web1 westos]# vim /etc/httpd/conf/httpd.conf
 42 Listen 8080
[root@web1 westos]# systemctl reload httpd
测试http://172.25.254.115:8080            ##8080默认是tomcat的端口
[root@web1 westos]# vim /etc/httpd/conf/httpd.conf
 42 Listen 80
[root@web1 westos]# systemctl reload httpd    ##重新加载速度更快
测试http://172.25.254.115

==访问ip限制==
[root@web1 westos]# vim /etc/httpd/conf/httpd.conf
121 <Directory "/www/westos">
122     Require all granted
123     Order Allow,Deny
124     Allow from all
125     Deny from 172.25.254.115
126 </Directory>
[root@web1 westos]# systemctl reload httpd
测试:
115:http://172.25.254.115不能访问
15:http://172.25.254.115可以访问

[root@web1 westos]# vim /etc/httpd/conf/httpd.conf
121 <Directory "/www/westos">
122     Require all granted
123     Order Deny,Allow
124     Allow from 172.25.254.115
125     Deny from all
126 </Directory>
[root@web1 westos]# systemctl reload httpd
测试:
115:http://172.25.254.115可以访问
15:http://172.25.254.115不能访问

[root@web1 westos]# vim /etc/httpd/conf/httpd.conf
120 DocumentRoot "/www/westos"
121 <Directory "/www/westos">
122     Require all granted
123     Order Deny,Allow
124     Allow from 172.25.254.0/24
125     Deny from all
126 </Directory>
[root@web1 westos]# systemctl reload httpd
测试:
只允许172.25.254.0/24这个网段访问

==用户名,密码访问==
[root@web1 westos]# cd /etc/httpd/
[root@web1 httpd]# ls
conf  conf.d  conf.modules.d  logs  modules  run
[root@web1 httpd]# htpasswd -cm htpasswdfile admin
New password:
Re-type new password:
Adding password for user admin
[root@web1 httpd]# cat htpasswdfile
admin:$apr1$WbKugIGj$2HGUWRwGSXS41wsCTbvod/
[root@web1 httpd]# htpasswd -m htpasswdfile westos
New password:
Re-type new password:
Adding password for user westos
[root@web1 httpd]# cat htpasswdfile
admin:$apr1$WbKugIGj$2HGUWRwGSXS41wsCTbvod/
westos:$apr1$cgzYLUVZ$zSkX6bfpFZkDQxrONSofc/

[root@web1 httpd]# vim /etc/httpd/conf/httpd.conf
121 <Directory "/www/westos">
122         #Require all granted
123         Authuserfile /etc/httpd/htpasswdfile
124         Authname "Please input username and password"
125         Authtype basic
126         Require user admin
127 </Directory>
[root@web1 httpd]# systemctl reload httpd
测试http://172.25.254.115
admin验证成功
westos验证不成功

ctrl+shift+delete点击清空缓存
[root@web1 httpd]# vim /etc/httpd/conf/httpd.conf
121 <Directory "/www/westos">
122         #Require all granted
123         Authuserfile /etc/httpd/htpasswdfile
124         Authname "Please input username and password"
125         Authtype basic
126         Require valid-user
127 </Directory>
[root@web1 httpd]# systemctl reload httpd
测试http://172.25.254.115
admin验证成功
westos验证成功

==music.westos.com; news.westos.com==
[root@web1 httpd]# vim /etc/httpd/conf/httpd.conf
119 DocumentRoot "/var/www/html"
120 #DocumentRoot "/www/westos"
[root@web1 httpd]# systemctl reload httpd

[root@web1 httpd]# cd /var/www/html/
[root@web1 html]# ls
[root@web1 html]# vim index.html
  1 www.westos.com
测试http://172.25.254.115正常

[root@web1 html]# vim /etc/hosts
  6 172.25.254.115 www.westos.com westos.com music.westos.com news.westos.com

[root@web1 html]# mkdir /var/www/virtual/music.westos.com/html -p
[root@web1 html]# mkdir /var/www/virtual/news.westos.com/html -p
[root@web1 ~]# cd /var/www/virtual/music.westos.com/html
[root@web1 html]# vim index.html
  1 music.westos.com
[root@web1 html]# cd /var/www/virtual/news.westos.com/html
[root@web1 html]# vim index.html
  1 news.westos.com
[root@web1 html]# cd /etc/httpd/conf.d/
[root@web1 conf.d]# ls
autoindex.conf  manual.conf  README  userdir.conf  welcome.conf
[root@web1 conf.d]# vim default.conf
  1 <Virtualhost _default_:80>
  2         Documentroot /var/www/html
  3         Customlog "logs/default.log" combined    ##combined表示日志级别是全部
  4 </Virtualhost>
  5 <Directory "/var/www/html">
  6         Require all granted
  7 </Directory>
[root@web1 conf.d]# cp default.conf music.conf
[root@web1 conf.d]# vim music.conf
  1 <Virtualhost *:80>
  2         Servername music.westos.com
  3         Documentroot /var/www/virtual/music.westos.com/html
  4         Customlog "logs/music.log" combined
  5 </Virtualhost>
  6 <Directory "/var/www/virtual/music.westos.com/html">
  7         Require all granted
  8 </Directory>
[root@web1 conf.d]# cp music.conf news.conf
[root@web1 conf.d]# vim news.conf
  1 <Virtualhost *:80>
  2         Servername news.westos.com
  3         Documentroot /var/www/virtual/news.westos.com/html
  4         Customlog "logs/news.log" combined
  5 </Virtualhost>
  6 <Directory "/var/www/virtual/news.westos.com/html">
  7         Require all granted
  8 </Directory>
[root@web1 conf.d]# systemctl reload httpd
[root@web1 conf.d]# firefox &
测试:
www.westos.com
news.westos.com
music.westos.com
测试成功




客户端加密,服务端解密
客户拿到证书加密,服务器拿key解密

install上面装好就有证书,下面生成证书

[root@web1 conf.d]# yum install mod_ssl -y
......
[root@foundation15 conf.d]# yum install crypto-utils -y
......


  │ The key will be stored in                                              │
  │     /etc/pki/tls/private/www.westos.com.key                            │
  │ The certificate stored in                                              │
  │     /etc/pki/tls/certs/www.westos.com.crt    

[root@web1 conf.d]# genkey www.westos.com
/usr/bin/keyutil -c makecert -g 1024 -s "CN=www.westos.com, OU=linux, O=westos, L=xi‘an, ST=shannxi, C=CN" -v 1 -a -z /etc/pki/tls/.rand.8103 -o /etc/pki/tls/certs/www.westos.com.crt -k /etc/pki/tls/private/www.westos.com.key
cmdstr: makecert

cmd_CreateNewCert
command:  makecert
keysize = 1024 bits
subject = CN=www.westos.com, OU=linux, O=westos, L=xi‘an, ST=shannxi, C=CN
valid for 1 months
random seed from /etc/pki/tls/.rand.8103
output will be written to /etc/pki/tls/certs/www.westos.com.crt
output key written to /etc/pki/tls/private/www.westos.com.key


Generating key. This may take a few moments...

Made a key
Opened tmprequest for writing
/usr/bin/keyutil Copying the cert pointer
Created a certificate
Wrote 882 bytes of encoded data to /etc/pki/tls/private/www.westos.com.key
Wrote the key to:
/etc/pki/tls/private/www.westos.com.key
[root@web1 ~]# ls /etc/pki/tls/certs
ca-bundle.crt        localhost.crt    Makefile          www.westos.com.crt
ca-bundle.trust.crt  make-dummy-cert  renew-dummy-cert
[root@web1 conf.d]# vim ssl.conf
100 SSLCertificateFile /etc/pki/tls/certs/www.westos.com.crt
107 SSLCertificateKeyFile /etc/pki/tls/private/www.westos.com.key
测试:真机打开firefox,输入https://172.25.254.115/

本文出自 “施超Linux学习笔记” 博客,谢绝转载!

Linux课程第二十二天学习笔记

标签:linux学习   linux笔记   linux课程   

原文地址:http://shichao.blog.51cto.com/5804953/1880875

(0)
(0)
   
举报
评论 一句话评论(0
登录后才能评论!
© 2014 mamicode.com 版权所有  联系我们:gaon5@hotmail.com
迷上了代码!