Navigation

serversman VPS ホームページセットで初期化してみた
iptables の設定を 行った
スクリプトにして実行した

iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT ACCEPT
iptables -F
iptables -A INPUT -p icmp -j ACCEPT
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -p tcp --dport 25 -j ACCEPT
iptables -A INPUT -p tcp --dport 587 -j ACCEPT
iptables -A INPUT -p tcp --dport 110 -j ACCEPT
iptables -A INPUT -p tcp --dport 443 -j ACCEPT
iptables -A INPUT -p tcp --dport 3843 -j ACCEPT
iptables -A INPUT -p tcp --dport 9510 -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

パッケージのアップデートを行った
# yum check-update
# yum update
Updated:
SysVinit.i386 0:2.86-17.el5
apr.i386 0:1.2.7-11.el5_6.5
apr-util.i386 0:1.2.7-11.el5_5.2
audit-libs.i386 0:1.7.18-2.el5
audit-libs-python.i386 0:1.7.18-2.el5
authconfig.i386 0:5.3.21-7.el5
bash.i386 0:3.2-32.el5
binutils.i386 0:2.17.50.0.6-14.el5
bzip2.i386 0:1.0.3-6.el5_5
bzip2-libs.i386 0:1.0.3-6.el5_5
centos-release.i386 10:5-7.el5.centos
centos-release-notes.i386 0:5.7-0
chkconfig.i386 0:1.3.30.2-2.el5
coreutils.i386 0:5.97-34.el5
cups-libs.i386 1:1.3.7-26.el5_6.1
curl.i386 0:7.15.5-9.el5_7.4
db4.i386 0:4.3.29-10.el5_5.2
dbus.i386 0:1.1.2-16.el5_7
dbus-libs.i386 0:1.1.2-16.el5_7
device-mapper.i386 0:1.02.63-4.el5
device-mapper-event.i386 0:1.02.63-4.el5
device-mapper-multipath.i386 0:0.4.7-46.el5_7.2
dhclient.i386 12:3.0.5-29.el5_7.1
dmidecode.i386 1:2.11-1.el5
dmraid.i386 0:1.0.0.rc13-65.el5
dmraid-events.i386 0:1.0.0.rc13-65.el5
e2fsprogs.i386 0:1.39-33.el5
e2fsprogs-libs.i386 0:1.39-33.el5
ethtool.i386 0:6-4.el5
expat.i386 0:1.95.8-8.3.el5_5.3
filesystem.i386 0:2.4.0-3.el5.centos
finger.i386 0:0.17-33
finger-server.i386 0:0.17-33
gdbm.i386 0:1.8.0-26.2.1.el5_6.1
glibc.i686 0:2.5-65.el5_7.1
glibc-common.i386 0:2.5-65.el5_7.1
gnupg.i386 0:1.4.5-14.el5_5.1
gzip.i386 0:1.3.5-13.el5.centos
hmaccalc.i386 0:0.9.6-3.el5
httpd.i386 0:2.2.3-53.el5.centos.3
initscripts.i386 0:8.45.38-2.el5.centos
iproute.i386 0:2.6.18-11.el5
jwhois.i386 0:3.2.3-12.el5
kpartx.i386 0:0.4.7-46.el5_7.2
krb5-libs.i386 0:1.6.1-63.el5_7
less.i386 0:436-7.el5
libacl.i386 0:2.2.39-6.el5
libgcc.i386 0:4.1.2-51.el5
libpng.i386 2:1.2.10-7.1.el5_7.5
libselinux.i386 0:1.33.4-5.7.el5
libselinux-python.i386 0:1.33.4-5.7.el5
libselinux-utils.i386 0:1.33.4-5.7.el5
libsepol.i386 0:1.15.2-3.el5
libstdc++.i386 0:4.1.2-51.el5
libsysfs.i386 0:2.1.0-1.el5
libtiff.i386 0:3.8.2-7.el5_6.7
libuser.i386 0:0.54.7-2.1.el5_5.2
libxml2.i386 0:2.6.26-2.1.12.el5_7.2
lm_sensors.i386 0:2.10.7-9.el5
logrotate.i386 0:3.7.4-12
lvm2.i386 0:2.02.84-6.el5_7.1
m2crypto.i386 0:0.16-8.el5
man.i386 0:1.6d-2.el5
man-pages.noarch 0:2.39-17.el5
mkinitrd.i386 0:5.1.19.6-71.el5_7.1
mod_ssl.i386 1:2.2.3-53.el5.centos.3
module-init-tools.i386 0:3.3-0.pre3.1.60.el5_5.1
nash.i386 0:5.1.19.6-71.el5_7.1
net-snmp.i386 1:5.3.2.2-14.el5_7.1
net-snmp-libs.i386 1:5.3.2.2-14.el5_7.1
net-snmp-utils.i386 1:5.3.2.2-14.el5_7.1
net-tools.i386 0:1.60-81.el5
newt.i386 0:0.52.2-15.el5
nscd.i386 0:2.5-65.el5_7.1
nspr.i386 0:4.8.8-1.el5_7
nss.i386 0:3.12.10-7.el5_7
ntsysv.i386 0:1.3.30.2-2.el5
openldap.i386 0:2.3.43-12.el5_7.10
openssh.i386 0:4.3p2-72.el5_7.5
openssh-clients.i386 0:4.3p2-72.el5_7.5
openssh-server.i386 0:4.3p2-72.el5_7.5
openssl.i686 0:0.9.8e-20.el5
pam.i386 0:0.99.6.2-6.el5_5.2
passwd.i386 0:0.73-2
pcre.i386 0:6.6-6.el5_6.1
perl.i386 4:5.8.8-32.el5_7.6
php.i386 0:5.1.6-27.el5_7.4
php-cli.i386 0:5.1.6-27.el5_7.4
php-common.i386 0:5.1.6-27.el5_7.4
policycoreutils.i386 0:1.33.12-14.8.el5
popt.i386 0:1.10.2.3-22.el5_7.2
postgresql-libs.i386 0:8.1.23-1.el5_7.3
procps.i386 0:3.2.7-17.el5
psmisc.i386 0:22.2-7.el5_6.2
python.i386 0:2.4.3-44.el5_7.1
python-urlgrabber.noarch 0:3.1.0-6.el5
quota.i386 1:3.13-5.el5
rpm.i386 0:4.4.2.3-22.el5_7.2
rpm-libs.i386 0:4.4.2.3-22.el5_7.2
rpm-python.i386 0:4.4.2.3-22.el5_7.2
rsync.i386 0:3.0.6-4.el5_7.1
samba.i386 0:3.0.33-3.29.el5_7.4
samba-client.i386 0:3.0.33-3.29.el5_7.4
samba-common.i386 0:3.0.33-3.29.el5_7.4
samba-swat.i386 0:3.0.33-3.29.el5_7.4
screen.i386 0:4.0.3-4.el5
sed.i386 0:4.1.5-8.el5
shadow-utils.i386 2:4.0.17-18.el5_6.1
sudo.i386 0:1.7.2p1-10.el5
sysklogd.i386 0:1.4.1-46.el5
talk.i386 0:0.17-31.el5
talk-server.i386 0:0.17-31.el5
tar.i386 2:1.15.1-30.el5
tcpdump.i386 14:3.9.4-15.el5
tcsh.i386 0:6.14-17.el5_5.2
tmpwatch.i386 0:2.9.7-1.1.el5.5
traceroute.i386 3:2.0.1-6.el5
tzdata.i386 0:2011l-4.el5
udev.i386 0:095-14.27.el5_7.1
util-linux.i386 0:2.13-0.56.el5
vim-common.i386 2:7.0.109-7.el5
vim-enhanced.i386 2:7.0.109-7.el5
vim-minimal.i386 2:7.0.109-7.el5
vsftpd.i386 0:2.0.5-21.el5
xinetd.i386 2:2.3.14-13.el5
yum.noarch 0:3.2.22-37.el5.centos
yum-fastestmirror.noarch 0:1.1.16-16.el5.centos
zlib.i386 0:1.2.3-4.el5

Complete!
[root@dti-vps-srv30 ~]# cat /etc/redhat-release
CentOS release 5.7 (Final)