http://blackip.ustc.edu.cn/list.php?txt
http://antivirus.neu.edu.cn/scan/
http://www.openbl.org/lists/base.txt…
http://blackip.ustc.edu.cn/list.php?txt
http://antivirus.neu.edu.cn/scan/
http://www.openbl.org/lists/base.txt…
1. 同域名
server {
listen 80;
server_name dd.ylx.me;
#include /etc/nginx/conf/ddos2.conf;
location / {
#设置主机头和客户端真实地址,以便服务器获取客户端真实IP
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#禁用缓存
proxy_buffering off;
#设置反向代理的地址,更换你的后端IP
proxy_pass http://203.114.74.45;
}
access_log off;
} 2.不同域名,不带缓存目录
server {
listen 80;
server_name windowsupdate.chuyu.me …来自wp中文站点
define('WPLANG', 'zh_CN');并保存文件。
序列号 THUV2-32HH7-6NMHN-PTX7Y-QQCTH
感谢为人民服务的昔阳县政府。
http://www.xiyang.gov.cn/xiyang/tongzhigonggao/20141106/12407.html(原帖已经被删)
附:WPS Pro 2016 下载地址
组合装(无VBA):http://kad.www.wps.cn/wps/download/ep/WPS2016ProSuite_normal.exe
WPS Pro(无VBA):http://kad.www.wps.cn/wps/download/ep/WPS2016Pro_normal.exe
WPS Plus(带VBA):http://kad.www.wps.cn/wps/download/ep/WPS2016ProPlus_normal.exe
yum -y install transmission transmission-daemon systemctl start transmission-daemon systemctl stop transmission-daemon systemctl enable transmission-daemon.service #创建transmission储存目录并赋予相关权限 mkdir -p /dev/mapper/data/pt/ chown -R transmission:transmission /dev/mapper/data/pt/ chmod g+w /dev/mapper/data/pt/ #配置transmission的settings.json nano /var/lib/transmission/.config/transmission-daemon/settings.json #修改如下四个为你想要的内容 “rpc-authentication-required”: true, #默认是false, 改为true即可 “rpc-password”: “123”, #写进去之后重启transmission他会自动转换为一串字母 “rpc-username”: “ylx”, #默认是”空的” “rpc-whitelist-enabled”:…
cd /etc/nginx/conf
touch agent_deny.conf
nano agent_deny.conf
填上
#禁止Scrapy等工具的抓取
if ($http_user_agent ~* (Scrapy|Curl|HttpClient)) {
return 403;
}
#禁止指定UA及UA为空的访问
if ($http_user_agent ~ "FeedDemon|Indy Library|Alexa Toolbar|AskTbFXTV|AhrefsBot|CrawlDaddy|CoolpadWebkit|Java|Feedly|UniversalFeedParser|ApacheBench|Microsoft URL Control|Swiftbot|ZmEu|oBot|jaunty|Python-urllib|lightDeckReports Bot|YYSpider|DigExt|HttpClient|MJ12bot|heritrix|EasouSpider|Ezooms|^$" ) {
return 403;
}
#禁止非GET|HEAD|POST方式的抓取
if ($request_method !~ ^(GET|HEAD|POST)$) {
return 403;
}
…yum install epel-release -y yum install screen nano unzip htop net-tools wget psmisc -y systemctl stop firewalld.service systemctl disable firewalld.service yum install iptables iptables-services -y systemctl enable iptables.service systemctl start iptables.service 数据区: mkfs.ext3 /dev/vdb mkdir /dev/mapper/data mount /dev/vdb /dev/mapper/data /dev/vdb…
关闭ipv6地址
nano /etc/sysctl.conf net.ipv6.conf.all.disable_ipv6 = 1 net.ipv6.conf.default.disable_ipv6 = 1 net.ipv6.conf.lo.disable_ipv6 = 1 sysctl -p
清理发件队列
find /var/spool/exim/input/ -type f -name '*' -print0 | xargs -0 rm & nano /etc/exim/exim.conf primary_hostname = 162.220.14.10.lg.ylx.me domainlist local_domains = @ : localhost : localhost.localdomain…
更换内核
rpm -ivh http://linuxsoft.cern.ch/cern/centos/7/updates/x86_64/Packages/kernel-3.10.0-229.1.2.el7.x86_64.rpm --force
设置我们要的内核启动(只有在升级了内核时才需要)
grub2-set-default "CentOS Linux (3.10.0-229.1.2.el7.x86_64) 7 (Core)"
禁止更新内核
yum install -y nano nano #[main]最后面加入 exclude=kernel* exclude=centos-release* #Ctrl+X退出并按提示保存
剩下的91什么的,选择匹配低的
查看状态
/serverspeeder/bin/serverSpeeder.sh status
tso、gso、gro、lro状态
ethtool -k eth0
查看私密文章,配置 后重启
service serverSpeeder restart…
cat /etc/sysctl.conf
#CTCDN系统优化参数
#关闭ipv6
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
#决定检查过期多久邻居条目
net.ipv4.neigh.default.gc_stale_time=120
#使用arp_announce / arp_ignore解决ARP映射问题
net.ipv4.conf.default.arp_announce = 2
net.ipv4.conf.all.arp_announce=2
net.ipv4.conf.lo.arp_announce=2
# 避免放大攻击
net.ipv4.icmp_echo_ignore_broadcasts = 1
# 开启恶意icmp错误消息保护
net.ipv4.icmp_ignore_bogus_error_responses = 1
#关闭路由转发
net.ipv4.ip_forward = 0
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.default.send_redirects = 0…