序列号 THUV2-32HH7-6NMHN-PTX7Y-QQCTH
感谢为人民服务的昔阳县政府。
http://www.xiyang.gov.cn/xiyang/tongzhigonggao/20141106/12407.html（原帖已经被删）

附：WPS Pro 2016 下载地址
组合装（无VBA）：http://kad.www.wps.cn/wps/download/ep/WPS2016ProSuite_normal.exe
WPS Pro（无VBA）：http://kad.www.wps.cn/wps/download/ep/WPS2016Pro_normal.exe
WPS Plus（带VBA）：http://kad.www.wps.cn/wps/download/ep/WPS2016ProPlus_normal.exe

yum -y install transmission transmission-daemon

systemctl start transmission-daemon
systemctl stop transmission-daemon
systemctl enable transmission-daemon.service

#创建transmission储存目录并赋予相关权限

mkdir -p /dev/mapper/data/pt/
chown -R transmission:transmission /dev/mapper/data/pt/
chmod g+w /dev/mapper/data/pt/

#配置transmission的settings.json
nano /var/lib/transmission/.config/transmission-daemon/settings.json

#修改如下四个为你想要的内容
“rpc-authentication-required”: true, #默认是false, 改为true即可
“rpc-password”: “123”, #写进去之后重启transmission他会自动转换为一串字母
“rpc-username”: “ylx”, #默认是”空的”
“rpc-whitelist-enabled”: 

cd /etc/nginx/conf
touch agent_deny.conf
nano agent_deny.conf

填上
#禁止Scrapy等工具的抓取
if ($http_user_agent ~* (Scrapy|Curl|HttpClient)) {
     return 403;
}
#禁止指定UA及UA为空的访问
if ($http_user_agent ~ "FeedDemon|Indy Library|Alexa Toolbar|AskTbFXTV|AhrefsBot|CrawlDaddy|CoolpadWebkit|Java|Feedly|UniversalFeedParser|ApacheBench|Microsoft URL Control|Swiftbot|ZmEu|oBot|jaunty|Python-urllib|lightDeckReports Bot|YYSpider|DigExt|HttpClient|MJ12bot|heritrix|EasouSpider|Ezooms|^$" ) {
     return 403;             
}
#禁止非GET|HEAD|POST方式的抓取
if ($request_method !~ ^(GET|HEAD|POST)$) {
    return 403;
}

yum install epel-release -y
yum install screen nano unzip htop net-tools wget psmisc -y  systemctl stop firewalld.service
systemctl disable firewalld.service

yum install iptables iptables-services -y

systemctl enable iptables.service
systemctl start iptables.service

数据区:
mkfs.ext3 /dev/vdb
mkdir /dev/mapper/data
mount /dev/vdb /dev/mapper/data
/dev/vdb 

关闭ipv6地址

nano /etc/sysctl.conf

net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1

sysctl -p

清理发件队列

find /var/spool/exim/input/ -type f -name '*' -print0 | xargs -0 rm &

nano /etc/exim/exim.conf
primary_hostname = 162.220.14.10.lg.ylx.me
domainlist local_domains = @ : localhost : localhost.localdomain 

更换内核

rpm -ivh http://linuxsoft.cern.ch/cern/centos/7/updates/x86_64/Packages/kernel-3.10.0-229.1.2.el7.x86_64.rpm --force

设置我们要的内核启动(只有在升级了内核时才需要)

grub2-set-default "CentOS Linux (3.10.0-229.1.2.el7.x86_64) 7 (Core)"

禁止更新内核

yum install -y nano
nano
#[main]最后面加入
exclude=kernel*
exclude=centos-release*
#Ctrl+X退出并按提示保存

剩下的91什么的，选择匹配低的

查看状态

/serverspeeder/bin/serverSpeeder.sh status

tso、gso、gro、lro状态

ethtool -k eth0

查看私密文章，配置 后重启

 service serverSpeeder restart

cat /etc/sysctl.conf
#CTCDN系统优化参数
#关闭ipv6
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
#决定检查过期多久邻居条目
net.ipv4.neigh.default.gc_stale_time=120
#使用arp_announce / arp_ignore解决ARP映射问题
net.ipv4.conf.default.arp_announce = 2
net.ipv4.conf.all.arp_announce=2
net.ipv4.conf.lo.arp_announce=2
# 避免放大攻击
net.ipv4.icmp_echo_ignore_broadcasts = 1
# 开启恶意icmp错误消息保护
net.ipv4.icmp_ignore_bogus_error_responses = 1
#关闭路由转发
net.ipv4.ip_forward = 0
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.default.send_redirects = 0…

#Region ;**** Directives created by AutoIt3Wrapper_GUI ****
#AutoIt3Wrapper_Compile_both=y
#EndRegion ;**** Directives created by AutoIt3Wrapper_GUI ****
Global $objwmiservice, $wnc, $mem1, $mem3
Local $object, $objoperatingsystem

$objwmiservice = ObjGet("winmgmts:{impersonationlevel=impersonate}!\\.\root\cimv2")
$wnc = $objwmiservice.execquery("select * from win32_physicalmemory")

For $object In $wnc
	$mem = String(Int($object.capacity /