\u5feb\u901f\u8bca\u65ad\u6b65\u9aa4<\/strong><\/h2>\n

\u5728\u5b9e\u65bd\u4efb\u4f55\u4fee\u590d\u4e4b\u524d\uff0c\u8ba9\u6211\u4eec\u68c0\u67e5\u670d\u52a1\u5668\u7684\u5f53\u524d\u72b6\u6001\u3002\u9996\u5148\uff0c\u901a\u8fc7SSH\u8bbf\u95ee\u670d\u52a1\u5668\u5e76\u6267\u884c\u8fd9\u4e9b\u8bca\u65ad\u547d\u4ee4\uff1a<\/p>\n

\r\n# \u68c0\u67e5Nginx\u72b6\u6001\r\nsystemctl status nginx\r\n\r\n# \u67e5\u770b\u5b9e\u65f6\u9519\u8bef\u65e5\u5fd7\r\ntail -f \/www\/wwwlogs\/nginx_error.log\r\n\r\n# \u6d4b\u8bd5Nginx\u914d\u7f6e\r\nnginx -t\r\n<\/code><\/pre>\n
\u5206\u6790\u9519\u8bef\u65e5\u5fd7<\/strong><\/h2>\n
\u6700\u5173\u952e\u7684\u4fe1\u606f\u5b58\u5728\u4e8eNginx\u9519\u8bef\u65e5\u5fd7\u4e2d\u3002\u4ee5\u4e0b\u662f\u60a8\u53ef\u80fd\u9047\u5230\u7684\u5178\u578b\u9519\u8bef\u6a21\u5f0f\uff1a<\/p>\n
\r\n2024\/02\/14 10:15:23 [error] 12345#0: *67 ModSecurity: Access denied with code 403 \r\n(Phase 2). Matched \"Operator `Rx' with parameter\" at REQUEST_URI. [file \"\/etc\/nginx\/modsec_rules\/main.conf\"] \r\n[line \"224\"] [id \"12345\"] [rev \"1\"] [msg \"Potential SQL Injection Attack\"] \r\n[severity \"CRITICAL\"] [ver \"OWASP_CRS\/3.3.2\"] [maturity \"9\"] [accuracy \"9\"] \r\n[hostname \"example.com\"] [uri \"\/api\/users\"] [unique_id \"168234567890.123456\"]\r\n<\/code><\/pre>\n
\u9010\u6b65\u89e3\u51b3\u65b9\u6848\u6d41\u7a0b<\/strong><\/h2>\n
\u6309\u7167\u4ee5\u4e0b\u987a\u5e8f\u6b65\u9aa4\u89e3\u51b3500\u9519\u8bef\uff0c\u540c\u65f6\u4fdd\u6301\u5b89\u5168\u6027\uff1a<\/p>\n
\n
\u4e34\u65f6\u7981\u7528Nginx\u9632\u706b\u5899\uff1a\n
\r\nbt nginx stop\r\nservice nginx restart\r\n        <\/code><\/pre>\n<\/li>\n
\u5907\u4efd\u5f53\u524d\u914d\u7f6e\uff1a\n
\r\ncp \/www\/server\/panel\/vhost\/nginx\/*.conf \/root\/nginx_backup\/\r\ncp \/www\/server\/nginx\/conf\/nginx.conf \/root\/nginx_backup\/\r\n        <\/code><\/pre>\n<\/li>\n
\u4fee\u6539\u4e3bNginx\u914d\u7f6e\u6587\u4ef6\uff1a\n
\r\nvim \/www\/server\/nginx\/conf\/nginx.conf\r\n\r\n# \u5728http\u5757\u4e2d\u6dfb\u52a0\u8fd9\u4e9b\u884c\uff1a\r\nclient_max_body_size 50M;\r\nproxy_connect_timeout 600;\r\nproxy_send_timeout 600;\r\nproxy_read_timeout 600;\r\n        <\/code><\/pre>\n<\/li>\n<\/ol>\n
\u4f18\u5316\u9632\u706b\u5899\u89c4\u5219<\/strong><\/h2>\n
\u521b\u5efa\u5e73\u8861\u5b89\u5168\u6027\u548c\u529f\u80fd\u6027\u7684\u81ea\u5b9a\u4e49\u89c4\u5219\u96c6\uff1a<\/p>\n
\r\n# \u521b\u5efa\u65b0\u7684\u914d\u7f6e\u6587\u4ef6\r\nvim \/www\/server\/nginx\/conf\/custom_rules.conf\r\n\r\n# \u6dfb\u52a0\u8fd9\u4e9b\u4f18\u5316\u89c4\u5219\r\nlocation \/ {\r\n    ModSecurityEnabled on;\r\n    ModSecurityConfig modsec_rules\/custom.conf;\r\n    \r\n    # \u5c06\u53ef\u4fe1IP\u5217\u5165\u767d\u540d\u5355\r\n    allow 192.168.1.0\/24;\r\n    allow 10.0.0.0\/8;\r\n    \r\n    # \u57fa\u672cDDoS\u9632\u62a4\r\n    limit_req zone=one burst=5 nodelay;\r\n    limit_conn perip 10;\r\n}\r\n<\/code><\/pre>\n
\u7f8e\u56fd\u670d\u52a1\u5668\u6027\u80fd\u8c03\u4f18<\/strong><\/h2>\n
\u5728\u7f8e\u56fd\u670d\u52a1\u5668\u79df\u7528\u57fa\u7840\u8bbe\u65bd\u4e0a\u8fd0\u8425\u65f6\uff0c\u7279\u5b9a\u7684\u4f18\u5316\u53ef\u4ee5\u663e\u8457\u63d0\u9ad8\u54cd\u5e94\u65f6\u95f4\u5e76\u51cf\u5c11500\u9519\u8bef\u7684\u53ef\u80fd\u6027\uff1a<\/p>\n
\r\n# \u5728http\u5757\u4e2d\u6dfb\u52a0\r\nhttp {\r\n    # \u4f18\u5316\u5de5\u4f5c\u8fdb\u7a0b\r\n    worker_processes auto;\r\n    worker_rlimit_nofile 65535;\r\n    \r\n    # \u8fde\u63a5\u4f18\u5316\r\n    keepalive_timeout 65;\r\n    keepalive_requests 100;\r\n    \r\n    # Gzip\u538b\u7f29\r\n    gzip on;\r\n    gzip_comp_level 5;\r\n    gzip_types text\/plain text\/css application\/json application\/x-javascript text\/xml application\/xml application\/xml+rss text\/javascript;\r\n}\r\n<\/code><\/pre>\n
\u5b9e\u65bd\u9884\u9632\u63aa\u65bd<\/strong><\/h2>\n
\u4e3a\u9632\u6b62\u5c06\u6765\u51fa\u73b0500\u9519\u8bef\uff0c\u5b9e\u65bd\u8fd9\u4e9b\u76d1\u63a7\u548c\u7ef4\u62a4\u7a0b\u5e8f\uff1a<\/p>\n
\n
\u8bbe\u7f6e\u81ea\u52a8\u5065\u5eb7\u68c0\u67e5\uff1a\n
\r\n# \u521b\u5efa\u76d1\u63a7\u811a\u672c\r\nvim \/root\/scripts\/health_check.sh\r\n\r\n#!\/bin\/bash\r\nresponse=$(curl -s -w \"%{http_code}\" http:\/\/yourdomain.com -o \/dev\/null)\r\nif [ $response -ne 200 ]; then\r\n    systemctl restart nginx\r\n    echo \"\u7531\u4e8e\u975e200\u54cd\u5e94\u91cd\u542f\u4e86Nginx\" | mail -s \"\u670d\u52a1\u5668\u8b66\u62a5\" admin@yourdomain.com\r\nfi\r\n        <\/code><\/pre>\n<\/li>\n
\u914d\u7f6e\u65e5\u5fd7\u8f6e\u8f6c\uff1a\n
\r\n# \u6dfb\u52a0\u5230 \/etc\/logrotate.d\/nginx\r\n\/www\/wwwlogs\/*log {\r\n    daily\r\n    missingok\r\n    rotate 7\r\n    compress\r\n    delaycompress\r\n    notifempty\r\n    create 640 nginx nginx\r\n    sharedscripts\r\n    postrotate\r\n        if [ -f \/var\/run\/nginx.pid ]; then\r\n            kill -USR1 `cat \/var\/run\/nginx.pid`\r\n        fi\r\n    endscript\r\n}\r\n        <\/code><\/pre>\n<\/li>\n<\/ol>\n
\u5e38\u89c1\u95ee\u9898\u6545\u969c\u6392\u9664<\/strong><\/h2>\n
\u4ee5\u4e0b\u662f\u89e3\u51b3\u53cd\u590d\u51fa\u73b0\u95ee\u9898\u7684\u7cfb\u7edf\u65b9\u6cd5\uff1a<\/p>\n\n\n\n\n\n
\u9519\u8bef\u75c7\u72b6<\/th>\n
\u53ef\u80fd\u539f\u56e0<\/th>\n
\u89e3\u51b3\u65b9\u6848<\/th>\n<\/tr>\n
\u5076\u53d1\u6027500\u9519\u8bef<\/td>\n
\u5185\u5b58\u9650\u5236<\/td>\n
\u5728php.ini\u4e2d\u589e\u52a0PHP\u5185\u5b58\u9650\u5236<\/td>\n<\/tr>\n
\u6301\u7eed\u6027500\u9519\u8bef<\/td>\n
\u9632\u706b\u5899\u89c4\u5219\u51b2\u7a81<\/td>\n
\u68c0\u67e5\u5e76\u8c03\u6574ModSecurity\u89c4\u5219<\/td>\n<\/tr>\n
\u90e8\u7f72\u540e\u7684500\u9519\u8bef<\/td>\n
\u6743\u9650\u95ee\u9898<\/td>\n
\u9012\u5f52\u91cd\u7f6e\u6587\u4ef6\u6743\u9650<\/td>\n<\/tr>\n<\/table>\n
\u76d1\u63a7\u548c\u7ef4\u62a4<\/strong><\/h2>\n
\u5b9e\u65bd\u8fd9\u4e9b\u76d1\u63a7\u89e3\u51b3\u65b9\u6848\u4ee5\u7ef4\u6301\u6700\u4f73\u670d\u52a1\u5668\u5065\u5eb7\u72b6\u51b5\uff1a<\/p>\n
\r\n# \u5b89\u88c5\u76d1\u63a7\u5de5\u5177\r\nyum install -y nagios monit\r\n\r\n# \u914d\u7f6e\u57fa\u672c\u76d1\u63a7\r\nvim \/etc\/monit\/monitrc\r\n\r\ncheck process nginx with pidfile \/var\/run\/nginx.pid\r\n    start program = \"\/etc\/init.d\/nginx start\"\r\n    stop program = \"\/etc\/init.d\/nginx stop\"\r\n    if failed host 127.0.0.1 port 80 protocol http then restart\r\n    if 5 restarts within 5 cycles then timeout\r\n<\/code><\/pre>\n
\u7ed3\u8bba<\/strong><\/h2>\n
\u5728\u7f8e\u56fd\u670d\u52a1\u5668\u79df\u7528\u670d\u52a1\u5668\u4e0a\u7ba1\u7406Nginx\u9632\u706b\u5899\u914d\u7f6e\u9700\u8981\u5728\u5b89\u5168\u6027\u548c\u529f\u80fd\u6027\u4e4b\u95f4\u53d6\u5f97\u5fae\u5999\u7684\u5e73\u8861\u3002\u901a\u8fc7\u9075\u5faa\u672c\u6307\u5357\uff0c\u60a8\u53ef\u4ee5\u6709\u6548\u89e3\u51b3500\u9519\u8bef\uff0c\u540c\u65f6\u7ef4\u6301\u5f3a\u5927\u7684\u5b89\u5168\u63aa\u65bd\u3002\u8bf7\u8bb0\u4f4f\u5b9a\u671f\u66f4\u65b0\u914d\u7f6e\u5e76\u76d1\u63a7\u670d\u52a1\u5668\u6027\u80fd\uff0c\u4ee5\u9632\u6b62\u672a\u6765\u51fa\u73b0\u95ee\u9898\u3002<\/p>\n
\u5982\u9700\u9488\u5bf9\u60a8\u7684\u7f8e\u56fd\u670d\u52a1\u5668\u79df\u7528\u73af\u5883\u7684\u989d\u5916\u652f\u6301\u6216\u81ea\u5b9a\u4e49\u914d\u7f6e\uff0c\u8bf7\u54a8\u8be2\u6211\u4eec\u7684\u6280\u672f\u652f\u6301\u56e2\u961f\u6216\u53c2\u8003\u5b9d\u5854\u9762\u677f\u5b98\u65b9\u6587\u6863\u3002\u4f7f\u7528\u8fd9\u4e9b\u7ecf\u8fc7\u9a8c\u8bc1\u7684Nginx\u9632\u706b\u5899\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\uff0c\u4fdd\u6301\u670d\u52a1\u5668\u914d\u7f6e\u4f18\u5316\u548c\u7f51\u7ad9\u5e73\u7a33\u8fd0\u884c\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
\u5728\u7f8e\u56fd\u670d\u52a1\u5668\u79df\u7528\u670d\u52a1\u5668\u4e0a\u901a\u8fc7\u5b9d\u5854\u9762\u677f\u5b89\u88c5Nginx\u9632\u706b\u5899\u540e\u9047\u5230500\u9519\u8bef\u53ef\u80fd\u4f1a\u4ee4\u4eba\u6cae\u4e27\u3002\u672c\u7efc\u5408\u6307\u5357\u5c06\u5e26\u60a8\u5b8c\u6210\u8c03\u8bd5\u8fc7\u7a0b\uff0c\u5e76\u63d0\u4f9b\u6709\u6548\u7684\u89e3\u51b3\u65b9\u6848\u6765\u6062\u590d\u7f51\u7ad9\u529f\u80fd\u3002\u65e0\u8bba\u60a8\u662f\u7ba1\u7406\u5355\u4e2a\u7ad9\u70b9\u8fd8\u662f\u591a\u4e2a\u5e94\u7528\u7a0b\u5e8f\uff0c\u4e86\u89e3\u6839\u672c\u539f\u56e0\u5e76\u5b9e\u65bd\u6b63\u786e\u7684\u4fee\u590d\u5bf9\u4e8e\u7ef4\u62a4\u6700\u4f73\u670d\u52a1\u5668\u6027\u80fd\u90fd\u81f3\u5173\u91cd\u8981\u3002 \u4e86\u89e3500\u9519\u8bef\u7684\u6839\u672c\u539f\u56e0 500\u5185\u90e8\u670d\u52a1\u5668\u9519\u8bef\u901a\u5e38\u5728Nginx\u9632\u706b\u5899\u89c4\u5219\u4e0e\u73b0\u6709\u670d\u52a1\u5668\u914d\u7f6e\u53d1\u751f\u51b2\u7a81\u65f6\u51fa\u73b0\u3002\u8fd9\u4e9b\u51b2\u7a81\u901a\u5e38\u6e90\u4e8e\uff1a ModSecurity\u89c4\u5219\u914d\u7f6e\u9519\u8bef Nginx\u6307\u4ee4\u4e0d\u517c\u5bb9 \u5185\u5b58\u5206\u914d\u95ee\u9898 \u670d\u52a1\u5668\u6587\u4ef6\u7cfb\u7edf\u7684\u6743\u9650\u95ee\u9898 \u5feb\u901f\u8bca\u65ad\u6b65\u9aa4 \u5728\u5b9e\u65bd\u4efb\u4f55\u4fee\u590d\u4e4b\u524d\uff0c\u8ba9\u6211\u4eec\u68c0\u67e5\u670d\u52a1\u5668\u7684\u5f53\u524d\u72b6\u6001\u3002\u9996\u5148\uff0c\u901a\u8fc7SSH\u8bbf\u95ee\u670d\u52a1\u5668\u5e76\u6267\u884c\u8fd9\u4e9b\u8bca\u65ad\u547d\u4ee4\uff1a # \u68c0\u67e5Nginx\u72b6\u6001 systemctl status nginx # \u67e5\u770b\u5b9e\u65f6\u9519\u8bef\u65e5\u5fd7 tail -f \/www\/wwwlogs\/nginx_error.log # \u6d4b\u8bd5Nginx\u914d\u7f6e nginx -t \u5206\u6790\u9519\u8bef\u65e5\u5fd7 \u6700\u5173\u952e\u7684\u4fe1\u606f\u5b58\u5728\u4e8eNginx\u9519\u8bef\u65e5\u5fd7\u4e2d\u3002\u4ee5\u4e0b\u662f\u60a8\u53ef\u80fd\u9047\u5230\u7684\u5178\u578b\u9519\u8bef\u6a21\u5f0f\uff1a 2024\/02\/14 10:15:23 [error] 12345#0: *67 ModSecurity: Access denied with code 403 (Phase 2). Matched “Operator `Rx’ with parameter” at REQUEST_URI. [file “\/etc\/nginx\/modsec_rules\/main.conf”] [line “224”] [id “12345”] [rev “1”] [msg “Potential […]<\/p>\n
Read More…<\/a><\/p>\n","protected":false},"author":3,"featured_media":22720,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[4816],"tags":[6767,6768,4853,1521,770],"class_list":["post-22723","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-america-dedicated-server-sc","tag-nginx-firewall-sc","tag-500-error-fix-sc","tag-us-hosting-sc","tag-bt-panel-sc","tag-server-configuration-sc"],"acf":[],"yoast_head":"\n