\u5feb\u901f\u8a3a\u65b7\u6b65\u9a5f<\/strong><\/h2>\n

\u5728\u5be6\u65bd\u4efb\u4f55\u4fee\u5fa9\u4e4b\u524d\uff0c\u8b93\u6211\u5011\u6aa2\u67e5\u4f3a\u670d\u5668\u7684\u7576\u524d\u72c0\u614b\u3002\u9996\u5148\uff0c\u900f\u904eSSH\u5b58\u53d6\u4f3a\u670d\u5668\u4e26\u57f7\u884c\u9019\u4e9b\u8a3a\u65b7\u547d\u4ee4\uff1a<\/p>\n

\r\n# \u6aa2\u67e5Nginx\u72c0\u614b\r\nsystemctl status nginx\r\n\r\n# \u67e5\u770b\u5373\u6642\u932f\u8aa4\u65e5\u8a8c\r\ntail -f \/www\/wwwlogs\/nginx_error.log\r\n\r\n# \u6e2c\u8a66Nginx\u914d\u7f6e\r\nnginx -t\r\n<\/code><\/pre>\n
\u5206\u6790\u932f\u8aa4\u65e5\u8a8c<\/strong><\/h2>\n
\u6700\u95dc\u9375\u7684\u8cc7\u8a0a\u5b58\u5728\u65bcNginx\u932f\u8aa4\u65e5\u8a8c\u4e2d\u3002\u4ee5\u4e0b\u662f\u60a8\u53ef\u80fd\u9047\u5230\u7684\u5178\u578b\u932f\u8aa4\u6a21\u5f0f\uff1a<\/p>\n
\r\n2024\/02\/14 10:15:23 [error] 12345#0: *67 ModSecurity: Access denied with code 403 \r\n(Phase 2). Matched \"Operator `Rx' with parameter\" at REQUEST_URI. [file \"\/etc\/nginx\/modsec_rules\/main.conf\"] \r\n[line \"224\"] [id \"12345\"] [rev \"1\"] [msg \"Potential SQL Injection Attack\"] \r\n[severity \"CRITICAL\"] [ver \"OWASP_CRS\/3.3.2\"] [maturity \"9\"] [accuracy \"9\"] \r\n[hostname \"example.com\"] [uri \"\/api\/users\"] [unique_id \"168234567890.123456\"]\r\n<\/code><\/pre>\n
\u9010\u6b65\u89e3\u6c7a\u65b9\u6848\u6d41\u7a0b<\/strong><\/h2>\n
\u6309\u7167\u4ee5\u4e0b\u9806\u5e8f\u6b65\u9a5f\u89e3\u6c7a500\u932f\u8aa4\uff0c\u540c\u6642\u4fdd\u6301\u5b89\u5168\u6027\uff1a<\/p>\n
\n
\u81e8\u6642\u505c\u7528Nginx\u9632\u706b\u7246\uff1a\n
\r\nbt nginx stop\r\nservice nginx restart\r\n        <\/code><\/pre>\n<\/li>\n
\u5099\u4efd\u7576\u524d\u914d\u7f6e\uff1a\n
\r\ncp \/www\/server\/panel\/vhost\/nginx\/*.conf \/root\/nginx_backup\/\r\ncp \/www\/server\/nginx\/conf\/nginx.conf \/root\/nginx_backup\/\r\n        <\/code><\/pre>\n<\/li>\n
\u4fee\u6539\u4e3bNginx\u914d\u7f6e\u6a94\u6848\uff1a\n
\r\nvim \/www\/server\/nginx\/conf\/nginx.conf\r\n\r\n# \u5728http\u5340\u584a\u4e2d\u6dfb\u52a0\u9019\u4e9b\u884c\uff1a\r\nclient_max_body_size 50M;\r\nproxy_connect_timeout 600;\r\nproxy_send_timeout 600;\r\nproxy_read_timeout 600;\r\n        <\/code><\/pre>\n<\/li>\n<\/ol>\n
\u512a\u5316\u9632\u706b\u7246\u898f\u5247<\/strong><\/h2>\n
\u5efa\u7acb\u5e73\u8861\u5b89\u5168\u6027\u548c\u529f\u80fd\u6027\u7684\u81ea\u8a02\u898f\u5247\u96c6\uff1a<\/p>\n
\r\n# \u5efa\u7acb\u65b0\u7684\u914d\u7f6e\u6a94\u6848\r\nvim \/www\/server\/nginx\/conf\/custom_rules.conf\r\n\r\n# \u6dfb\u52a0\u9019\u4e9b\u512a\u5316\u898f\u5247\r\nlocation \/ {\r\n    ModSecurityEnabled on;\r\n    ModSecurityConfig modsec_rules\/custom.conf;\r\n    \r\n    # \u5c07\u53ef\u4fe1IP\u5217\u5165\u767d\u540d\u55ae\r\n    allow 192.168.1.0\/24;\r\n    allow 10.0.0.0\/8;\r\n    \r\n    # \u57fa\u672cDDoS\u9632\u8b77\r\n    limit_req zone=one burst=5 nodelay;\r\n    limit_conn perip 10;\r\n}\r\n<\/code><\/pre>\n
\u7f8e\u570b\u4f3a\u670d\u5668\u6548\u80fd\u8abf\u512a<\/strong><\/h2>\n
\u5728\u7f8e\u570b\u4f3a\u670d\u5668\u79df\u7528\u57fa\u790e\u8a2d\u65bd\u4e0a\u904b\u71df\u6642\uff0c\u7279\u5b9a\u7684\u512a\u5316\u53ef\u4ee5\u986f\u8457\u63d0\u9ad8\u56de\u61c9\u6642\u9593\u4e26\u6e1b\u5c11500\u932f\u8aa4\u7684\u53ef\u80fd\u6027\uff1a<\/p>\n
\r\n# \u5728http\u5340\u584a\u4e2d\u6dfb\u52a0\r\nhttp {\r\n    # \u512a\u5316\u5de5\u4f5c\u7a0b\u5e8f\r\n    worker_processes auto;\r\n    worker_rlimit_nofile 65535;\r\n    \r\n    # \u9023\u7dda\u512a\u5316\r\n    keepalive_timeout 65;\r\n    keepalive_requests 100;\r\n    \r\n    # Gzip\u58d3\u7e2e\r\n    gzip on;\r\n    gzip_comp_level 5;\r\n    gzip_types text\/plain text\/css application\/json application\/x-javascript text\/xml application\/xml application\/xml+rss text\/javascript;\r\n}\r\n<\/code><\/pre>\n
\u5be6\u65bd\u9810\u9632\u63aa\u65bd<\/strong><\/h2>\n
\u70ba\u9632\u6b62\u5c07\u4f86\u51fa\u73fe500\u932f\u8aa4\uff0c\u5be6\u65bd\u9019\u4e9b\u76e3\u63a7\u548c\u7dad\u8b77\u7a0b\u5e8f\uff1a<\/p>\n
\n
\u8a2d\u5b9a\u81ea\u52d5\u5065\u5eb7\u6aa2\u67e5\uff1a\n
\r\n# \u5efa\u7acb\u76e3\u63a7\u8173\u672c\r\nvim \/root\/scripts\/health_check.sh\r\n\r\n#!\/bin\/bash\r\nresponse=$(curl -s -w \"%{http_code}\" http:\/\/yourdomain.com -o \/dev\/null)\r\nif [ $response -ne 200 ]; then\r\n    systemctl restart nginx\r\n    echo \"\u7531\u65bc\u975e200\u56de\u61c9\u91cd\u65b0\u555f\u52d5\u4e86Nginx\" | mail -s \"\u4f3a\u670d\u5668\u8b66\u5831\" admin@yourdomain.com\r\nfi\r\n        <\/code><\/pre>\n<\/li>\n
\u914d\u7f6e\u65e5\u8a8c\u8f2a\u66ff\uff1a\n
\r\n# \u6dfb\u52a0\u5230 \/etc\/logrotate.d\/nginx\r\n\/www\/wwwlogs\/*log {\r\n    daily\r\n    missingok\r\n    rotate 7\r\n    compress\r\n    delaycompress\r\n    notifempty\r\n    create 640 nginx nginx\r\n    sharedscripts\r\n    postrotate\r\n        if [ -f \/var\/run\/nginx.pid ]; then\r\n            kill -USR1 `cat \/var\/run\/nginx.pid`\r\n        fi\r\n    endscript\r\n}\r\n        <\/code><\/pre>\n<\/li>\n<\/ol>\n
\u5e38\u898b\u554f\u984c\u6545\u969c\u6392\u9664<\/strong><\/h2>\n
\u4ee5\u4e0b\u662f\u89e3\u6c7a\u53cd\u8986\u51fa\u73fe\u554f\u984c\u7684\u7cfb\u7d71\u65b9\u6cd5\uff1a<\/p>\n\n\n\n\n\n
\u932f\u8aa4\u75c7\u72c0<\/th>\n
\u53ef\u80fd\u539f\u56e0<\/th>\n
\u89e3\u6c7a\u65b9\u6848<\/th>\n<\/tr>\n
\u5076\u767c\u6027500\u932f\u8aa4<\/td>\n
\u8a18\u61b6\u9ad4\u9650\u5236<\/td>\n
\u5728php.ini\u4e2d\u589e\u52a0PHP\u8a18\u61b6\u9ad4\u9650\u5236<\/td>\n<\/tr>\n
\u6301\u7e8c\u6027500\u932f\u8aa4<\/td>\n
\u9632\u706b\u7246\u898f\u5247\u885d\u7a81<\/td>\n
\u6aa2\u67e5\u4e26\u8abf\u6574ModSecurity\u898f\u5247<\/td>\n<\/tr>\n
\u90e8\u7f72\u5f8c\u7684500\u932f\u8aa4<\/td>\n
\u6b0a\u9650\u554f\u984c<\/td>\n
\u905e\u8ff4\u91cd\u8a2d\u6a94\u6848\u6b0a\u9650<\/td>\n<\/tr>\n<\/table>\n
\u76e3\u63a7\u548c\u7dad\u8b77<\/strong><\/h2>\n
\u5be6\u65bd\u9019\u4e9b\u76e3\u63a7\u89e3\u6c7a\u65b9\u6848\u4ee5\u7dad\u6301\u6700\u4f73\u4f3a\u670d\u5668\u5065\u5eb7\u72c0\u6cc1\uff1a<\/p>\n
\r\n# \u5b89\u88dd\u76e3\u63a7\u5de5\u5177\r\nyum install -y nagios monit\r\n\r\n# \u914d\u7f6e\u57fa\u672c\u76e3\u63a7\r\nvim \/etc\/monit\/monitrc\r\n\r\ncheck process nginx with pidfile \/var\/run\/nginx.pid\r\n    start program = \"\/etc\/init.d\/nginx start\"\r\n    stop program = \"\/etc\/init.d\/nginx stop\"\r\n    if failed host 127.0.0.1 port 80 protocol http then restart\r\n    if 5 restarts within 5 cycles then timeout\r\n<\/code><\/pre>\n
\u7d50\u8ad6<\/strong><\/h2>\n
\u5728\u7f8e\u570b\u4f3a\u670d\u5668\u79df\u7528\u4f3a\u670d\u5668\u4e0a\u7ba1\u7406Nginx\u9632\u706b\u7246\u914d\u7f6e\u9700\u8981\u5728\u5b89\u5168\u6027\u548c\u529f\u80fd\u6027\u4e4b\u9593\u53d6\u5f97\u5fae\u5999\u7684\u5e73\u8861\u3002\u900f\u904e\u9075\u5faa\u672c\u6307\u5357\uff0c\u60a8\u53ef\u4ee5\u6709\u6548\u89e3\u6c7a500\u932f\u8aa4\uff0c\u540c\u6642\u7dad\u6301\u5f37\u5927\u7684\u5b89\u5168\u63aa\u65bd\u3002\u8acb\u8a18\u4f4f\u5b9a\u671f\u66f4\u65b0\u914d\u7f6e\u4e26\u76e3\u63a7\u4f3a\u670d\u5668\u6548\u80fd\uff0c\u4ee5\u9632\u6b62\u672a\u4f86\u51fa\u73fe\u554f\u984c\u3002<\/p>\n
\u5982\u9700\u91dd\u5c0d\u60a8\u7684\u7f8e\u570b\u4f3a\u670d\u5668\u79df\u7528\u74b0\u5883\u7684\u984d\u5916\u652f\u63f4\u6216\u81ea\u8a02\u914d\u7f6e\uff0c\u8acb\u8aee\u8a62\u6211\u5011\u7684\u6280\u8853\u652f\u63f4\u5718\u968a\u6216\u53c3\u8003\u5bf6\u5854\u9762\u677f\u5b98\u65b9\u6587\u4ef6\u3002\u4f7f\u7528\u9019\u4e9b\u7d93\u904e\u9a57\u8b49\u7684Nginx\u9632\u706b\u7246\u7ba1\u7406\u89e3\u6c7a\u65b9\u6848\uff0c\u4fdd\u6301\u4f3a\u670d\u5668\u914d\u7f6e\u6700\u4f73\u5316\u548c\u7db2\u7ad9\u5e73\u7a69\u904b\u884c\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
\u5728\u7f8e\u570b\u4f3a\u670d\u5668\u79df\u7528\u4f3a\u670d\u5668\u4e0a\u900f\u904e\u5bf6\u5854\u9762\u677f\u5b89\u88ddNginx\u9632\u706b\u7246\u5f8c\u9047\u5230500\u932f\u8aa4\u53ef\u80fd\u6703\u4ee4\u4eba\u6cae\u55aa\u3002\u672c\u7d9c\u5408\u6307\u5357\u5c07\u5e36\u60a8\u5b8c\u6210\u9664 […]<\/p>\n
Read More…<\/a><\/p>\n","protected":false},"author":3,"featured_media":22719,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[4815],"tags":[6765,6766,4849,1519,765],"class_list":["post-22722","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-america-dedicated-server-tc","tag-nginx-firewall-tc","tag-500-error-fix-tc","tag-us-hosting-tc","tag-bt-panel-tc","tag-server-configuration-tc"],"acf":[],"yoast_head":"\n