{"id":18535,"date":"2014-10-19T06:07:08","date_gmt":"2014-10-18T22:07:08","guid":{"rendered":"https:\/\/2blog.ilc.edu.tw\/25793\/2014\/10\/19\/%e8%a7%a3%e6%b1%ba%e5%9f%b7%e8%a1%8c-ufw-%e5%87%ba%e7%8f%be%e7%9a%84%e8%ad%a6%e5%91%8a%e8%a8%8a%e6%81%af\/"},"modified":"2014-10-19T06:07:08","modified_gmt":"2014-10-18T22:07:08","slug":"%e8%a7%a3%e6%b1%ba%e5%9f%b7%e8%a1%8c-ufw-%e5%87%ba%e7%8f%be%e7%9a%84%e8%ad%a6%e5%91%8a%e8%a8%8a%e6%81%af","status":"publish","type":"post","link":"https:\/\/2blog.ilc.edu.tw\/25793\/2014\/10\/19\/%e8%a7%a3%e6%b1%ba%e5%9f%b7%e8%a1%8c-ufw-%e5%87%ba%e7%8f%be%e7%9a%84%e8%ad%a6%e5%91%8a%e8%a8%8a%e6%81%af\/","title":{"rendered":"\u89e3\u6c7a\u57f7\u884c ufw \u51fa\u73fe\u7684\u8b66\u544a\u8a0a\u606f"},"content":{"rendered":"<p>\u81ea\u5df1\u5728\u8a2d\u5b9a Linux\u00a0\u9632\u706b\u7246\u898f\u5247\u6642\uff0c\u90fd\u662f\u7fd2\u6163\u4f7f\u7528 iptables\u00a0\u6307\u4ee4\uff0c\u628a\u898f\u5247\u5beb\u5728 Script\u00a0\u6a94\uff0c\u8a2d\u5b9a\u6210\u958b\u6a5f\u6642\u57f7\u884c\uff0c\u6bd4\u8f03\u4e0d\u7fd2\u6163\u4f7f\u7528\u7b2c\u4e09\u65b9\u7684\u5957\u4ef6\u4f86\u5efa\u7acb\uff0c\u56e0\u70ba\u5f8c\u7e8c\u8981\u4fee\u6539\u6642\u6703\u6bd4\u8f03\u9ebb\u7169\u3002 <br \/>\u4e0d\u904e\u5728 Cubie Truck\u00a0\u7684 Ubuntu Server\u00a0\u4f3c\u4e4e\u9810\u8a2d\u5c31\u6709\u5b89\u88dd ufw(Uncomplicated Firewall)\uff0c\u5229\u7528 ufw\u00a0\u4f86\u5efa\u7acb\u9632\u706b\u7246\u898f\u5247\u3002<br \/>\u4f46\u5728\u57f7\u884c ufw\u00a0\u6642\u6703\u51fa\u73fe\u4e00\u4e9b\u8b66\u544a\u8a0a\u606f<br \/># <span style=\"color: #ff0000;\">ufw status verbose<\/span><br \/><span style=\"color: #0000ff;\">WARN: \/lib is group writable!<\/span><br \/><span style=\"color: #0000ff;\">WARN: \/etc is group writable!<\/span><br \/><span style=\"color: #0000ff;\">WARN: \/etc\/default is group writable!<\/span><br \/><span style=\"color: #0000ff;\">WARN: \/usr is group writable!<\/span><br \/><span style=\"color: #0000ff;\">Status: inactive<\/span><\/p>\n<p>\u770b\u8d77\u4f86\u4f3c\u4e4e\u662f\u8b66\u544a\u9019\u4e9b\u76ee\u9304\u7684\u6b0a\u9650\u662f\u7fa4\u7d44\u53ef\u4ee5\u5beb\u5165\u7684[@more@]\u6aa2\u67e5\u4e00\u4e9b\u9019\u4e9b\u76ee\u9304\u7684\u6b0a\u9650\uff0c\u9810\u8a2d\u6b0a\u9650\u662f <span style=\"color: #ff0000;\">775<\/span><br \/>#<span style=\"color: #ff0000;\"> ls -ld \/lib \/etc \/etc\/default \/usr<\/span><br \/><span style=\"color: #0000ff;\">drwxrwxr-x 96 root root 4096 Oct 18 10:53 \/etc<\/span><br \/><span style=\"color: #0000ff;\">drwxrwxr-x\u00a0 2 root root 4096 Oct 16 23:18 \/etc\/default<\/span><br \/><span style=\"color: #0000ff;\">drwxrwxr-x 21 root root 4096 Oct 16 23:18 \/lib<\/span><br \/><span style=\"color: #0000ff;\">drwxrwxr-x 10 root root 4096 Sep\u00a0 6 17:54 \/usr<\/span><\/p>\n<p>\u628a\u9019\u4e9b\u76ee\u9304\u7684\u6b0a\u9650\u6539\u6210 <span style=\"color: #ff0000;\">751<\/span><br \/># <span style=\"color: #ff0000;\">chmod 751 \/lib \/etc \/etc\/default \/usr<\/span><br \/># <span style=\"color: #ff0000;\">ls -ld \/lib \/etc \/etc\/default \/usr<\/span><br \/><span style=\"color: #0000ff;\">drwxr-x&#8211;x 96 root root 4096 Oct 18 10:53 \/etc<\/span><br \/><span style=\"color: #0000ff;\">drwxr-x&#8211;x\u00a0 2 root root 4096 Oct 16 23:18 \/etc\/default<\/span><br \/><span style=\"color: #0000ff;\">drwxr-x&#8211;x 21 root root 4096 Oct 16 23:18 \/lib<\/span><br \/><span style=\"color: #0000ff;\">drwxr-x&#8211;x 10 root root 4096 Sep\u00a0 6 17:54 \/usr<\/span><\/p>\n<p>\u518d\u6b21\u57f7\u884c ufw\u00a0\u6642\uff0c\u5c31\u4e0d\u6703\u51fa\u73fe\u8b66\u544a\u8a0a\u606f\u4e86\uff01<br \/># <span style=\"color: #ff0000;\">ufw status verbose<\/span><br \/><span style=\"color: #0000ff;\">Status: inactive<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u81ea\u5df1\u5728\u8a2d\u5b9a Linux\u00a0\u9632\u706b\u7246\u898f\u5247\u6642\uff0c\u90fd\u662f\u7fd2\u6163\u4f7f\u7528 iptables\u00a0\u6307\u4ee4\uff0c\u628a\u898f\u5247\u5beb\u5728 Script\u00a0\u6a94\uff0c\u8a2d\u5b9a &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/2blog.ilc.edu.tw\/25793\/2014\/10\/19\/%e8%a7%a3%e6%b1%ba%e5%9f%b7%e8%a1%8c-ufw-%e5%87%ba%e7%8f%be%e7%9a%84%e8%ad%a6%e5%91%8a%e8%a8%8a%e6%81%af\/\" class=\"more-link\">\u95b1\u8b80\u5168\u6587<span class=\"screen-reader-text\">\u3008\u89e3\u6c7a\u57f7\u884c ufw \u51fa\u73fe\u7684\u8b66\u544a\u8a0a\u606f\u3009<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[170,138,119],"tags":[],"class_list":["post-18535","post","type-post","status-publish","format-standard","hentry","category-c-85297","category-c-78483","category-c-78464"],"meta_key":{"_pingme":["1"],"_encloseme":["1"],"lt_post_id":["524777"]},"_links":{"self":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18535"}],"collection":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/comments?post=18535"}],"version-history":[{"count":0,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18535\/revisions"}],"wp:attachment":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/media?parent=18535"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/categories?post=18535"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/tags?post=18535"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}