VM most serious vulnerabilities Venom cloud services is threatened!

Exchange of Experience News

This afternoon，I'm knocking Code，Then on the west coast, a vps sent e-mail，Said server to restart Update，And I happen to have a vps is there in his。In addition to hardware and general maintenance accident，Cloud services basically online - after all，“High availability"It is the main subject of cloud services。

but，This time is different，Just today，The new virtual machine loopholes available，Exploit this vulnerability，You can make every minuteBreakthrough virtual machine restrictionsAnd get to the other servers in the same server access! Then use the information to other servers，And then we can continue in-depth infiltration[……]

Click link to continue reading...

Open nat masquerading and port forwarding on ufw

Linux

Possible until now，You have been very skilled how to open nat and port forwarding on Linux - after all, this operation may also require a server at the time of deployment。But its operation is too cumbersome，Especially when we use edit iptables ufw after that，But you can not directly edit the iptables，This time in the end what to do it?

wantUse ufw to open nat masquerading and port forwarding，You can refer to this articleUnder Ubuntu more simple firewall Uncompli[……]

Click link to continue reading...

Ali cloud Ubuntu update image source

Linux

Update：for some reason，Ali cloud is no longer recommended updates the source，Give youThis page，Click to go can help you generate USTC mirror automatically depending on the version update source。

In order to facilitate their own domestic vps server configuration updates，Usually all you need to change and update the source dns，Do not try to patch ............ otherwise life short，NetEase previously used source but recently always cramp，So nowRecommended Ali cloud。

Another，You can enter "in a terminal serverlsb_release -a"Command or see"/etc/issue"file[……]

Click link to continue reading...

Under Ubuntu more simple firewall Uncomplicated Firewall

Linux

we all know，Among Linux system has a very fast hardware firewall is called iptables，It can do far exceeds the scope of the firewall, but ......，usually，We only used it as a firewall to use。

but，If you just want a port policy，That does not seem to need to face iptables That lengthy configuration commands。Now，I'll introduce you to the other, a more simple firewall：

Uncomplicated Firewall

A very clear look at the name "uncomplicated fire[……]

Click link to continue reading...

Goodbye hooligans，Goodbye dnspod

Exchange of Experience

As the once booming domestic DNS resolution service providers，dnspod In the godaddy NS has just been certified during that time to resolve domestic high speed services of good quality and recommended by the majority of Web hosting providers，Our group of mindless small bloggers will have to takeThird-party NS resolution。

Actually, I was dnspod It's nice, too，Resolved faster，Creates a new domain name，Starting from a few minutes to take effect now only takes a few seconds to，Really make a lot of heart--in addition to being attacked，Ok，Good now。

————[……]

Click link to continue reading...

SNI Proxy accelerate the deployment of anti-Generation Web access without certificate

Linux The internet

We all know that you can use nginx trans-generation capabilities to achieve cross-border access network，but，This approach has a lot of constraints，For example, it is difficult to achieve login authentication，For example, the need for a separate forwarding module compiler to do，For example, you need to have a valid signature ssl certificates, etc.。

this time，We introduce an additional artifact SNI Proxy，With dnsmasq with sniproxy certificate can be achieved without any anti-Site Generation。It uses technology to SNI TLS connection via TCP proxy to the destination site，This avoids[……]

Click link to continue reading...

Compile and install anti-pollution dnscrypt-wrapper build DNS server

Linux

All to known，I want to get them abroad towards LAN DNS information，Will certainly suffer keywordPollution。to this end，Some people thinkUse exception port，For example, instead of using 5353 as the current DNS dedicated port 53-- Girl Friend Wall Only 53 pollution；It was also thought of using a TCP connection request，Because DNS response mechanism（参考 DHCP）I decided itResponse to accept a return of，Behind will be discarded，The use of TCP is forced to accept the selected data packets；Some people even thought of those made pollution[……]

Click link to continue reading...

Modify .htaccess ban Contents Index privacy

Wordpress

Usually the default Apache will allow directory indexing，This is very vulnerable to malicious use of people with ulterior motives。Many people choose to place the index.html file in the directory for this purpose，Because then it becomes open an empty file can not be indexed directory，But this, after all, a temporary solution - you can not give all of the directories to index a right?

If you can，Or you should modify the .htaccess file to achieve this objective，It can achieve very powerful，For example, redirection，For example, anti-hotlinking，For example, pseudo-static[……]

Click link to continue reading...

Digital Ocean Singapore room rate in San Francisco SGP1

Exchange of Experience The internet

If you ask most often play VPS owners recommended that service providers? I think in addition to the famous old Linode，The rest of the rookies Digital Ocean 。The rise in recent years, just vps service providers rely on the support of the United States is said to several consortia，Create a global SSD solid disc、Demand charges vps cloud services platform。

Inexpensive

The main，Still say DO cheaper，Speak the truth，Due to the competitive effects of DO，resulting in Linode Optimization of the line can be considered to reduce the price[……]

Click link to continue reading...