Welcome toVigges Developer Community-Open, Learning,Share
Welcome To Ask or Share your Answers For Others

Categories

0 votes
3.8k views
in Technique[技术] by (71.8m points)

redis防矿机安全问题

最近一直在研究这个问题

被矿机搞了,我直接重装了系统,然后
把redis中的
bind项屏蔽
端品改为12345
密码整了个又长又复杂的
protected-mode改为了no

iptables加入以下配置(redis机器是192.168.0.1)
一个内网机ip192.168.0.2就想实现这两个机器可访问,其它不行
`-N REDIS
-A REDIS -s 127.0.0.1 -j ACCEPT
-A REDIS -s 192.168.0.1 -j ACCEPT
-A REDIS -s 192.168.0.2 -j ACCEPT
-A REDIS -j LOG --log-prefix "unauth-redis-access"
-A REDIS -j REJECT --reject-with icmp-port-unreachable
-I INPUT -p tcp --dport 12345 -j REDIS`

请老大指点,这样的设置安全性能达到啥程度,还有什么方法能更安全,谢谢!


与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome To Ask or Share your Answers For Others

1 Answer

0 votes
by (71.8m points)
等待大神解答

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome to Vigges Developer Community for programmer and developer-Open, Learning and Share
...