|
|
198.
|
|
|
Logs
|
|
|
|
|
日志
|
|
Translated and reviewed by
姚渺波
|
|
|
|
Located in
serverguide/C/security.xml:787(title)
|
|
|
199.
|
|
|
Firewall logs are essential for recognizing attacks, troubleshooting your firewall rules, and noticing unusual activity on your network. You must include logging rules in your firewall for them to be generated, though, and logging rules must come before any applicable terminating rule (a rule with a target that decides the fate of the packet, such as ACCEPT, DROP, or REJECT). For example: <screen>sudo iptables -A INPUT -m state --state NEW -p tcp --dport 80 -j LOG --log-prefix "NEW_HTTP_CONN: "</screen> A request on port 80 from the local machine, then, would generate a log in dmesg that looks like this:
|
|
|
|
|
防火墙日志主要是为了确认攻击、找出并解决您防火墙规则的问题以及注意您网络中不正常的活动。您必须在您防火墙中包含这些日志规则以便生成相应日志，虽然，日志规则必须优先于任何可应用的最终规则 (那些决定其目的包命运的规则，如ACCEPT、DROP 或 REJECT) 。<screen>sudo iptables -A INPUT -m state --state NEW -p tcp --dport 80 -j LOG --log-prefix "NEW_HTTP_CONN: "</screen> 一个从本机发起的对 80 端口的请求将会在 dmesg 中生成一条日志，如下所示：
|
|
Translated and reviewed by
姚渺波
|
|
|
|
Located in
C/network-applications.xml:462(para)
|
|
|
200.
|
|
|
[4304885.870000] NEW_HTTP_CONN: IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=58288 DF PROTO=TCP SPT=53981 DPT=80 WINDOW=32767 RES=0x00 SYN URGP=0
|
|
|
|
|
[4304885.870000] NEW_HTTP_CONN: IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=58288 DF PROTO=TCP SPT=53981 DPT=80 WINDOW=32767 RES=0x00 SYN URGP=0
|
|
Translated and reviewed by
姚渺波
|
|
|
|
Located in
serverguide/C/security.xml:815(programlisting)
|
|
|
201.
|
|
|
The above log will also appear in <filename>/var/log/messages</filename>, <filename>/var/log/syslog</filename>, and <filename>/var/log/kern.log</filename>. This behavior can be modified by editing <filename>/etc/syslog.conf</filename> appropriately or by installing and configuring <application>ulogd</application> and using the ULOG target instead of LOG. The <application>ulogd</application> daemon is a userspace server that listens for logging instructions from the kernel specifically for firewalls, and can log to any file you like, or even to a <application>PostgreSQL</application> or <application>MySQL</application> database. Making sense of your firewall logs can be simplified by using a log analyzing tool such as <application>fwanalog</application>, <application> fwlogwatch</application>, or <application>lire</application>.
|
|
|
|
|
上面的日志也会出现在<filename>/var/log/messages</filename>、<filename>/var/log/syslog</filename> 和 <filename>/var/log/kern.log</filename> 中。这一过程可以通过适当编辑 <filename>/etc/syslog.conf</filename> 或安装配置 <application>ulogd</application> 并用 ULOG 代替 LOG 来进行改变。<application>ulogd</application> 守护程序是一种用户态服务器可以监听来自内核的防火墙日志指令，并且能够将其写到任何您希望的文件中，甚至是 <application>PostgreSQL</application> 或 <application>MySQL</application> 数据库。使用诸如 <application>fwanalog</application>、<application>fwlogwatch</application> 或 <application>lire</application> 日志分析工具将会很轻松地弄懂您的防火墙日志。
|
|
Translated and reviewed by
姚渺波
|
|
|
|
Located in
serverguide/C/security.xml:817(para)
|
|
|
202.
|
|
|
OpenSSH Server
|
|
|
|
|
OpenSSH 服务器
|
|
Translated and reviewed by
Rkyo
|
|
|
|
Located in
serverguide/C/virtualization.xml:834(para) serverguide/C/remote-administration.xml:20(title)
|
|
|
203.
|
|
|
This section of the <phrase>Ubuntu</phrase> Server Guide introduces a powerful collection of tools for the remote control of networked computers and transfer of data between networked computers, called <emphasis>OpenSSH</emphasis>. You will also learn about some of the configuration settings possible with the OpenSSH server application and how to change them on your Ubuntu system.
|
|
|
|
|
<phrase>Ubuntu</phrase> 服务器指南的这部分内容介绍一个强大的远程控制网络计算机和在它们之间传输数据的工具集 <emphasis>OpenSSH</emphasis>。您也可以学到一些 OpenSSH 服务器应用程序的配置以及如何在您 Ubuntu 系统修改它们。
|
|
Translated and reviewed by
姚渺波
|
|
|
|
Located in
C/network-applications.xml:495(para)
|
|
|
204.
|
|
|
OpenSSH is a freely available version of the Secure Shell (SSH) protocol family of tools for remotely controlling a computer or transferring files between computers. Traditional tools used to accomplish these functions, such as <application>telnet</application> or <application>rcp</application>, are insecure and transmit the user's password in cleartext when used. OpenSSH provides a server daemon and client tools to facilitate secure, encrypted remote control and file transfer operations, effectively replacing the legacy tools.
|
|
|
|
|
OpenSSH 是Secure Shell (SSH) 协议工具集中的一个自由可用的版本，用以远程控制一台计算机或在计算机之间传输文件。完成这些功能的传统工具，如 <application>telnet</application> 或 <application>rcp</application> 等，是不安全的，它们在使用时用明文来传输用户的密码。OpenSSH 提供一个服务器守护程序和客户端工具来保障安全、加密的远程控制和文件传输操作，以有效地取代传统的工具。
|
|
Translated and reviewed by
姚渺波
|
|
|
|
Located in
serverguide/C/remote-administration.xml:30(para)
|
|
|
205.
|
|
|
The OpenSSH server component, <application>sshd</application>, listens continuously for client connections from any of the client tools. When a connection request occurs, <application>sshd</application> sets up the correct connection depending on the type of client tool connecting. For example, if the remote computer is connecting with the <application>ssh</application> client application, the OpenSSH server sets up a remote control session after authentication. If a remote user connects to an OpenSSH server with <application>scp</application>, the OpenSSH server daemon initiates a secure copy of files between the server and client after authentication. OpenSSH can use many authentication methods, including plain password, public key, and <application>Kerberos</application> tickets.
|
|
|
|
|
OpenSSH 服务器组组件 <application>sshd</application> 持续监听来自任何客户端工具的连接请求。当一个连接请求发生时，<application>sshd</application> 根据客户端连接的类型来设置当前连接。例如，如果远程计算机是通过 <application>ssh</application> 客户端应用程序来连接的话，OpenSSH 服务器将在认证之后设置一个远程控制会话。如果一个远程用户通过 <application>scp</application> 来连接 OpenSSH 服务器，OpenSSH 服务器将在认证之后开始服务器和客户机之间的安全文件拷贝。OpenSSH 可以支持多种认证模式，包括纯密码、公钥以及<application>Kerberos</application> 票据。
|
|
Translated and reviewed by
姚渺波
|
|
|
|
Located in
serverguide/C/remote-administration.xml:39(para)
|
|
|
206.
|
|
|
Installation
|
|
|
|
|
安装
|
|
Translated and reviewed by
姚渺波
|
|
|
|
Located in
serverguide/C/windows-networking.xml:83(title) serverguide/C/windows-networking.xml:288(title) serverguide/C/windows-networking.xml:1317(title) serverguide/C/web-servers.xml:41(title) serverguide/C/web-servers.xml:675(title) serverguide/C/web-servers.xml:816(title) serverguide/C/web-servers.xml:940(title) serverguide/C/vpn.xml:33(title) serverguide/C/virtualization.xml:62(title) serverguide/C/virtualization.xml:2014(title) serverguide/C/vcs.xml:28(title) serverguide/C/vcs.xml:86(title) serverguide/C/vcs.xml:405(title) serverguide/C/remote-administration.xml:52(title) serverguide/C/remote-administration.xml:233(title) serverguide/C/network-config.xml:937(title) serverguide/C/network-auth.xml:52(title) serverguide/C/network-auth.xml:1590(title) serverguide/C/network-auth.xml:2102(title) serverguide/C/network-auth.xml:2493(title) serverguide/C/monitoring.xml:42(title) serverguide/C/monitoring.xml:428(title) serverguide/C/mail.xml:40(title) serverguide/C/mail.xml:496(title) serverguide/C/mail.xml:674(title) serverguide/C/mail.xml:823(title) serverguide/C/mail.xml:1315(title) serverguide/C/lamp-applications.xml:108(title) serverguide/C/lamp-applications.xml:287(title) serverguide/C/lamp-applications.xml:423(title) serverguide/C/installation.xml:13(title) serverguide/C/installation.xml:957(title) serverguide/C/file-server.xml:347(title) serverguide/C/file-server.xml:462(title) serverguide/C/dns.xml:23(title) serverguide/C/databases.xml:40(title) serverguide/C/databases.xml:164(title) serverguide/C/chat.xml:37(title) serverguide/C/chat.xml:141(title) serverguide/C/backups.xml:593(title)
|
|
|
207.
|
|
|
Installation of the OpenSSH client and server applications is simple. To install the OpenSSH client applications on your Ubuntu system, use this command at a terminal prompt:
|
|
|
|
|
OpenSSH 客户端及服务器应用程序的安装是简单的。要在您 Ubuntu 系统中安装 OpenSSH 客户端应用程序，可以在终端提示符后使用以下命令：
|
|
Translated and reviewed by
姚渺波
|
|
|
|
Located in
serverguide/C/remote-administration.xml:53(para)
|
