视频1 视频21 视频41 视频61 视频文章1 视频文章21 视频文章41 视频文章61 推荐1 推荐3 推荐5 推荐7 推荐9 推荐11 推荐13 推荐15 推荐17 推荐19 推荐21 推荐23 推荐25 推荐27 推荐29 推荐31 推荐33 推荐35 推荐37 推荐39 推荐41 推荐43 推荐45 推荐47 推荐49 关键词1 关键词101 关键词201 关键词301 关键词401 关键词501 关键词601 关键词701 关键词801 关键词901 关键词1001 关键词1101 关键词1201 关键词1301 关键词1401 关键词1501 关键词1601 关键词1701 关键词1801 关键词1901 视频扩展1 视频扩展6 视频扩展11 视频扩展16 文章1 文章201 文章401 文章601 文章801 文章1001 资讯1 资讯501 资讯1001 资讯1501 标签1 标签501 标签1001 关键词1 关键词501 关键词1001 关键词1501 专题2001
unix安全加固
2025-09-29 02:53:38 责编:小OO
文档
1,拒绝FTP匿名登录:

linux系统下: vi /etc/vsftpd/vsftpd.conf

anonymous_enable=NO

保存退出重启vsftp服务:service vsftpd restart

2、HP-UNIX修改SNMP团体名:

一、修改SNMP配置文件/etc/SnmpAgent.d/snmpd.conf

常用配置及其解释如下:

get-community-name: public #读团体名,也就是读的密码

set-community-name: # enter community name,写团体名

contact: # enter contact person for agent,联系方式,可选参数。

location: # enter location of agent,位置,可选参数。

max-trap-dest: # enter max no. of trap-dest entries to be maintained.最大接受数目。

trap-dest: # enter trap destination。接受的地址

可以做个软链接:ln –s /etc/SnmpAgent.d/snmpd.conf /etc/snmpd.conf

二、配置snmp启动项

/etc/rc.config.d/Snmp*

SnmpHpunix

SnmpIpv6

SnmpMaster

SnmpMib2

SnmpNaa

SnmpTrpDst

以/etc/rc.config.d/SnmpMaster配置信息如下:

#

# FILENAME: /etc/rc.config.d/SnmpMaster

#

# FILESET: /Networking/SnmpAgent/MASTER

#

# DESCRIPTION: Configuration file corresponding to /sbin/init.d/SnmpMaster.

# Users may make changes to this file to control whether

# the snmp network management agent (snmpdm) is started by

# /sbin/rc on power up. The default is for the snmp agent

# to be started.

#

# To control whether the snmpd agent is started uncomment one of the

# lines below:

#

# SNMP_MASTER_START=0 # Don't start the agent

# SNMP_MASTER_START=1 # Start the agent. This is the default value.

# SNMP_MASTER_START="" # Actually, any value other than 0 will cause the

# # the agent to be started. Including unsetting

# # SNMP_MASTER_START.

#

# This environment variable SNMP_MASTER_OPTIONS may be set to influence the

# way the SNMP Master Agent is started. See snmpd(1M) or snmpdm(1M) for

# possible values. Please note that only a very small number of MIB objects

# are implemented directly by the Master Agent. Other subAgents (like MIB2

# and HpUnix) must be started to obtain the whole suite of MIB objects.

#

# This file corresponded to /etc/rc.config.d/agent_run on HP-UX 10.00. The

# Software Distributor installation scripts for subsequent releases converts

# the contents of the users old file to match the new environment variable

# names.

#

#

# SEE ALSO:

# /etc/rc.config.d/SnmpMib2 // Startup config for MIB2 subAgent

# /etc/rc.config.d/SnmpHpunix // Startup config for HpUnix subAgent

# libSaMib2.sl(1M) // MIB2 subAgent

# libSaHpunix.sl(1M) // HpUnix subAgent

# snmpd(1M) // Manual startup script

# snmpd.conf(4) // SNMP configuration

#

#

SNMP_MASTER_START=1 # Start the master SNMP agent.

export SNMP_MASTER_START

如需关闭snmp,则修改SNMP_MASTER_START=0 即可,重

启生效,即下次重启机器时,就不会自动启动snmp服务了,为了彻底关闭snmp服务,同时还需将其它文件做类似相关修改。

三、启动SNMP服务。

# /usr/sbin/snmpd信息如下:

Start SNMP Master Network Management daemon

SNMP Research SNMP Agent Resident Module Version14.0.1.0

Copyright 19, 1990, 1991, 1992, 1993, 1994, 1995, 1996 SNMP Research, Inc.

Start SNMP HP-UNIX Network Management subAgent

Start SNMP MIB-2 Network Management subAgent

Start SNMP Trap Dest Network Management subAgent

Start SNMP FDDI Network Management subAgent

或者这样启动,与/usr/sbin/snmpd效果一样

Snmp相关启动脚本

/sbin/init.d/snmp*

SnmpFddi4

SnmpHpunix

SnmpIpv6

SnmpMaster

SnmpMib2

SnmpNaa

SnmpTrpDst

以SnmpMaster为例:

# ./ SnmpMaster start

# ./SnmpMaster stop

snmpdm stopped下载本文

显示全文
专题