<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>2015/07/13 on Yano&#39;s digital garage</title>
    <link>https://www.bravotouring.com/~yano/archives/2015/07/13/</link>
    <description>Recent content in 2015/07/13 on Yano&#39;s digital garage</description>
    <generator>Hugo</generator>
    <language>en-us</language>
    <lastBuildDate>Mon, 13 Jul 2015 23:07:11 +0900</lastBuildDate>
    <atom:link href="https://www.bravotouring.com/~yano/archives/2015/07/13/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Apacheアクセス制限</title>
      <link>https://www.bravotouring.com/~yano/diary/it/20150713_apache2.htm</link>
      <pubDate>Mon, 13 Jul 2015 23:07:11 +0900</pubDate>
      <guid>https://www.bravotouring.com/~yano/diary/it/20150713_apache2.htm</guid>
      <description>&lt;p&gt;&lt;a href=&#34;http://internet.watch.impress.co.jp/docs/yajiuma/20150713_711323.html&#34;&gt;サイトを丸ごとコピーして独自広告を追加するパクリサイト出現&lt;/a&gt;という事だ。幸か不幸かまだコピられていないようなので、まずは&lt;span class=&#34;Path&#34;&gt;sites-enabled/*.conf&lt;/span&gt;でアクセス制限をかけようかと思ったのだが、VirtualHost毎に制御する必要が無いどころかTCPの接続すら受付たくないので、&lt;a href=&#34;https://wiki.ubuntu.com/UncomplicatedFirewall&#34;&gt;ufw&lt;/a&gt;でサクッと門前払いしてしまう事に。&#xA;&lt;blockquote class=&#34;Log&#34;&gt;&#xA;yano@vps:~$ sudo ufw insert 1 reject from 91.208.99.0/24&lt;br/&gt;Rule inserted&lt;br/&gt;&#xA;yano@vps:~$ sudo ufw status&lt;br/&gt;&#xA;Status: active&lt;br/&gt;&#xA;&lt;br/&gt;&#xA;To                         Action      From&lt;br/&gt;&#xA;--                         ------      ----&lt;br/&gt;&#xA;Anywhere                   REJECT      91.208.99.0/24&lt;br/&gt;&#xA;Apache Full                ALLOW       Anywhere&lt;br/&gt;&#xA;Dovecot Secure POP3        ALLOW       Anywhere&lt;br/&gt;&#xA;Dovecot POP3               ALLOW       Anywhere&lt;br/&gt;&#xA;Postfix                    ALLOW       Anywhere&lt;br/&gt;&#xA;Postfix SMTPS              ALLOW       Anywhere&lt;br/&gt;&#xA;Postfix Submission         ALLOW       Anywhere&lt;br/&gt;&#xA;iperf                      ALLOW       Anywhere&lt;br/&gt;&#xA;123                        ALLOW       Anywhere&lt;br/&gt;&#xA;DNS                        ALLOW       Anywhere&lt;br/&gt;&#xA;OpenSSH                    ALLOW       Anywhere&lt;br/&gt;&#xA;Apache Full (v6)           ALLOW       Anywhere (v6)&lt;br/&gt;&#xA;Dovecot Secure POP3 (v6)   ALLOW       Anywhere (v6)&lt;br/&gt;&#xA;Dovecot POP3 (v6)          ALLOW       Anywhere (v6)&lt;br/&gt;&#xA;Postfix (v6)               ALLOW       Anywhere (v6)&lt;br/&gt;&#xA;Postfix SMTPS (v6)         ALLOW       Anywhere (v6)&lt;br/&gt;&#xA;Postfix Submission (v6)    ALLOW       Anywhere (v6)&lt;br/&gt;&#xA;iperf (v6)                 ALLOW       Anywhere (v6)&lt;br/&gt;&#xA;123 (v6)                   ALLOW       Anywhere (v6)&lt;br/&gt;&#xA;DNS (v6)                   ALLOW       Anywhere (v6)&lt;br/&gt;&#xA;OpenSSH (v6)               ALLOW       Anywhere (v6)&lt;br/&gt;&#xA;&lt;br/&gt;&#xA;yano@vps:~$ sudo ufw reload&lt;br/&gt;&#xA;Firewall reloaded&lt;br/&gt;&#xA;yano@vps:~$ &lt;/blockquote&gt;&#xA;&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
