작은숲:위키노트/CentOS 설정

CentOS를 새로 설치하고 나서 기본 설정.

시스템 및 데몬 설정

호스트 네임 설정

/etc/sysconfig/network

...
HOSTNAME=green.example.com
...

/etc/hosts

218.0.0.15      black black.example.com
218.0.0.16      green green.example.com
218.0.0.17      red   red.example.com
218.0.0.18      white white.example.com

시작 데몬 설정

# ntsysv

sshd 설정

/etc/ssh/sshd_config

...
PermitRootLogin no
...

# service sshd restart

[[위키노트:Iptables|Iptables] 설정

/etc/sysconfig/iptables

...
-A RH-Firewall-1-INPUT -m state --state INVALID -j DROP
...
# sshd
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp -s 218.0.0.15 --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp -s 218.0.0.16 --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp -s 218.0.0.17 --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp -s 218.0.0.18 --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j DROP
# domain, rndc
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 53 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 53 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 953 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 953 -j ACCEPT
# mysqld
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -j ACCEPT
# block heavy requests
-A RH-Firewall-1-INPUT -m recent --update --seconds 600 --name TOO_MANY_REQUESTS -j DROP
-A RH-Firewall-1-INPUT -m hashlimit --hashlimit 10/s --hashlimit-burst 24 --hashlimit-mode srcip --hashlimit-name HTTP_REQ_LIMIT -j ACCEPT
-A RH-Firewall-1-INPUT -m recent --set --name TOO_MANY_REQUESTS -j DROP
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
...

# service iptables restart

NTP 설치 및 설정

# yum install ntp

/etc/ntp.conf

...
server kr.pool.ntp.org
server ntp.postech.ac.kr
server ntp.xbsd.kr

# ntpdate kr.pool.ntp.org
# service ntpd start
# chkconfig ntpd on
# ntpq -p

MySQL 설치 및 설정

# yum install mysql mysql-server mysql-connector-odbc mysql-devel
# mv /etc/my.cnf /etc/my.cnf-dist
# cp /usr/share/mysql/my-huge.cnf /etc/my.cnf
# vi /etc/my.cnf

[client]
...
default-character-set = utf8
[mysqld]
...
thread_concurrency = 4
init_connect = SET collation_connection = utf8_general_ci
init_connect = SET NAMES utf8
default-character-set = utf8
character-set-server = utf8
collation-server = utf8_general_ci
[mysqldump]
...
default-character-set = utf8
[mysql]
...
default-character-set = utf8
...

# service mysqld start
# mysqladmin -u root password 'password'
# service mysqld restart
# mysql -u root -p mysql

CREATE DATABASE something;
GRANT ALL PRIVILEGES ON something.* TO 'someone'@'%' IDENTIFIED BY 'anything' WITH GRANT OPTION;
FLUSH PRIVILEGES;

같이 보기

• Postfix
• Yum 저장소 설정
• 위키노트:Quota 설정
• iptables 설정
• [[위키노트:Bind 설정|Bind 설정]