<![CDATA[天空极速]]> http://www.siutung.org/index.php zh-cn http://www.siutung.org/post/422/ <![CDATA[WinMySQLadmin 1.4 以明文形式存放Mysql密码漏洞]]> siutung <> Wed, 10 Mar 2010 17:17:06 +0000 http://www.siutung.org/post/422/ 非常老的漏洞了，在此再贴一遍：

漏洞涉及程序： WinMySQLadmin <=1.4

详细：
WinMySQLadmin 是一个 Mysql 管理软件，发现它以明文形式存放 Mysql 密码于 c:\windows\my.ini 文件中。

---<my.ini内容开始>---
#This File was made using the WinMySQLAdmin 1.4 Tool
#2006-12-26 10:10:50

#Uncomment or Add only the keys that you know how works.
#Read the MySQL Manual for instructions

[mysqld]
basedir=C:/mysql
#bind-address=219.139.240.205
datadir=C:/mysql/data
#language=C:/mysql/share/your language directory
#slow query log#=
#tmpdir#=
#port=3306
#set-variable=key_buffer=16M
[WinMySQLadmin]
Server=C:/mysql/bin/mysqld-nt.exe
user=root
password=mysql
QueryInterval=10
---<my.ini内容结束>---

利用此漏洞，如果远程攻击者能遍历受影响系统，将可能取得数据库管理员权限。

Ps：功能和谐而又强大的OA系统（XXX每天是开着车车来上班的，嘘…………！据说该OA是出自他的手中），居然是这样的。
此时此刻，我真有种想去撞墙的冲动...

本想把他的首页给换了的，想一想还是算了，多一事不如少一事。


Tags - , , , ]]> http://www.siutung.org/post/421/ <![CDATA[pkg_version: corrupted record (pkgdep line without  argument), ignoring]]> siutung <> Wed, 03 Mar 2010 03:13:50 +0000 http://www.siutung.org/post/421/ #portmaster --check-depends
#portmaster --check-port-dbdir
#pkgdb -Fu








OK！






Tags - , , , , , , , ]]> http://www.siutung.org/post/419/ <![CDATA[Freebsd7.0+BIND+VIEW实现智能DNS]]> siutung <> Tue, 23 Feb 2010 08:13:40 +0000 http://www.siutung.org/post/419/
Freebsd7.0+BIND+VIEW实现智能DNS
环境
系统：FreeBSD7.0
BIND：bind-9.4.2

一、下载bind源代码

QUOTE:
cd /usr/ports/dns/bind94
make fetch
二、解压bind

QUOTE:
cd /usr/ports/distfiles/
tar -zxf bind-9.4.2.tar.gz
三、编译安装

QUOTE:
cd bind-9.4.2
./configure --prefix=/usr/local/named --enable-threads --enable-largefile --enable-ipv6
make && make install
参数说明：

QUOTE:
--prefix=/usr/local/named 指定程序安装目录
--enable-threads 多线程支持
--enable-largefile 启用大文件支持
--enable-ipv6 启用ipv6支持
四、配置

QUOTE:
cd /usr/local/named
sbin/rndc-confgen > etc/rndc.conf
tail -10 etc/rndc.conf | head -9 | sed s/#\ //g > etc/named.conf
cd etc
fetch ftp://ftp.internic.org/domain/named.root
vi localhost.zone

[Copy to clipboard] [ - ]CODE:
$TTL 86400
$ORIGIN localhost.
@ 1D IN SOA @ root (
42 ; serial (d. adams)
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum

1D IN NS @
1D IN A 127.0.0.1
vi named.local

[Copy to clipboard] [ - ]CODE:
$TTL 86400
@ IN SOA localhost. root.localhost. (
1997022700 ; Serial
28800 ; Refresh
14400 ; Retry
3600000 ; Expire
86400 ) ; Minimum
IN NS localhost.
1 IN PTR localhost.
vi named.conf

[Copy to clipboard] [ - ]CODE:
options {
directory "/usr/local/named/etc";
pid-file "/tmp/named.pid";
allow-query { any; };
# statistics-file "/var/log/stats.log";
version "Windows 2003 Dns Server v6.0";
# listen-on port 53 { 192.168.29.128; };
recursion yes;
datasize 50M;
rrset-order { order random; };
};

logging {
channel warning {
file "/var/log/dns_warnings.log" versions 5 size 1024K;
severity warning;
print-category yes;
print-severity yes;
print-time yes;
};
channel security_log {
file "/var/log/dns_security.log" versions 5 size 1024K;
severity info;
print-category yes;
print-severity yes;
print-time yes;
};
channel query_log {
file "/var/log/dns_query.log" versions 10 size 1024K;
severity info;
print-category yes;
print-severity yes;
print-time yes;
};
category default { warning; };
category security { security_log; };
category queries { query_log; };
};

include "china.conf";
view "china" {
match-clients { key china; china; };
allow-transfer { key china;};
allow-query { any; };
zone "." IN {
type hint;
file "named.root";
};
zone "localhost" IN {
type master;
file "localhost.zone";
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.local";
};
include "master/china.def";
};

view "default" {
match-clients { key default; any; };
allow-transfer { key default;};
allow-query { any; };
zone "." IN {
type hint;
file "named.root";
};
zone "localhost" IN {
type master;
file "localhost.zone";
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.local";
};
include "master/default.def";
};
vi china.conf

[Copy to clipboard] [ - ]CODE:
acl "china" {
58.14.0.0/15;
58.16.0.0/16;
58.17.0.0/17;
58.17.128.0/17;
58.18.0.0/16;
58.19.0.0/16;
58.20.0.0/16;
58.21.0.0/16;
58.22.0.0/15;
58.24.0.0/15;
58.30.0.0/15;
58.32.0.0/13;
58.40.0.0/15;
58.42.0.0/16;
58.43.0.0/16;
58.44.0.0/14;
58.48.0.0/13;
58.56.0.0/15;
58.58.0.0/16;
58.59.0.0/17;
58.59.128.0/17;
58.60.0.0/14;
58.66.0.0/15;
58.68.128.0/17;
58.82.0.0/15;
58.87.64.0/18;
58.99.128.0/17;
58.100.0.0/15;
58.116.0.0/14;
58.128.0.0/13;
58.144.0.0/16;
58.154.0.0/15;
58.192.0.0/15;
58.194.0.0/15;
58.196.0.0/15;
58.198.0.0/15;
58.200.0.0/13;
58.208.0.0/12;
58.240.0.0/15;
58.242.0.0/15;
58.244.0.0/15;
58.246.0.0/15;
58.248.0.0/13;
59.32.0.0/13;
59.40.0.0/15;
59.42.0.0/16;
59.43.0.0/16;
59.44.0.0/14;
59.48.0.0/16;
59.49.0.0/17;
59.49.128.0/17;
59.50.0.0/16;
59.51.0.0/17;
59.51.128.0/17;
59.52.0.0/14;
59.56.0.0/14;
59.60.0.0/15;
59.62.0.0/15;
59.64.0.0/14;
59.68.0.0/14;
59.72.0.0/15;
59.74.0.0/15;
59.76.0.0/16;
59.77.0.0/16;
59.78.0.0/15;
59.80.0.0/14;
59.107.0.0/17;
59.107.128.0/17;
59.108.0.0/15;
59.110.0.0/15;
59.151.0.0/17;
59.155.0.0/16;
59.172.0.0/15;
59.174.0.0/15;
59.191.0.0/17;
59.191.240.0/20;
59.192.0.0/10;
60.0.0.0/13;
60.8.0.0/15;
60.10.0.0/16;
60.11.0.0/16;
60.12.0.0/16;
60.13.0.0/18;
60.13.64.0/18;
60.13.128.0/17;
60.14.0.0/15;
60.16.0.0/13;
60.24.0.0/14;
60.28.0.0/15;
60.30.0.0/16;
60.31.0.0/16;
60.55.0.0/16;
60.63.0.0/16;
60.160.0.0/15;
60.162.0.0/15;
60.164.0.0/15;
60.166.0.0/15;
60.168.0.0/13;
60.176.0.0/12;
60.194.0.0/15;
60.200.0.0/14;
60.204.0.0/16;
60.205.0.0/16;
60.206.0.0/15;
60.208.0.0/13;
60.216.0.0/15;
60.218.0.0/15;
60.220.0.0/14;
60.232.0.0/15;
60.235.0.0/16;
60.245.128.0/17;
60.247.0.0/16;
60.252.0.0/16;
60.253.128.0/17;
60.255.0.0/16;
61.4.80.0/20;
61.4.176.0/20;
61.8.160.0/20;
61.28.0.0/20;
61.28.16.0/20;
61.28.32.0/19;
61.28.64.0/18;
61.29.128.0/18;
61.29.192.0/19;
61.29.224.0/20;
61.29.240.0/20;
61.45.128.0/18;
61.47.128.0/18;
61.48.0.0/14;
61.52.0.0/15;
61.54.0.0/16;
61.55.0.0/16;
61.87.192.0/18;
61.128.0.0/15;
61.130.0.0/15;
61.132.0.0/16;
61.133.0.0/17;
61.133.128.0/17;
61.134.0.0/18;
61.134.64.0/19;
61.134.96.0/19;
61.134.128.0/18;
61.134.192.0/18;
61.135.0.0/16;
61.136.0.0/18;
61.136.64.0/18;
61.136.128.0/17;
61.137.0.0/17;
61.137.128.0/17;
61.138.0.0/18;
61.138.64.0/18;
61.138.128.0/18;
61.138.192.0/18;
61.139.0.0/17;
61.139.128.0/18;
61.139.192.0/18;
61.140.0.0/14;
61.144.0.0/14;
61.148.0.0/15;
61.150.0.0/15;
61.152.0.0/16;
61.153.0.0/16;
61.154.0.0/15;
61.156.0.0/16;
61.157.0.0/16;
61.158.0.0/17;
61.158.128.0/17;
61.159.0.0/18;
61.159.64.0/18;
61.159.128.0/17;
61.160.0.0/16;
61.161.0.0/18;
61.161.64.0/18;
61.161.128.0/17;
61.162.0.0/16;
61.163.0.0/16;
61.164.0.0/16;
61.165.0.0/16;
61.166.0.0/16;
61.167.0.0/16;
61.168.0.0/16;
61.169.0.0/16;
61.170.0.0/15;
61.172.0.0/14;
61.176.0.0/16;
61.177.0.0/16;
61.178.0.0/16;
61.179.0.0/16;
61.180.0.0/17;
61.180.128.0/17;
61.181.0.0/16;
61.182.0.0/16;
61.183.0.0/16;
61.184.0.0/14;
61.188.0.0/16;
61.189.0.0/17;
61.189.128.0/17;
61.190.0.0/15;
61.232.0.0/14;
61.236.0.0/15;
61.240.0.0/14;
114.28.0.0/16;
114.54.0.0/15;
114.60.0.0/14;
114.64.0.0/14;
114.68.0.0/16;
114.80.0.0/12;
114.96.0.0/13;
114.104.0.0/14;
114.110.0.0/20;
114.110.64.0/18;
114.111.0.0/19;
114.111.160.0/19;
114.112.0.0/14;
114.116.0.0/15;
114.118.0.0/15;
114.132.0.0/16;
114.135.0.0/16;
114.138.0.0/15;
114.141.128.0/18;
114.196.0.0/15;
114.208.0.0/14;
114.216.0.0/13;
114.224.0.0/12;
114.240.0.0/12;
116.1.0.0/16;
116.2.0.0/15;
116.4.0.0/14;
116.8.0.0/14;
116.13.0.0/16;
116.16.0.0/12;
116.52.0.0/14;
116.56.0.0/15;
116.58.128.0/20;
116.58.208.0/20;
116.60.0.0/14;
116.66.0.0/17;
116.69.0.0/16;
116.70.0.0/17;
116.76.0.0/15;
116.78.0.0/15;
116.89.144.0/20;
116.90.184.0/21;
116.95.0.0/16;
116.112.0.0/14;
116.116.0.0/15;
116.128.0.0/10;
116.192.0.0/16;
116.193.16.0/20;
116.193.32.0/19;
116.194.0.0/15;
116.196.0.0/16;
116.198.0.0/16;
116.199.0.0/17;
116.199.128.0/19;
116.204.0.0/15;
116.207.0.0/16;
116.208.0.0/14;
116.212.160.0/20;
116.213.64.0/18;
116.213.128.0/17;
116.214.32.0/19;
116.214.64.0/20;
116.214.128.0/17;
116.215.0.0/16;
116.216.0.0/14;
116.224.0.0/12;
116.242.0.0/15;
116.244.0.0/15;
116.246.0.0/15;
116.248.0.0/15;
116.252.0.0/15;
116.254.128.0/17;
116.255.128.0/17;
117.8.0.0/13;
117.21.0.0/16;
117.22.0.0/15;
117.24.0.0/13;
117.32.0.0/13;
117.40.0.0/14;
117.44.0.0/15;
117.48.0.0/14;
117.53.48.0/20;
117.53.176.0/20;
117.57.0.0/16;
117.58.0.0/17;
117.59.0.0/16;
117.60.0.0/14;
117.64.0.0/13;
117.72.0.0/15;
117.74.64.0/20;
117.74.128.0/17;
117.75.0.0/16;
117.76.0.0/14;
117.80.0.0/12;
117.100.0.0/15;
117.103.16.0/20;
117.103.128.0/20;
117.106.0.0/15;
117.112.0.0/13;
117.120.64.0/18;
117.120.128.0/17;
117.121.0.0/17;
117.121.128.0/18;
117.121.192.0/21;
117.122.128.0/17;
117.124.0.0/14;
117.128.0.0/10;
118.24.0.0/13;
118.64.0.0/15;
118.66.0.0/16;
118.67.112.0/20;
118.72.0.0/13;
118.80.0.0/15;
118.84.0.0/15;
118.88.32.0/19;
118.88.64.0/18;
118.88.128.0/17;
118.89.0.0/16;
118.91.240.0/20;
118.102.16.0/20;
118.112.0.0/13;
118.120.0.0/14;
118.124.0.0/15;
118.126.0.0/16;
118.132.0.0/14;
118.144.0.0/14;
118.178.0.0/16;
118.180.0.0/14;
118.184.0.0/13;
118.192.0.0/14;
118.196.0.0/14;
118.200.0.0/15;
118.202.0.0/15;
118.204.0.0/14;
118.212.0.0/16;
118.213.0.0/16;
118.224.0.0/14;
118.228.0.0/15;
118.230.0.0/16;
118.239.0.0/16;
118.242.0.0/16;
118.244.0.0/14;
118.248.0.0/13;
119.0.0.0/15;
119.2.0.0/19;
119.2.128.0/17;
119.3.0.0/16;
119.4.0.0/14;
119.8.0.0/15;
119.10.0.0/17;
119.15.136.0/21;
119.16.0.0/16;
119.18.192.0/20;
119.18.208.0/21;
119.18.224.0/20;
119.18.240.0/20;
119.19.0.0/16;
119.20.0.0/14;
119.27.64.0/18;
119.27.160.0/19;
119.27.192.0/18;
119.28.0.0/15;
119.30.48.0/20;
119.31.192.0/19;
119.32.0.0/14;
119.36.0.0/16;
119.37.0.0/17;
119.37.128.0/18;
119.37.192.0/18;
119.38.0.0/17;
119.38.128.0/18;
119.38.192.0/20;
119.38.208.0/20;
119.38.224.0/19;
119.39.0.0/16;
119.40.0.0/18;
119.40.64.0/20;
119.40.128.0/17;
119.41.0.0/16;
119.42.0.0/19;
119.42.136.0/21;
119.42.224.0/19;
119.44.0.0/15;
119.48.0.0/13;
119.57.0.0/16;
119.58.0.0/16;
119.59.128.0/17;
119.60.0.0/16;
119.61.0.0/16;
119.62.0.0/16;
119.63.32.0/19;
119.75.208.0/20;
119.78.0.0/15;
119.80.0.0/16;
119.81.0.0/16;
119.84.0.0/14;
119.88.0.0/14;
119.96.0.0/13;
119.108.0.0/15;
119.112.0.0/13;
119.120.0.0/13;
119.128.0.0/12;
119.144.0.0/14;
119.148.160.0/20;
119.161.128.0/17;
119.162.0.0/15;
119.164.0.0/14;
119.176.0.0/12;
119.232.0.0/15;
119.235.128.0/18;
119.248.0.0/14;
119.253.0.0/16;
119.254.0.0/15;
120.0.0.0/12;
120.24.0.0/14;
120.30.0.0/16;
120.31.0.0/16;
120.32.0.0/13;
120.40.0.0/14;
120.44.0.0/14;
120.48.0.0/15;
120.52.0.0/14;
120.64.0.0/14;
120.68.0.0/14;
120.72.32.0/19;
120.72.128.0/17;
120.76.0.0/14;
120.80.0.0/13;
120.90.0.0/15;
120.92.0.0/16;
120.94.0.0/16;
120.95.0.0/16;
120.128.0.0/14;
120.132.0.0/17;
120.132.128.0/17;
120.133.0.0/16;
120.134.0.0/15;
120.136.128.0/18;
120.137.0.0/17;
120.192.0.0/10;
121.0.16.0/20;
121.4.0.0/15;
121.8.0.0/13;
121.16.0.0/13;
121.24.0.0/14;
121.28.0.0/15;
121.30.0.0/16;
121.31.0.0/16;
121.32.0.0/14;
121.36.0.0/16;
121.37.0.0/16;
121.38.0.0/15;
121.40.0.0/14;
121.46.0.0/18;
121.46.64.0/18;
121.46.128.0/17;
121.47.0.0/16;
121.48.0.0/15;
121.51.0.0/16;
121.52.160.0/19;
121.52.208.0/20;
121.52.224.0/19;
121.55.0.0/18;
121.56.0.0/15;
121.58.0.0/17;
121.58.144.0/20;
121.59.0.0/16;
121.60.0.0/14;
121.68.0.0/14;
121.76.0.0/15;
121.79.128.0/18;
121.89.0.0/16;
121.100.128.0/17;
121.101.208.0/20;
121.192.0.0/16;
121.193.0.0/16;
121.194.0.0/15;
121.196.0.0/14;
121.201.0.0/16;
121.204.0.0/14;
121.224.0.0/12;
121.248.0.0/14;
121.255.0.0/16;
122.0.64.0/18;
122.0.128.0/17;
122.4.0.0/14;
122.8.0.0/13;
122.48.0.0/16;
122.49.0.0/18;
122.51.0.0/16;
122.64.0.0/11;
122.96.0.0/15;
122.102.0.0/20;
122.102.64.0/20;
122.102.80.0/20;
122.112.0.0/14;
122.119.0.0/16;
122.136.0.0/13;
122.144.128.0/17;
122.152.192.0/18;
122.156.0.0/14;
122.192.0.0/14;
122.198.0.0/16;
122.200.64.0/18;
122.204.0.0/14;
122.224.0.0/12;
122.240.0.0/13;
122.248.48.0/20;
123.0.128.0/18;
123.4.0.0/14;
123.8.0.0/13;
123.49.128.0/17;
123.52.0.0/14;
123.56.0.0/13;
123.64.0.0/11;
123.96.0.0/15;
123.98.0.0/17;
123.99.128.0/17;
123.100.0.0/19;
123.101.0.0/16;
123.103.0.0/17;
123.108.128.0/20;
123.108.208.0/20;
123.112.0.0/12;
123.128.0.0/13;
123.136.80.0/20;
123.137.0.0/16;
123.138.0.0/15;
123.144.0.0/14;
123.148.0.0/16;
123.149.0.0/16;
123.150.0.0/15;
123.152.0.0/13;
123.160.0.0/14;
123.164.0.0/14;
123.168.0.0/14;
123.172.0.0/15;
123.174.0.0/15;
123.176.80.0/20;
123.177.0.0/16;
123.178.0.0/15;
123.180.0.0/14;
123.184.0.0/14;
123.188.0.0/14;
123.196.0.0/15;
123.199.128.0/17;
123.206.0.0/15;
123.232.0.0/14;
123.242.0.0/17;
123.244.0.0/14;
123.249.0.0/16;
123.253.0.0/16;
124.6.64.0/18;
124.14.0.0/15;
124.16.0.0/15;
124.20.0.0/16;
124.21.0.0/20;
124.21.16.0/20;
124.21.32.0/19;
124.21.64.0/18;
124.21.128.0/17;
124.22.0.0/15;
124.28.192.0/18;
124.29.0.0/17;
124.31.0.0/16;
124.40.112.0/20;
124.40.128.0/18;
124.42.0.0/17;
124.42.128.0/17;
124.47.0.0/18;
124.64.0.0/15;
124.66.0.0/17;
124.67.0.0/16;
124.68.0.0/14;
124.72.0.0/16;
124.73.0.0/16;
124.74.0.0/15;
124.76.0.0/14;
124.88.0.0/16;
124.89.0.0/17;
124.89.128.0/17;
124.90.0.0/15;
124.92.0.0/14;
124.108.8.0/21;
124.108.40.0/21;
124.112.0.0/15;
124.114.0.0/15;
124.116.0.0/16;
124.117.0.0/16;
124.118.0.0/15;
124.126.0.0/15;
124.128.0.0/13;
124.147.128.0/17;
124.156.0.0/16;
124.160.0.0/16;
124.161.0.0/16;
124.162.0.0/16;
124.163.0.0/16;
124.164.0.0/14;
124.172.0.0/15;
124.174.0.0/15;
124.192.0.0/15;
124.196.0.0/16;
124.200.0.0/13;
124.220.0.0/14;
124.224.0.0/16;
124.225.0.0/16;
124.226.0.0/15;
124.228.0.0/14;
124.232.0.0/15;
124.234.0.0/15;
124.236.0.0/14;
124.240.0.0/17;
124.240.128.0/18;
124.242.0.0/16;
124.243.192.0/18;
124.248.0.0/17;
124.249.0.0/16;
124.250.0.0/15;
124.254.0.0/18;
125.31.192.0/18;
125.32.0.0/16;
125.33.0.0/16;
125.34.0.0/16;
125.35.0.0/17;
125.35.128.0/17;
125.36.0.0/14;
125.40.0.0/13;
125.58.128.0/17;
125.61.128.0/17;
125.62.0.0/18;
125.64.0.0/13;
125.72.0.0/16;
125.73.0.0/16;
125.74.0.0/15;
125.76.0.0/17;
125.76.128.0/17;
125.77.0.0/16;
125.78.0.0/15;
125.80.0.0/13;
125.88.0.0/13;
125.96.0.0/15;
125.98.0.0/16;
125.104.0.0/13;
125.112.0.0/12;
125.169.0.0/16;
125.171.0.0/16;
125.208.0.0/18;
125.210.0.0/16;
125.211.0.0/16;
125.213.0.0/17;
125.214.96.0/19;
125.215.0.0/18;
125.216.0.0/15;
125.218.0.0/16;
125.219.0.0/16;
125.220.0.0/15;
125.222.0.0/15;
125.254.128.0/18;
125.254.192.0/18;
134.196.0.0/16;
159.226.0.0/16;
161.207.0.0/16;
162.105.0.0/16;
166.111.0.0/16;
167.139.0.0/16;
168.160.0.0/16;
169.211.1.0/24;
192.83.122.0/24;
192.83.169.0/24;
192.124.154.0/24;
192.188.170.0/24;
198.17.7.0/24;
202.0.110.0/24;
202.0.176.0/22;
202.4.128.0/19;
202.4.252.0/22;
202.8.128.0/19;
202.10.64.0/20;
202.14.88.0/24;
202.14.235.0/24;
202.14.236.0/23;
202.14.238.0/24;
202.20.120.0/24;
202.22.248.0/22;
202.22.252.0/22;
202.38.0.0/23;
202.38.2.0/23;
202.38.4.0/22;
202.38.8.0/21;
202.38.64.0/19;
202.38.96.0/19;
202.38.128.0/23;
202.38.130.0/23;
202.38.132.0/23;
202.38.134.0/24;
202.38.135.0/24;
202.38.136.0/24;
202.38.137.0/24;
202.38.138.0/24;
202.38.140.0/23;
202.38.142.0/24;
202.38.143.0/24;
202.38.146.0/23;
202.38.149.0/24;
202.38.150.0/23;
202.38.152.0/23;
202.38.154.0/23;
202.38.156.0/24;
202.38.158.0/23;
202.38.160.0/23;
202.38.164.0/22;
202.38.168.0/24;
202.38.169.0/24;
202.38.170.0/24;
202.38.171.0/24;
202.38.172.0/24;
202.38.173.0/24;
202.38.174.0/24;
202.38.175.0/24;
202.38.176.0/23;
202.38.184.0/21;
202.38.192.0/18;
202.41.152.0/21;
202.41.240.0/20;
202.43.144.0/20;
202.46.32.0/19;
202.46.224.0/20;
202.60.112.0/20;
202.63.248.0/22;
202.69.4.0/22;
202.69.16.0/20;
202.70.0.0/19;
202.74.8.0/21;
202.75.208.0/20;
202.85.208.0/20;
202.90.0.0/22;
202.90.224.0/20;
202.90.252.0/22;
202.91.0.0/22;
202.91.128.0/22;
202.91.176.0/20;
202.91.224.0/19;
202.92.0.0/22;
202.92.252.0/22;
202.93.0.0/22;
202.93.252.0/22;
202.95.0.0/22;
202.95.4.0/22;
202.95.8.0/21;
202.95.16.0/20;
202.95.252.0/22;
202.96.0.0/18;
202.96.64.0/21;
202.96.72.0/21;
202.96.80.0/20;
202.96.96.0/21;
202.96.104.0/21;
202.96.112.0/20;
202.96.128.0/21;
202.96.136.0/21;
202.96.144.0/20;
202.96.160.0/21;
202.96.168.0/21;
202.96.176.0/20;
202.96.192.0/21;
202.96.200.0/21;
202.96.208.0/20;
202.96.224.0/21;
202.96.232.0/21;
202.96.240.0/20;
202.97.0.0/21;
202.97.8.0/21;
202.97.16.0/20;
202.97.32.0/19;
202.97.64.0/19;
202.97.96.0/20;
202.97.112.0/20;
202.97.128.0/18;
202.97.192.0/19;
202.97.224.0/21;
202.97.232.0/21;
202.97.240.0/20;
202.98.0.0/21;
202.98.8.0/21;
202.98.16.0/20;
202.98.32.0/21;
202.98.40.0/21;
202.98.48.0/20;
202.98.64.0/19;
202.98.96.0/21;
202.98.104.0/21;
202.98.112.0/20;
202.98.128.0/19;
202.98.160.0/21;
202.98.168.0/21;
202.98.176.0/20;
202.98.192.0/21;
202.98.200.0/21;
202.98.208.0/20;
202.98.224.0/21;
202.98.232.0/21;
202.98.240.0/20;
202.99.0.0/18;
202.99.64.0/19;
202.99.96.0/21;
202.99.104.0/21;
202.99.112.0/20;
202.99.128.0/19;
202.99.160.0/21;
202.99.168.0/21;
202.99.176.0/20;
202.99.192.0/21;
202.99.200.0/21;
202.99.208.0/20;
202.99.224.0/21;
202.99.232.0/21;
202.99.240.0/20;
202.100.0.0/21;
202.100.8.0/21;
202.100.16.0/20;
202.100.32.0/19;
202.100.64.0/21;
202.100.72.0/21;
202.100.80.0/20;
202.100.96.0/21;
202.100.104.0/21;
202.100.112.0/20;
202.100.128.0/21;
202.100.136.0/21;
202.100.144.0/20;
202.100.160.0/21;
202.100.168.0/21;
202.100.176.0/20;
202.100.192.0/21;
202.100.200.0/21;
202.100.208.0/20;
202.100.224.0/19;
202.101.0.0/18;
202.101.64.0/19;
202.101.96.0/19;
202.101.128.0/18;
202.101.192.0/19;
202.101.224.0/21;
202.101.232.0/21;
202.101.240.0/20;
202.102.0.0/19;
202.102.32.0/19;
202.102.64.0/18;
202.102.128.0/21;
202.102.136.0/21;
202.102.144.0/20;
202.102.160.0/19;
202.102.192.0/21;
202.102.200.0/21;
202.102.208.0/20;
202.102.224.0/21;
202.102.232.0/21;
202.102.240.0/20;
202.103.0.0/21;
202.103.8.0/21;
202.103.16.0/20;
202.103.32.0/19;
202.103.64.0/19;
202.103.96.0/21;
202.103.104.0/21;
202.103.112.0/20;
202.103.128.0/18;
202.103.192.0/19;
202.103.224.0/21;
202.103.232.0/21;
202.103.240.0/20;
202.104.0.0/15;
202.106.0.0/16;
202.107.0.0/17;
202.107.128.0/17;
202.108.0.0/16;
202.109.0.0/16;
202.110.0.0/18;
202.110.64.0/18;
202.110.128.0/18;
202.110.192.0/18;
202.111.0.0/17;
202.111.128.0/19;
202.111.160.0/19;
202.111.192.0/18;
202.112.0.0/16;
202.113.0.0/20;
202.113.16.0/20;
202.113.32.0/19;
202.113.64.0/18;
202.113.128.0/18;
202.113.192.0/19;
202.113.224.0/20;
202.113.240.0/20;
202.114.0.0/19;
202.114.32.0/19;
202.114.64.0/18;
202.114.128.0/17;
202.115.0.0/19;
202.115.32.0/19;
202.115.64.0/18;
202.115.128.0/17;
202.116.0.0/19;
202.116.32.0/20;
202.116.48.0/20;
202.116.64.0/19;
202.116.96.0/19;
202.116.128.0/17;
202.117.0.0/18;
202.117.64.0/18;
202.117.128.0/17;
202.118.0.0/19;
202.118.32.0/19;
202.118.64.0/18;
202.118.128.0/17;
202.119.0.0/19;
202.119.32.0/19;
202.119.64.0/20;
202.119.80.0/20;
202.119.96.0/19;
202.119.128.0/17;
202.120.0.0/18;
202.120.64.0/18;
202.120.128.0/17;
202.121.0.0/16;
202.122.0.0/21;
202.122.32.0/21;
202.122.64.0/19;
202.122.112.0/21;
202.122.128.0/24;
202.123.96.0/20;
202.124.24.0/22;
202.125.176.0/20;
202.127.0.0/23;
202.127.2.0/24;
202.127.3.0/24;
202.127.4.0/24;
202.127.5.0/24;
202.127.6.0/23;
202.127.12.0/22;
202.127.16.0/20;
202.127.40.0/21;
202.127.48.0/20;
202.127.112.0/20;
202.127.128.0/20;
202.127.144.0/20;
202.127.160.0/21;
202.127.192.0/23;
202.127.194.0/23;
202.127.196.0/22;
202.127.200.0/21;
202.127.208.0/24;
202.127.209.0/24;
202.127.212.0/22;
202.127.216.0/21;
202.127.224.0/19;
202.130.0.0/19;
202.130.224.0/19;
202.131.16.0/21;
202.131.48.0/20;
202.131.208.0/20;
202.136.48.0/20;
202.136.208.0/20;
202.136.224.0/20;
202.141.160.0/19;
202.142.16.0/20;
202.143.16.0/20;
202.148.96.0/19;
202.149.160.0/19;
202.149.224.0/19;
202.150.16.0/20;
202.152.176.0/20;
202.153.48.0/20;
202.158.160.0/19;
202.160.176.0/20;
202.164.0.0/20;
202.164.25.0/24;
202.165.96.0/20;
202.165.176.0/20;
202.165.208.0/20;
202.168.160.0/20;
202.168.176.0/20;
202.170.128.0/19;
202.170.216.0/21;
202.173.8.0/21;
202.173.224.0/19;
202.179.240.0/20;
202.180.128.0/19;
202.181.112.0/20;
202.189.80.0/20;
202.192.0.0/13;
202.200.0.0/14;
202.204.0.0/14;
203.18.50.0/24;
203.79.0.0/20;
203.80.144.0/20;
203.81.16.0/20;
203.83.56.0/21;
203.86.0.0/19;
203.86.32.0/19;
203.86.64.0/20;
203.86.80.0/20;
203.88.32.0/19;
203.88.192.0/19;
203.89.0.0/22;
203.90.0.0/22;
203.90.128.0/19;
203.90.160.0/19;
203.90.192.0/19;
203.91.32.0/19;
203.91.96.0/20;
203.91.120.0/21;
203.92.0.0/22;
203.92.160.0/19;
203.93.0.0/22;
203.93.4.0/22;
203.93.8.0/24;
203.93.9.0/24;
203.93.10.0/23;
203.93.12.0/22;
203.93.16.0/20;
203.93.32.0/19;
203.93.64.0/18;
203.93.128.0/21;
203.93.136.0/22;
203.93.140.0/24;
203.93.141.0/24;
203.93.142.0/23;
203.93.144.0/20;
203.93.160.0/19;
203.93.192.0/18;
203.94.0.0/22;
203.94.4.0/22;
203.94.8.0/21;
203.94.16.0/20;
203.95.0.0/21;
203.95.96.0/20;
203.95.112.0/20;
203.99.16.0/20;
203.99.80.0/20;
203.100.32.0/20;
203.100.80.0/20;
203.100.96.0/19;
203.100.192.0/20;
203.110.160.0/19;
203.118.192.0/19;
203.119.24.0/21;
203.119.32.0/22;
203.128.32.0/19;
203.128.96.0/19;
203.130.32.0/19;
203.132.32.0/19;
203.134.240.0/21;
203.135.96.0/20;
203.135.112.0/20;
203.135.160.0/20;
203.142.219.0/24;
203.148.0.0/18;
203.152.64.0/19;
203.156.192.0/18;
203.158.16.0/21;
203.161.192.0/19;
203.166.160.0/19;
203.171.224.0/20;
203.174.7.0/24;
203.174.96.0/19;
203.175.128.0/19;
203.175.192.0/18;
203.176.168.0/21;
203.184.80.0/20;
203.187.160.0/19;
203.190.96.0/20;
203.191.16.0/20;
203.191.64.0/18;
203.191.144.0/21;
203.191.152.0/21;
203.192.0.0/19;
203.196.0.0/21;
203.207.64.0/18;
203.207.128.0/17;
203.208.0.0/20;
203.208.16.0/22;
203.208.32.0/19;
203.209.224.0/19;
203.212.0.0/20;
203.212.80.0/20;
203.222.192.0/20;
203.223.0.0/20;
210.2.0.0/20;
210.2.16.0/20;
210.5.0.0/19;
210.5.144.0/20;
210.12.0.0/18;
210.12.64.0/18;
210.12.128.0/18;
210.12.192.0/18;
210.13.0.0/18;
210.13.64.0/18;
210.13.128.0/17;
210.14.64.0/19;
210.14.112.0/20;
210.14.128.0/19;
210.14.160.0/19;
210.14.192.0/19;
210.14.224.0/19;
210.15.0.0/19;
210.15.32.0/19;
210.15.64.0/19;
210.15.96.0/19;
210.15.128.0/18;
210.16.128.0/18;
210.21.0.0/17;
210.21.128.0/17;
210.22.0.0/16;
210.23.32.0/19;
210.25.0.0/16;
210.26.0.0/15;
210.28.0.0/14;
210.32.0.0/14;
210.36.0.0/14;
210.40.0.0/13;
210.51.0.0/16;
210.52.0.0/18;
210.52.64.0/18;
210.52.128.0/17;
210.53.0.0/17;
210.53.128.0/17;
210.56.192.0/19;
210.72.0.0/17;
210.72.128.0/19;
210.72.160.0/19;
210.72.192.0/18;
210.73.0.0/19;
210.73.32.0/19;
210.73.64.0/18;
210.73.128.0/17;
210.74.0.0/19;
210.74.32.0/19;
210.74.64.0/19;
210.74.96.0/19;
210.74.128.0/19;
210.74.160.0/19;
210.74.192.0/18;
210.75.0.0/16;
210.76.0.0/19;
210.76.32.0/19;
210.76.64.0/18;
210.76.128.0/17;
210.77.0.0/16;
210.78.0.0/19;
210.78.32.0/19;
210.78.64.0/18;
210.78.128.0/19;
210.78.160.0/19;
210.78.192.0/18;
210.79.64.0/18;
210.79.224.0/19;
210.82.0.0/15;
210.87.128.0/20;
210.87.144.0/20;
210.87.160.0/19;
210.185.192.0/18;
210.192.96.0/19;
211.64.0.0/14;
211.68.0.0/15;
211.70.0.0/15;
211.80.0.0/16;
211.81.0.0/16;
211.82.0.0/16;
211.83.0.0/16;
211.84.0.0/15;
211.86.0.0/15;
211.88.0.0/16;
211.89.0.0/16;
211.90.0.0/15;
211.92.0.0/15;
211.94.0.0/15;
211.96.0.0/15;
211.98.0.0/15;
211.100.0.0/16;
211.101.0.0/18;
211.101.64.0/18;
211.101.128.0/17;
211.102.0.0/16;
211.103.0.0/17;
211.103.128.0/17;
211.136.0.0/14;
211.140.0.0/15;
211.142.0.0/17;
211.142.128.0/17;
211.143.0.0/16;
211.144.0.0/15;
211.146.0.0/16;
211.147.0.0/16;
211.148.0.0/14;
211.152.0.0/15;
211.154.0.0/16;
211.155.0.0/18;
211.155.64.0/19;
211.155.96.0/19;
211.155.128.0/17;
211.156.0.0/14;
211.160.0.0/14;
211.164.0.0/14;
218.0.0.0/16;
218.1.0.0/16;
218.2.0.0/15;
218.4.0.0/15;
218.6.0.0/16;
218.7.0.0/16;
218.8.0.0/15;
218.10.0.0/16;
218.11.0.0/16;
218.12.0.0/16;
218.13.0.0/16;
218.14.0.0/15;
218.16.0.0/14;
218.20.0.0/16;
218.21.0.0/17;
218.21.128.0/17;
218.22.0.0/15;
218.24.0.0/15;
218.26.0.0/16;
218.27.0.0/16;
218.28.0.0/15;
218.30.0.0/15;
218.56.0.0/14;
218.60.0.0/15;
218.62.0.0/17;
218.62.128.0/17;
218.63.0.0/16;
218.64.0.0/15;
218.66.0.0/16;
218.67.0.0/17;
218.67.128.0/17;
218.68.0.0/15;
218.70.0.0/15;
218.72.0.0/14;
218.76.0.0/15;
218.78.0.0/15;
218.80.0.0/14;
218.84.0.0/14;
218.88.0.0/13;
218.96.0.0/14;
218.104.0.0/17;
218.104.128.0/19;
218.104.160.0/19;
218.104.192.0/21;
218.104.200.0/21;
218.104.208.0/20;
218.104.224.0/19;
218.105.0.0/16;
218.106.0.0/15;
218.108.0.0/16;
218.109.0.0/16;
218.185.192.0/19;
218.192.0.0/16;
218.193.0.0/16;
218.194.0.0/16;
218.195.0.0/16;
218.196.0.0/14;
218.200.0.0/14;
218.204.0.0/15;
218.206.0.0/15;
218.240.0.0/14;
218.244.0.0/15;
218.246.0.0/15;
218.249.0.0/16;
219.72.0.0/16;
219.82.0.0/16;
219.128.0.0/12;
219.144.0.0/14;
219.148.0.0/16;
219.149.0.0/17;
219.149.128.0/18;
219.149.192.0/18;
219.150.0.0/19;
219.150.32.0/19;
219.150.64.0/19;
219.150.96.0/20;
219.150.112.0/20;
219.150.128.0/17;
219.151.0.0/19;
219.151.32.0/19;
219.151.64.0/18;
219.151.128.0/17;
219.152.0.0/15;
219.154.0.0/15;
219.156.0.0/15;
219.158.0.0/17;
219.158.128.0/17;
219.159.0.0/18;
219.159.64.0/18;
219.159.128.0/17;
219.216.0.0/15;
219.218.0.0/15;
219.220.0.0/16;
219.221.0.0/16;
219.222.0.0/15;
219.224.0.0/15;
219.226.0.0/16;
219.227.0.0/16;
219.228.0.0/15;
219.230.0.0/15;
219.232.0.0/14;
219.236.0.0/15;
219.238.0.0/15;
219.242.0.0/15;
219.244.0.0/14;
220.101.192.0/18;
220.112.0.0/14;
220.152.128.0/17;
220.154.0.0/15;
220.160.0.0/11;
220.192.0.0/15;
220.194.0.0/15;
220.196.0.0/14;
220.200.0.0/13;
220.231.0.0/18;
220.231.128.0/17;
220.232.64.0/18;
220.234.0.0/16;
220.242.0.0/15;
220.248.0.0/14;
220.252.0.0/16;
221.0.0.0/15;
221.2.0.0/16;
221.3.0.0/17;
221.3.128.0/17;
221.4.0.0/16;
221.5.0.0/17;
221.5.128.0/17;
221.6.0.0/16;
221.7.0.0/19;
221.7.32.0/19;
221.7.64.0/19;
221.7.96.0/19;
221.7.128.0/17;
221.8.0.0/15;
221.10.0.0/16;
221.11.0.0/17;
221.11.128.0/18;
221.11.192.0/19;
221.11.224.0/19;
221.12.0.0/17;
221.12.128.0/18;
221.13.0.0/18;
221.13.64.0/19;
221.13.96.0/19;
221.13.128.0/17;
221.14.0.0/15;
221.122.0.0/15;
221.129.0.0/16;
221.130.0.0/15;
221.133.224.0/19;
221.136.0.0/16;
221.137.0.0/16;
221.172.0.0/14;
221.176.0.0/13;
221.192.0.0/15;
221.194.0.0/16;
221.195.0.0/16;
221.196.0.0/15;
221.198.0.0/16;
221.199.0.0/19;
221.199.32.0/20;
221.199.48.0/20;
221.199.64.0/18;
221.199.128.0/18;
221.199.192.0/20;
221.199.224.0/19;
221.200.0.0/14;
221.204.0.0/15;
221.206.0.0/16;
221.207.0.0/18;
221.207.64.0/18;
221.207.128.0/17;
221.208.0.0/14;
221.212.0.0/16;
221.213.0.0/16;
221.214.0.0/15;
221.216.0.0/13;
221.224.0.0/13;
221.232.0.0/14;
221.236.0.0/15;
221.238.0.0/16;
221.239.0.0/17;
221.239.128.0/17;
222.16.0.0/15;
222.18.0.0/15;
222.20.0.0/15;
222.22.0.0/16;
222.23.0.0/16;
222.24.0.0/15;
222.26.0.0/15;
222.28.0.0/14;
222.32.0.0/11;
222.64.0.0/13;
222.72.0.0/15;
222.74.0.0/16;
222.75.0.0/16;
222.76.0.0/14;
222.80.0.0/15;
222.82.0.0/16;
222.83.0.0/17;
222.83.128.0/17;
222.84.0.0/16;
222.85.0.0/17;
222.85.128.0/17;
222.86.0.0/15;
222.88.0.0/15;
222.90.0.0/15;
222.92.0.0/14;
222.125.0.0/16;
222.126.128.0/17;
222.128.0.0/14;
222.132.0.0/14;
222.136.0.0/13;
222.160.0.0/15;
222.162.0.0/16;
222.163.0.0/19;
222.163.32.0/19;
222.163.64.0/18;
222.163.128.0/17;
222.168.0.0/15;
222.170.0.0/15;
222.172.0.0/17;
222.172.128.0/17;
222.173.0.0/16;
222.174.0.0/15;
222.176.0.0/13;
222.184.0.0/13;
222.192.0.0/14;
222.196.0.0/15;
222.198.0.0/16;
222.199.0.0/16;
222.200.0.0/14;
222.204.0.0/15;
222.206.0.0/15;
222.208.0.0/13;
222.216.0.0/15;
222.218.0.0/16;
222.219.0.0/16;
222.220.0.0/15;
222.222.0.0/15;
222.240.0.0/13;
222.248.0.0/16;
222.249.0.0/17;
222.249.128.0/19;
222.249.160.0/20;
222.249.176.0/20;
222.249.192.0/18;
}


QUOTE:
mkdir master
touch master/china.def
touch master/default.def

mkdir master/china
mkdir master/default
vi master/china/thismail.org.zone

[Copy to clipboard] [ - ]CODE:
$ORIGIN thismail.org.
$TTL 300

@ IN SOA ns1.thismail.org. webmaster.thismail.org. (
2008041001 ; serial number YYMMDDNN
28800 ; Refresh
7200 ; Retry
864000 ; Expire
300 ; Min TTL
)

thismail.org. IN NS ns1.thismail.org.
thismail.org. IN NS ns2.thismail.org.

ns1 IN A 192.168.29.128

thismail.org. IN A 192.168.0.1

www IN A 192.168.0.1
vi master/default/thismail.org.zone

[Copy to clipboard] [ - ]CODE:
$ORIGIN thismail.org.
$TTL 300

@ IN SOA ns1.thismail.org. webmaster.thismail.org. (
2008041001 ; serial number YYMMDDNN
28800 ; Refresh
7200 ; Retry
864000 ; Expire
300 ; Min TTL
)

thismail.org. IN NS ns1.thismail.org.
thismail.org. IN NS ns2.thismail.org.

ns1 IN A 192.168.29.128

thismail.org. IN A 192.168.0.2

www IN A 192.168.0.2
vi master/china.def

[Copy to clipboard] [ - ]CODE:
zone "thismail.org" {
type master;
file "master/china/thismail.org.zone";
};
vi master/default.def

[Copy to clipboard] [ - ]CODE:
zone "thismail.org" {
type master;
file "master/default/thismail.org.zone";
};


[Copy to clipboard] [ - ]CODE:
touch /var/log/dns_warnings.log
touch /var/log/dns_security.log
touch /var/log/dns_query.log
chown bind /var/log/dns_warnings.log
chown bind /var/log/dns_security.log
chown bind /var/log/dns_query.log
五、启动

[Copy to clipboard] [ - ]CODE:
/usr/local/named/sbin/named -u bind -c /usr/local/named/etc/named.conf
六、测试

国内查讯www.thismail.org

[Copy to clipboard] [ - ]CODE:
Xshell:\> nslookup
> server 192.168.29.128
Default Server: [192.168.29.128]
Address: 192.168.29.128

> www.thismail.org
Server: 192.168.29.128
Address: 192.168.29.128

Name: www.thismail.org
Address: 192.168.0.1
国外查讯 www.thismail.org

[Copy to clipboard] [ - ]CODE:
Xshell:\> nslookup
> server 192.168.29.128
Default Server: [192.168.29.128]
Address: 192.168.29.128

> www.thismail.org
Server: 192.168.29.128
Address: 192.168.29.128

Name: www.thismail.org
Address: 192.168.0.2
Tags - , , ]]> http://www.siutung.org/post/418/ <![CDATA[中华人民共和国工业和信息化部令]]> siutung <> Mon, 22 Feb 2010 12:22:32 +0000 http://www.siutung.org/post/418/ 中华人民共和国工业和信息化部令

第　11　号

　　《通信网络安全防护管理办法》已经2009年12月29日中华人民共和国工业和信息化部第8次部务会议审议通过，现予公布，自2010年3月1 日起施行。
　　　　　　　　　　　　　　　　　　　　　　　 部　长 　李毅中
　　　　　　　　　　　　　　　　　　　　　　　　 　二〇一〇年一月二十一日



 

通信网络安全防护管理办法


　　第一条　为了加强对通信网络安全的管理，提高通信网络安全防护能力，保障通信网络安全畅通，根据《中华人民共和国电信条例》，制定本办法。
　　第二条　中华人民共和国境内的电信业务经营者和互联网域名服务提供者（以下统称“通信网络运行单位”）管理和运行的公用通信网和互联网（以下统称“通信网络”）的网络安全防护工作，适用本办法。
　　本办法所称互联网域名服务，是指设置域名数据库或者域名解析服务器，为域名持有者提供域名注册或者权威解析服务的行为。
　　本办法所称网络安全防护工作，是指为防止通信网络阻塞、中断、瘫痪或者被非法控制，以及为防止通信网络中传输、存储、处理的数据信息丢失、泄露或者被篡改而开展的工作。
　　第三条　通信网络安全防护工作坚持积极防御、综合防范、分级保护的原则。
　　第四条　中华人民共和国工业和信息化部（以下简称工业和信息化部）负责全国通信网络安全防护工作的统一指导、协调和检查，组织建立健全通信网络安全防护体系，制定通信行业相关标准。
　　各省、自治区、直辖市通信管理局（以下简称通信管理局）依据本办法的规定，对本行政区域内的通信网络安全防护工作进行指导、协调和检查。
　　工业和信息化部与通信管理局统称“电信管理机构”。
　　第五条　通信网络运行单位应当按照电信管理机构的规定和通信行业标准开展通信网络安全防护工作，对本单位通信网络安全负责。
　　第六条　通信网络运行单位新建、改建、扩建通信网络工程项目，应当同步建设通信网络安全保障设施，并与主体工程同时进行验收和投入运行。
　　通信网络安全保障设施的新建、改建、扩建费用，应当纳入本单位建设项目概算。
　　第七条　通信网络运行单位应当对本单位已正式投入运行的通信网络进行单元划分，并按照各通信网络单元遭到破坏后可能对国家安全、经济运行、社会秩序、公众利益的危害程度，由低到高分别划分为一级、二级、三级、四级、五级。
　　电信管理机构应当组织专家对通信网络单元的分级情况进行评审。
　　通信网络运行单位应当根据实际情况适时调整通信网络单元的划分和级别，并按照前款规定进行评审。
　　第八条　通信网络运行单位应当在通信网络定级评审通过后三十日内，将通信网络单元的划分和定级情况按照以下规定向电信管理机构备案：
　　（一）基础电信业务经营者集团公司向工业和信息化部申请办理其直接管理的通信网络单元的备案；基础电信业务经营者各省（自治区、直辖市）子公司、分公司向当地通信管理局申请办理其负责管理的通信网络单元的备案；
　　（二）增值电信业务经营者向作出电信业务经营许可决定的电信管理机构备案；
　　（三）互联网域名服务提供者向工业和信息化部备案。
　　第九条　通信网络运行单位办理通信网络单元备案，应当提交以下信息：
　　（一）通信网络单元的名称、级别和主要功能；
　　（二）通信网络单元责任单位的名称和联系方式；
　　（三）通信网络单元主要负责人的姓名和联系方式；
　　（四）通信网络单元的拓扑架构、网络边界、主要软硬件及型号和关键设施位置；
　　（五）电信管理机构要求提交的涉及通信网络安全的其他信息。
　　前款规定的备案信息发生变化的，通信网络运行单位应当自信息变化之日起三十日内向电信管理机构变更备案。
　　通信网络运行单位报备的信息应当真实、完整。
　　第十条　电信管理机构应当对备案信息的真实性、完整性进行核查，发现备案信息不真实、不完整的，通知备案单位予以补正。
　　第十一条　通信网络运行单位应当落实与通信网络单元级别相适应的安全防护措施，并按照以下规定进行符合性评测：
　　（一）三级及三级以上通信网络单元应当每年进行一次符合性评测；
　　（二）二级通信网络单元应当每两年进行一次符合性评测。
　　通信网络单元的划分和级别调整的，应当自调整完成之日起九十日内重新进行符合性评测。
　　通信网络运行单位应当在评测结束后三十日内，将通信网络单元的符合性评测结果、整改情况或者整改计划报送通信网络单元的备案机构。
　　第十二条　通信网络运行单位应当按照以下规定组织对通信网络单元进行安全风险评估，及时消除重大网络安全隐患：
　　（一）三级及三级以上通信网络单元应当每年进行一次安全风险评估；
　　（二）二级通信网络单元应当每两年进行一次安全风险评估。
　　国家重大活动举办前，通信网络单元应当按照电信管理机构的要求进行安全风险评估。
　　通信网络运行单位应当在安全风险评估结束后三十日内，将安全风险评估结果、隐患处理情况或者处理计划报送通信网络单元的备案机构。
　　第十三条　通信网络运行单位应当对通信网络单元的重要线路、设备、系统和数据等进行备份。
　　第十四条　通信网络运行单位应当组织演练，检验通信网络安全防护措施的有效性。
　　通信网络运行单位应当参加电信管理机构组织开展的演练。
　　第十五条　通信网络运行单位应当建设和运行通信网络安全监测系统，对本单位通信网络的安全状况进行监测。
　　第十六条　通信网络运行单位可以委托专业机构开展通信网络安全评测、评估、监测等工作。
　　工业和信息化部应当根据通信网络安全防护工作的需要，加强对前款规定的受托机构的安全评测、评估、监测能力指导。
　　第十七条　电信管理机构应当对通信网络运行单位开展通信网络安全防护工作的情况进行检查。
　　电信管理机构可以采取以下检查措施：
　　（一）查阅通信网络运行单位的符合性评测报告和风险评估报告；
　　（二）查阅通信网络运行单位有关网络安全防护的文档和工作记录；
　　（三）向通信网络运行单位工作人员询问了解有关情况；
　　（四）查验通信网络运行单位的有关设施；
　　（五）对通信网络进行技术性分析和测试；
　　（六）法律、行政法规规定的其他检查措施。
　　第十八条　电信管理机构可以委托专业机构开展通信网络安全检查活动。
　　第十九条　通信网络运行单位应当配合电信管理机构及其委托的专业机构开展检查活动，对于检查中发现的重大网络安全隐患，应当及时整改。
　　第二十条　电信管理机构对通信网络安全防护工作进行检查，不得影响通信网络的正常运行，不得收取任何费用，不得要求接受检查的单位购买指定品牌或者指定单位的安全软件、设备或者其他产品。
　　第二十一条　电信管理机构及其委托的专业机构的工作人员对于检查工作中获悉的国家秘密、商业秘密和个人隐私，有保密的义务。
　　第二十二条　违反本办法第六条第一款、第七条第一款和第三款、第八条、第九条、第十一条、第十二条、第十三条、第十四条、第十五条、第十九条规定的，由电信管理机构依据职权责令改正；拒不改正的，给予警告，并处五千元以上三万元以下的罚款。
　　第二十三条　电信管理机构的工作人员违反本办法第二十条、第二十一条规定的，依法给予行政处分；构成犯罪的，依法追究刑事责任。
　　第二十四条　本办法自2010年3月1日起施行。


Tags - ]]> http://www.siutung.org/post/415/ <![CDATA[你的过去我不曾参与]]> siutung <> Sun, 21 Feb 2010 06:57:30 +0000 http://www.siutung.org/post/415/ 此处包含一个多媒体文件，请用网页方式查看。

Tags - ]]> http://www.siutung.org/post/414/ <![CDATA[禁用policyd的灰名单功能]]> siutung <> Mon, 08 Feb 2010 15:35:54 +0000 http://www.siutung.org/post/414/ greylist）功能：
将/usr/local/etc/policyd_sender_throttle.conf里面的
GREYLISTING=1
修改为：
GREYLISTING=0

重启policyd服务即可。



Tags - , , ]]> http://www.siutung.org/post/413/ <![CDATA[iRedmail能发邮件不能收邮件]]> siutung <> Mon, 08 Feb 2010 15:27:04 +0000 http://www.siutung.org/post/413/ 1、域名abcd.com、IP地址1.2.3.4和2.3.4.5。
2、www.abcd.com、abcd.com解析到IP：1.2.3.4上，MX记录（abcd.com）和A记录（mail.abcd.com）解析到2.3.4.5上。

在学习过程中出现两个错误，此记录于此：
1、误将MX记录写成mail.abcd.com解析到2.3.4.5上了。
通过测试向其他邮箱发送邮件，user@abcd.com能够发出去，而收不到其他邮件投递进来的邮件。
后来发现，MX记录不能写成mail.abcd.com，否则邮箱名称为user@mail.abcd.com，所以要想邮箱名称为user@abcd.com，则MX记录需要写成abcd.com，解析至2.3..4.5上即可。

2、通过官方的方法，安装了iredmail，为防万一把虚拟机做了个快照。
通过portsupgrade将系统里的所有ports更新了一遍，可以在user@abcd.com发邮件是正常的，而收不到邮件，投递邮件的信箱返回错误邮件信息：host 2.3.4.5[2.3.4.5] said: 451 4.3.5 Server configuration problem (in reply to RCPT TO command)
查看maillog日志：
#more /var/log/maillog
发现有很多
Feb  7 20:53:29 FreeBSD postfix/smtpd[2336]: warning: connect to 127.0.0.1:10031: Connection refused
Feb  7 20:53:29 FreeBSD postfix/smtpd[2336]: warning: problem talking to server 127.0.0.1:10031: Connection refused
Feb  7 20:53:30 FreeBSD postfix/smtpd[2336]: warning: connect to 127.0.0.1:10031: Connection refused
Feb  7 20:53:30 FreeBSD postfix/smtpd[2336]: warning: problem talking to server 127.0.0.1:10031: Connection refused
信息，经过官方管理员指导，说是policyd没有启动。
不会呀，系统在启动的时候，一起没有错误的信息呢！
后来想一想，是不是因为我把所有的ports给更新了，policyd也更新了，出现版本错误？
把系统重启了一遍，发现policyd的服务启动出现错误，登陆进入系统，手工重启policyd服务，系统提示，该服务随系统启动的语句是：
postfix_policyd_sf_enable="YES"
而没更新ports之前，rc.conf里policyd启动的语句是：
policyd_enable="YES"


于是将policyd_enable="YES"换成postfix_policyd_sf_enable="YES"，重启policyd服务，OK，搞定，可以正常收发邮件了。
]]> http://www.siutung.org/post/412/ <![CDATA[关于58.53.196.146和58.53.196.147]]> siutung <> Mon, 08 Feb 2010 07:01:56 +0000 http://www.siutung.org/post/412/ 一些已经过期或暂停解析的域名，再nslookup（或ping）查询域名解析的时候，发现都是解析到了58.53.196.146和58.53.196.147这两个IP地址上了。
原因：客户端电脑使用的主DNS地址为202.103.24.68。
解决：将客户端电脑使用的主DNS地址更换成其他有效的DNS地址（非202.103.24.68）即可。
湖北省内可用的DNS地址：
202.103.0.68
202.103.0.117
202.103.44.150


Tags - , ]]> http://www.siutung.org/post/411/ <![CDATA[IP被列为spamhaus的PBL中如何申请脱离（转）]]> siutung <> Sat, 06 Feb 2010 15:22:23 +0000 http://www.siutung.org/post/411/ spamhaus是目前世界上影响最大反垃圾邮件组织，只要被它列入黑名单，你的邮件服务器就算瘫痪了，因为据说全球80%以上的服务器会拒收从你的邮件服务器发去邮件。他们提供四种类型XBL，SBL，PBL，ROKSO，国内有很多IP被列为了spamhaus这几类RBL当中。今天我们来说说如何对列为PBL的IP进行申诉。

1、首先到http://www.spamhaus.org/pbl/index.lasso的Look Up中对你邮件服务器使用的IP进行查询；


2、然后将得到查询的结果，告知被列的情况，如下图，可以看出我们的IP被PBL列入；


3、点击相关的记录，可以看到详细情况，如果需要申诉请点击"Remove an IP from PBL"；


4、进入自我移除的页面，当你做好相应的设定，并确定服务器不是开放中继，请点击"Remove an IP Address"继续；


5、在提交表单填入你需要申诉的ip地址，你的邮件地址（注意一定要可以正常收到邮件，因为它将收到5位数的验证码）及验证码，如下图：


6、请登录你刚输入的邮箱，你将收到一封由spamhaus发出的邮件，复制邮件中的五位数的验证码；

7、将五位数的验证码填入下图中：


8、这要就完成了移除申诉的过程．如下图所述，如果正常在30分种后将自动更新移除你的IP；

9、当你再查询时，你将发现你的IP不在PBL所列。


Tags - , , ]]> http://www.siutung.org/post/410/ <![CDATA[FreeBSD之iRedMail相关参数。]]> siutung <> Thu, 04 Feb 2010 22:07:26 +0000 http://www.siutung.org/post/410/ Admin of domain ooxxoo.com:
* Account: postmaster@ooxxoo.com
* Password: yourpassword

Note:
- This account is used only for system administrations, not a mail user.
- You can login iRedAdmin or PostfixAdmin with this account, login name
is full email address.

First mail user:
* Account: www@ooxxoo.com
* Password: yourpassword

Note:
- This account is a normal mail user.
- You can login webmail with this account, login name is full email address.

Mail Storage:
- Path:
+ /var/vmail
+ /var/vmail/vmail01

Apache & PHP:
* Configuration files:
- /usr/local/etc/apache22
- /usr/local/etc/apache22/Includes
- /usr/local/etc/php.ini
* Directories:
- /usr/local/www
- /usr/local/www/apache22/data

MySQL:
* Data directory:
- /var/lib/mysql
* RC script:
- /usr/local/etc/rc.d/mysql-server
* Log file:
- /var/log/mysqld.log
* SSL Cert keys:
- /etc/ssl/certs/iRedMail_CA.pem
- /etc/ssl/private/iRedMail.key
* See also:
- /install/iRedMail-0.6.0-beta1/conf/mysql_init.sql

Virtual Users:
- /install/iRedMail-0.6.0-beta1/conf/mysql_vmail.sql
- /install/iRedMail-0.6.0-beta1/samples/iredmail.sql

Postfix (basic):
* Configuration files:
- /usr/local/etc/postfix
- /usr/local/etc/postfix/aliases
- /usr/local/etc/postfix/main.cf
- /usr/local/etc/postfix/master.cf

Postfix (MySQL):
* Configuration files:
- /usr/local/etc/postfix/mysql_virtual_mailbox_domains.cf
- /usr/local/etc/postfix/mysql_transport_maps_domain.cf
- /usr/local/etc/postfix/mysql_transport_maps_user.cf
- /usr/local/etc/postfix/mysql_virtual_mailbox_maps.cf
- /usr/local/etc/postfix/mysql_virtual_mailbox_limit_maps.cf
- /usr/local/etc/postfix/mysql_virtual_alias_maps.cf
- /usr/local/etc/postfix/mysql_sender_login_maps.cf
- /usr/local/etc/postfix/mysql_sender_bcc_maps_domain.cf
- /usr/local/etc/postfix/mysql_sender_bcc_maps_user.cf
- /usr/local/etc/postfix/mysql_recipient_bcc_maps_domain.cf
- /usr/local/etc/postfix/mysql_recipient_bcc_maps_user.cf
Postfix (syslog):
* logrotate file: /etc/logrotate.d/maillog

Policyd:
* Configuration files:
- /usr/local/etc/postfix-policyd-sf.conf
* RC script:
- /usr/local/etc/rc.d/policyd
* Misc:
- /etc/cron.daily/policyd-cleanup
- crontab -l -u policyd


Dovecot:
* Configuration files:
- /usr/local/etc/dovecot.conf
* LDAP:
- /usr/local/etc/dovecot-ldap.conf
* MySQL:
- /usr/local/etc/dovecot-mysql.conf
* RC script:
- /usr/local/etc/rc.d/dovecot
* Log files:
- /etc/logrotate.d/dovecot
- /var/log/dovecot.log
- /var/log/sieve.log
* See also:
- /var/vmail/sieve/dovecot.sieve

ClamAV:
* Configuration files:
- /usr/local/etc/clamd.conf
- /usr/local/etc/freshclam.conf
- /etc/logrotate.d/clamav
* RC scripts:
- RHEL/CentOS:
+ /usr/local/etc/rc.d/clamd
+ /usr/local/etc/rc.d/freshclam
- Debian & Ubuntu:
+ /usr/local/etc/rc.d/clamav-daemon
+ /usr/local/etc/rc.d/clamav-freshclam
* Log files:
- /var/log/clamav/clamd.log
- /var/log/clamav/freshclam.log

DNS record for DKIM support:
; key#1, domain ooxxoo.com, /var/amavis/dkim/ooxxoo.com.pem
dkim._domainkey.ooxxoo.com. 3600 TXT (
"v=DKIM1; p="
"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQBtg4SGtzSu+1Hwu7SPe9IHgy"
"hxuKr1yl7IV1YWUXVOSG5XGAs4yTVLemIMeGrZEiDOdQYPhbTJ0sihjdFBV9hBqC"
"mXgXfVQAr9fp/q2HSS1Us5Nv1PjqYE2jZoTmJnYxe7eB77Lnn+3nNRws2XSmLt1z"
"qwJBY5jHPdWwByXdWwIDAQAB")

Amavisd-new:
* Configuration files:
- /usr/local/etc/amavisd.conf
- /usr/local/etc/postfix/master.cf
- /usr/local/etc/postfix/main.cf
* RC script:
- /usr/local/etc/rc.d/amavisd

SpamAssassin:
* Configuration files:
- /etc/mail/spamassassin/

- Rules:
* /usr/share/spamassassin/

WebMail(Roundcubemail):
* Configuration files:
- /usr/local/www/roundcubemail-0.3.1/
- /usr/local/www/roundcubemail-0.3.1/config/
* URL:
- http://52.0.13.14/mail/
- http://52.0.13.14/webmail/
* Login account:
- Username: www@ooxxoo.com, password: yourpassword
* See also:
- /usr/local/etc/apache22/Includes/roundcubemail.conf

phpMyAdmin:
* Configuration files:
- /usr/local/www/phpMyAdmin
- /usr/local/www/phpMyAdmin/config.inc.php
* Login account:
- Username: root, password: yourpassword.mysql
- Username: vmailadmin, password: PDIFPdf0hPxCjlEFFEAzlGqBChhLHU
* URL:
- https://52.0.13.14/phpmyadmin
* See also:
- /usr/local/etc/apache22/Includes/phpmyadmin.conf

PostfixAdmin:
* Configuration files:
- /usr/local/www/postfixadmin
- /usr/local/www/postfixadmin/config.local.php
- /usr/local/www/postfixadmin/config.inc.php
* Login account:
- Username: postmaster@ooxxoo.com, password: yourpassword
* URL:
- https://52.0.13.14/postfixadmin/
* See also:
- /usr/local/etc/apache22/Includes/postfixadmin.conf

Awstats:
* Configuration files:
- /usr/local/www/awstats/cgi-bin
- /usr/local/www/awstats/cgi-bin/awstats.model.conf
- /usr/local/www/awstats/cgi-bin/awstats.52.0.13.14.conf
- /usr/local/www/awstats/cgi-bin/awstats.mail.conf
- /usr/local/etc/apache22/Includes/awstats.conf
* Login account:
- Username: postmaster@ooxxoo.com, password: yourpassword
* URL:
- https://52.0.13.14/awstats/awstats.pl
- https://52.0.13.14/awstats/awstats.pl?config=52.0.13.14
- https://52.0.13.14/awstats/awstats.pl?config=mail
* Crontab job:
shell> crontab -l root


Tags - ]]>