If you enable MySQL database on the server, MySQL database needs to pay attention to security settings:
remove all of the default user mysql, leaving only local root account for The root user adds a complex password. Give the ordinary user updatedeletealertcreatedrop permission, and limit to a specific database, especially to avoid the ordinary customer has permission to operate on the mysql database. Check the mysql.user table, cancel the unnecessary user's shutdown_priv, relo
ad_priv, process_priv and File_priv permissions. These permissions may leak more server information including non-mysql other information. You can set up a startup user for mysql, which has permissions only for the mysql directory. Set the permissions of the data database of the installation directory (this directory stores the data information of the mysql database). For the mysql installation directory, add reads, column directories, and execute permissions to users.
Serv-u Security Issues:
The installer tries to use the latest version, avoiding the default installation directory, setting the permissions of the serv-u directory, and setting a complex administrator password. Modify the banner information of serv-u, set the passive mode port range (4001— 4003) to make relevant security settings in the local server settings: including checking anonymous passwords, disabling anti-timeout scheduling, intercepting “FTP bounce”attacks and FXP, For users who have connected more than 3 times in 30 seconds, they intercept 10 minutes. The settings in the domain are: Require complex passwords, the directory uses only lowercase letters, and the Advanced setting cancels the date the file is allowed to be changed using the MDTM command.
Change the startup user of serv-u: Create a new user in the system and set a complex password, which does not belong to any group. Give the user the full control of the servu installation directory. To establish an FTP root directory, you need to give the user full control of the directory, because all ftp users upload, delete, and change files are inherited by the user, otherwise the file cannot be manipulated. In addition, you need to give the user the read permission of the upper directory above the directory, otherwise it will appear 530 Not logged in, home directory does not exist. For example, when testing, the ftp root directory is d:soft, you must give d disk the user's read permission, in order to safely cancel the inherited permissions of other folders on the d disk. Generally, there is no such problem when using the default system startup, because system generally has these permissions.
Windows system, you must set up IIS support Rewrite. Then start configuring IIS Rewrite1,
The steps to create a Windows NLB cluster are as follows: 1. Install the network load bal
IIS (Internet Information Server, Internet Information Server) is a Web service component provided b
Initial contact with Windows server 2003 server friends when using IIS, it is not clear abo
The main factor affecting IIS performance
Windows host wordpress pseudo-static setting
Set WEB server IIS write permission Protection hacking
IIS installation and website release under Win8
Iis7, iis8 configuration backup and restore tutorial
Computer Tutorial: Large WEB Server
IIS time format setting problem (ASP.net date format is wrong)
Getting Started Tutorial: IIS 5.0 builds a web server
IIS FAQ for creating a secure IIS server
Win7 can not install cctvbox accelerator solution
How to copy files in batches under Windows
Analyze BCD management tools under Windows 7
Computer masters to share the fun "open" mode skills
Multiple ways to make Windows XP operating system more secure
How to solve the problem of no sound in the WIN7 system HDMI connection TV
Diablo 3 successfully rushed into the top ten of game sales. Domestic players contributed
How to set time automatic synchronization in Win8 system