리눅스 웹사이트 구축을 위한 패키지 설치방법

이동: Home à os0101
주소: http://www.kernel.bz/os/01/os0101.htm
제목: 리눅스 웹사이트 구축을 위한 패키지 설치방법	저작권은 저자에게 있습니다
저자: 정재준(rgbi3307@nate.com)	최근수정일:2008-12-07

리눅스 웹사이트 구축을 위한 패키지 설치방법

설치버전: Linux 2.4.20-8 #1 Thu Mar 13 17:54:28 EST 2003 i686 i686 i386 GNU/Linux

RedHat Linux9의 모든 패키지(Full)를 설치한 다음에, 아래와 같은 순서로 작업한다.

1. MASQUERADE 설정

2. xinetd 설치

3. DNS 설정

4. FTP(ProFtp) 설치

5. MySql 설치

6. Apache_SSL_PHP 설치

7. Qmail 설치

1. MASQUERADE 설정

Linux 머신을 케이트웨이로 설정하여 Local Area Network를 구축한다. 이때, 네트워크 카드는 2개가 설치된다.

eth0는 DHCP로 설정

/etc/sysconfig/network-scripts/ifcfg-eth0 파일편집

DEVICE=eth0

BOOTPROTO=dhcp

ONBOOT=yes

ifup eth0 명령으로 첫번째 네트워크카드 설정

eth1는 192.168.0.1 내부 IP로 설정

/etc/sysconfig/network-scripts/ifcfg-eth1 파일편집

DEVICE=eth1

USERCTL=no

ONBOOT=yes

BOOTPROTO=none

BROADCAST=192.168.0.255

NETWORK=192.168.0.0

NETMASK=255.255.255.0

IPADDR=192.168.0.1

ifup eth1 명령으로 두번째 네트워크카드 설정 후, ifconfig 명령으로 설정내용 확인.

IP MASQUERADE (NAT) 실행

echo 1 > /proc/sys/net/ipv4/ip_forward

iptables -P FORWARD DROP

iptables -A FORWARD -i eth1 -j ACCEPT

iptables -A FORWARD -o eth1 -j ACCEPT

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

//iptables 확인

iptables -t nat -L

위의 실행내용을 /etc/rc.d/rc.local 파일에 저장하여 부팅시 자동으로 설정되도록 한다.

2. xinetd 설치

xinetd(eXtended InterNET services Daemon)를 설치하여 리눅스 네트워크 보안기능을 강화한다.

사이트: http://www.xinetd.org/

참고사이트: http://www.linuxlab.co.kr/docs/01-06-5.htm

설치버전: xinetd-2.3.12

xinetd 설치

//버전확인하여, 기존에 RPM으로 설치되어 있다면 삭제한다.

xinetd –version

rpm -qa | grep xinetd

rpm -e --nodeps xinetd

tar xvzf ./xinetd-2.3.12.tar.gz

cd xinetd-2.3.12

./configure --prefix=/usr --sysconfdir=/etc --with-loadavg --with-libwrap

make

make install

//환경설정 및 실행

cd xinetd

cp ./sample.conf /etc/xinetd.conf.sample

cd ..

cd contrib

cp ./xinetd /etc/rc.d/init.d/

/etc/rc.d/init.d/xinetd start

xinetd –version //버전확인

//디렉토리 접근 제한

chmod 600 /etc/xinetd.conf

chmod -R 600 /etc/xinetd.d/

//로그

#/var/log/xinetd_log

/etc/xinetd.conf 환경설정 파일

# Simple configuration file for xinetd

# Some defaults, and include /etc/xinetd.d/

defaults

{

instances = 60

log_type = SYSLOG authpriv

log_on_success = HOST PID

log_on_failure = HOST

cps = 25 30

}

includedir /etc/xinetd.d

/etc/xinetd.d/* 설정경로

amanda cups-lpd eklogin ipop3 pop3s rsh swat xinetd_d_bak

amandaidx daytime finger klogin proftpd rsync talk

amidxtape daytime-udp gssftp krb5-telnet qmail-pop3 servers telnet

chargen dbskkd-cdb imap kshell qmail-smtp services tftp.rpmsave

chargen-udp echo imaps ktalk rexec sgi_fam time

comsat echo-udp ipop2 ntalk rlogin sshd time-udp

/etc/rc.d/rc.local 파일에 저장하여 부팅시 xinetd 자동실행

/etc/rc.d/init.d/xinetd start

3. DNS 설정

DNS(Data Name Server)는 리눅스에서 설치된 것을 활용하여 설정한다.

/etc/hosts 파일편집

# Do not remove the following line, or various programs

# that require network functionality will fail.

127.0.0.1 localhost localhost.localdomain

118.33.196.89 demian.bz demian.bz

/etc/host.conf 파일편집

order hosts,bind

multi off

nospoof on

trim demian.bz

/etc/resolv.conf 파일확인

; generated by /sbin/dhclient-script

search kornet

nameserver 168.126.63.1

nameserver 168.126.63.2

/etc/named.conf 환경설정 파일편집

// a caching only nameserver config

zone "." IN {

type hint;

file "named.ca";

};

zone "localhost" IN {

type master;

file "localhost.zone";

allow-update { none; };

};

zone "0.0.127.in-addr.arpa" IN {

type master;

file "named.local";

allow-update { none; };

};

controls {

inet * allow { any ; } keys { demian ; };

};

key "demian" {

algorithm hmac-md5;

secret "hy4WmmLIV6uM25X0GLJzHQ==";

};

zone "demian.bz" {

type master;

file "demian.bz";

//allow-update { demian; }; //error

};

zone "196.33.118.in-addr.arpa" {

type master;

file "demian.rev";

//allow-update { demian; }; //error

};

zone "whiteoffice.net" {

type master;

file "whiteoffice.net";

//allow-update { whiteoffice; }; //error

};

/var/named/* 경로안의 파일들

-rw-r--r-- 1 root root 363 11월 28 14:21 demian.bz

-rw-r--r-- 1 root root 222 11월 28 10:23 demian.rev

-rw-r--r-- 1 named named 195 1월 25 2003 localhost.zone

-rw-r--r-- 1 named named 2499 1월 25 2003 named.ca

-rw-r--r-- 1 named named 433 1월 25 2003 named.local

-rw-r--r-- 1 root root 282 11월 28 14:23 whiteoffice.net

/var/named/demian.bz 파일편집

$TTL 86400

@ IN SOA ns.demian.bz. jungjj.demian.bz. (

1 ;Serial

43200 ;Refresh

3600 ;Retry

604800 ;Expire

86400 ) ;TTL

IN NS ns1.demian.bz.

IN NS ns2.demian.bz.

IN NS ns3.whiteoffice.net.

IN MX 10 demian.bz.

@ IN A 118.33.196.89

www IN A 118.33.196.89

ftp IN CNAME www

crm IN A 118.33.196.89

/var/named/demian.rev 파일편집

$TTL 43200

@ IN SOA ns.demian.bz. jungjj.demian.bz. (

2 ;Serial

43200 ;Refresh

3600 ;Retry

604800 ;Expire

86400 ) ;TTL

IN NS ns1.demian.bz.

IN NS ns2.demian.bz.

89 IN PTR ns.demian.bz.

89 IN PTR www

/var/named/whiteoffice.net 파일편집

$TTL 86400

@ IN SOA ns.whiteoffice.net. jungjj.whiteoffice.net. (

3 ;Serial

43200 ;Refresh

3600 ;Retry

604800 ;Expire

86400 ) ;TTL

IN NS ns3.whiteoffice.net.

IN MX 10 whiteoffice.net.

@ IN A 61.100.180.38

www IN A 61.100.180.38

ftp IN CNAME www

DNS 실행 및 확인

//DNS 실행

/etc/rc.d/init.d/named start

ps aux | grep named

//설정확인

host demian.bz

host www.demian.bz

host crm.demian.bz

host whiteoffice.net

host www.whiteoffice.net

host 118.33.196.89 //Host 89.196.33.118.in-addr.arpa not found: 3(NXDOMAIN)

nslookup –sil

//dnssec-keygen -a hmac-md5 -b 128 -n HOST activemart.

//cat Kactivemart.+157+01756.private

/etc/rc.d/rc.local 파일에 등록하여 부팅시 자동실행

/etc/rc.d/init.d/named start

4. FTP(ProFtp) 설치

사이트: http://www.proftpd.org/

설치버전: proftpd-1.2.4

ProFtp 설치

//이미 설치되어 있는 FTP RPM들이 있으면 삭제함

rpm -qa | grep ftp

rpm -e --nodeps ncftp-3.0.2-1

rpm -e --nodeps anonftp-4.0-4

rpm -e --nodeps ftp-0.17-7

//설치

tar xvzf ./proftpd-1.2.4.tar.gz

cd proftpd-1.2.4

./configure --prefix=/usr/local/proftpd

make

make install

/usr/local/proftpd/etc/proftpd.conf 환경설정 파일편집

# This is a basic ProFTPD configuration file (rename it to

# 'proftpd.conf' for actual use. It establishes a single server

# and a single anonymous login. It assumes that you have a user/group

# "nobody" and "ftp" for normal operation and anon.

ServerName "whiteoffice FTP service"

#ServerType standalone

ServerType inetd

DefaultServer on

# Port 21 is the standard FTP port.

Port 21

# Umask 022 is a good standard umask to prevent new dirs and files

# from being group and world writable.

Umask 022

# To prevent DoS attacks, set the maximum number of child processes

# to 30. If you need to allow more than 30 concurrent connections

# at once, simply increase this value. Note that this ONLY works

# in standalone mode, in inetd mode you should use an inetd server

# that allows you to limit maximum number of processes per service

# (such as xinetd)

MaxInstances 60

# Set the user and group that the server normally runs at.

User nobody

Group nobody

RootLogin off

DefaultRoot ~ !whiteoffice

# Normally, we want files to be overwriteable.

AllowOverwrite on

</Directory>

# A basic anonymous configuration, no upload directories.

User ftp

Group ftp

# We want clients to be able to login with "anonymous" as well as "ftp"

UserAlias anonymous ftp

# Limit the maximum number of anonymous logins

MaxClients 9999 "MaxClients %m"

# We want 'welcome.msg' displayed at login, and '.message' displayed

# in each newly chdired directory.

DisplayLogin welcome.msg

DisplayFirstChdir .message

# Limit WRITE everywhere in the anonymous chroot

DenyAll

</Limit>

</Anonymous>

/etc/xinetd.d/proftpd 파일편집(ServerType inetd로 설정시)

service ftp

{

disable = no

flags = REUSE

protocol = tcp

socket_type = stream

instances = 30

wait = no

user = root

# server = /usr/sbin/in.proftpd

server = /usr/local/proftpd/sbin/proftpd

port = 21

log_on_success = HOST PID

}

xinetd에서 ProFtpd 실행

cd /etc/xinetd.d/

ln -s ./proftpd /usr/sbin/in.proftpd

//xinetd로 실행

/etc/rc.d/init.d/xinetd restart

//실행확인

telnet localhost 21

Trying 127.0.0.1...

Connected to localhost (127.0.0.1).

Escape character is '^]'.

220 ProFTPD 1.2.4 Server (whiteoffice FTP service) [demian.bz]

5. MySql 설치

사이트: http://www.mysql.org (http://dev.mysql.com/)

설치버전: mysql-3.23.58

MySql 설치

tar xvzf mysql-3.23.58.tar.gz

cd mysql-3.23.58

./configure --prefix=/usr/local/mysql --with-charset=euc_kr --localstatedir=/usr/local/mysql/data \

--with-unix-socket-path=/usr/local/mysql/tmp/mysql.sock

make

make install

//DB생성 및 실행

./scripts/mysql_install_db

/usr/local/mysql/bin/safe_mysqld --user=root &

//실행확인

ps aux | grep mysql

//접근암호 설정

/usr/local/mysql/bin/mysqladmin -u root -p password 'passwd'

/usr/local/mysql/bin/mysqladmin -u root -h whiteoffice.net -p password 'passwd'

/etc/rc.d/rc.local 파일에 등록하여 부팅시 MySql 자동실행

/usr/local/mysql/bin/safe_mysqld --user=root &

6. Apache_SSL_PHP 설치

아파치 사이트: http://www.apache.org/

OpenSSL 사이트: http://www.openssl.org/

ModSSL 사이트: http://www.modssl.org/

PHP 사이트: http://www.php.net/

설치버전:

libiconv-1.9.1

openssl-0.9.6j

mod_ssl-2.8.15-1.3.28

apache_1.3.28

php-4.3.3

설치하기

tar xvzf libiconv-1.9.1.tar.gz

tar xvzf openssl-0.9.6j.tar.gz

tar xvzf mod_ssl-2.8.15-1.3.28.tar.gz

tar xvzf apache_1.3.28.tar.gz

tar xvzf php-4.3.3.tar.gz

//libiconv (PHP 라이브러리 설치, --with-iconv=/usr/local)

cd libiconv-1.9.1

./configure --prefix=/usr/local

make

make install

//openssl 설치

cd ..

cd openssl-0.9.6j

./Configure

./config

make

make install

//mod_ssl 설치

cd ..

cd mod_ssl-2.8.15-1.3.28

./configure --with-apache=../apache_1.3.28

//apache 설치준비

cd ..

cd apache_1.3.28

./configure --prefix=/usr/local/apache

//php4 설치

cd ..

cd php-4.3.3

CFLAGS='-O2 -I/usr/local/ssl/include' ./configure --with-apache=../apache_1.3.28 \

--with-mysql=/usr/local/mysql --with-config-file-path=/usr/local/lib --enable-memory-limit=yes \

--enable-debug=no --with-iconv=/usr/local

gmake

gmake install

//apache 설치

cd ..

cd apache_1.3.28

SSL_BASE=/usr/local/ssl ./configure --prefix=/usr/local/apache \

--enable-module=ssl --activate-module=src/modules/php4/libmodphp4.a

make

//라이브러리 오류 발생

//재빌드

SSL_BASE=/usr/local/ssl ./configure --prefix=/usr/local/apache \

--enable-module=ssl --activate-module=src/modules/php4/libphp4.module \

--activate-module=src/modules/php4/libmodphp4.a

make

//라이브러리 오류 발생

cp ./src/modules/php4/ibmodphp4.a ./src/modules/php4/libphp4.a

//재빌드

SSL_BASE=/usr/local/ssl ./configure --prefix=/usr/local/apache \

--enable-module=ssl --activate-module=src/modules/php4/libphp4.a \

make

make certificate

make install

//아파치 실행

#/usr/local/apache/bin/apachectl start

/usr/local/apache/bin/apachectl startssl

ps aux | grep apache

//PHP standalone 설치

cd ..

cd php-4.3.3

./configure --prefix=/usr/local/php --with-mysql=/usr/local/mysql \

--with-config-file-path=/usr/local/lib --enable-memory-limit=yes \

--enable-debug=no --with-iconv=/usr/local

gmake

gmake install

/etc/rc.d/rc.local 파일에 등록하여 부팅시 아파치 자동실행

/usr/local/apache/bin/apachectl start

7. Qmail 설치

사이트: http://www.qmail.org/

설치버전:

daemontools-0.76 (참조: http://cr.yp.to/daemontools.html)

ucspi-tcp-0.88 (참조: http://cr.yp.to/ucspi-tcp.html)

qmail-1.03

checkpassword-0.81

설치파일 다운로드

wget http://www.baslug.org/vega/qmail/file/daemontools-0.76.tar.gz

wget http://www.baslug.org/vega/qmail/file/ucspi-tcp-0.88.tar.gz

wget http://www.baslug.org/vega/qmail/file/qmail-1.03.tar.gz

wget http://www.baslug.org/vega/qmail/file/vpopmail-5.2.1.tar.gz

wget http://www.baslug.org/vega/qmail/file/autorespond-2.0.2.tar.gz

wget http://www.baslug.org/vega/qmail/file/qmailadmin-1.0.6.tar.gz

wget http://www.baslug.org/vega/qmail/file/ezmlm-0.53.tar.gz

wget http://www.baslug.org/vega/qmail/file/idx.shupp.patch.gz

wget http://www.baslug.org/vega/qmail/file/sqwebmail-3.6.0.tar.bz2

wget http://www.baslug.org/vega/qmail/file/init-scripts.tar.gz

wget http://www.baslug.org/vega/qmail/file/vega.patch

설치진행

//daemontools 설치

tar -xvzf ./daemontools-0.76.tar.gz

cd admin/daemontools-0.76/src

patch < ../../../vega.patch

#patching file error.h

cd ..

package/install

//ucspi-tcp 설치

cd ..

tar -xvzf ./ucspi-tcp-0.88.tar.gz

cd ucspi-tcp-0.88

patch < ../vega.patch

#patching file error.h

#Hunk #1 succeeded at 1 (offset -2 lines).

make

make setup check

//qmail 설치

cd ..

mkdir /var/qmail

tar -xvzf ./qmail-1.03.tar.gz

cd qmail-1.03

vi INSTALL.ids

INSTALL.ids 파일 편집(qmail 사용자계정)

groupadd nofiles

useradd -g nofiles -d /var/qmail/alias alias

useradd -g nofiles -d /var/qmail qmaild

useradd -g nofiles -d /var/qmail qmaill

useradd -g nofiles -d /var/qmail qmailp

groupadd qmail

useradd -g qmail -d /var/qmail qmailq

useradd -g qmail -d /var/qmail qmailr

useradd -g qmail -d /var/qmail qmails

qmail 설치

chmod 755 ./INSTALL.ids

./INSTALL.ids

#for vpopmail

#groupadd vchkpw

#useradd -g vchkpw vpopmail

patch < /var/src/tar/vega.patch

#patching file error.h

#Hunk #1 succeeded at 1 (offset -2 lines).

make

make setup check

qmail 환경설정

./config

#./config-fast whiteoffice.net

./config-fast demian.bz

cd ~alias/

touch .qmail-postmaster .qmail-mailer-daemon .qmail-root

chmod 644 .qmail*

rm /etc/rc.d/rc3.d/*sendmail*

rm /etc/rc.d/rc5.d/*sendmail*

mv /usr/sbin/sendmail /usr/sbin/sendmail.old

mv /usr/lib/sendmail /usr/lib/sendmail.old

killall -TERM sendmail

ln -s /var/qmail/bin/sendmail /usr/lib/sendmail

ln -s /var/qmail/bin/sendmail /usr/sbin/sendmail

mkdir -p /var/log/qmail/qmail-pop3

mkdir /var/log/qmail/qmail-smtp

mkdir /var/log/qmail/qmail-local

mkdir /var/log/qmail/qmail-send

mkdir /var/lock/qmail-pop3

mkdir /var/lock/qmail-smtp

chown qmaill /var/log/qmail –R

cp /var/qmail/boot/home /var/qmail/rc

/var/qmail/rc 내용편집

#!/bin/sh

# Using splogger to send the log through syslog.

# Using qmail-local to deliver messages to ~/Mailbox by default.

#exec env - PATH="/var/qmail/bin:$PATH" \

#qmail-start ./Mailbox splogger qmail

exec env - PATH="/var/qmail/bin:$PATH" \

qmail-start "`cat /var/qmail/control/defaultdelivery`"

/var/qmail/control/defaultdelivery 파일생성

./maildir/

qmail DNS 확인

/var/qmail/control/rcpthosts 확인

localhost

ns.demian.bz

demian.bz

/var/qmail/control/locals 확인

localhost

ns.demian.bz

demian.bz

사용자계정 생성시 qmail 경로 자동 생성

/var/qmail/bin/maildirmake /etc/skel/maildir

/etc/xinetd.d/qmail-smtp 파일 생성

service smtp

{

disable = no

flags = REUSE NAMEINARGS

protocol = tcp

socket_type = stream

wait = no

user = qmaild

server = /var/qmail/bin/tcp-env

server_args = tcp-env /var/qmail/bin/qmail-smtpd

}

/etc/xinetd.d/qmail-pop3 파일 생성

service pop3

{

disable = no

flags = REUSE NAMEINARGS

protocol = tcp

socket_type = stream

wait = no

user = root

server = /var/qmail/bin/qmail-popup

server_args = qmail-popup demian.bz /bin/checkpassword /var/qmail/bin/qmail-pop3d maildir

}

qmail 실행

/etc/rc.d/init.d/xinetd restart

csh -cf '/var/qmail/rc &'

ps aux | grep qmail*

qmail 실행데몬 확인

qmails 7990 0.4 0.1 1396 332 pts/0 S 11:15 0:00 [qmail-send]

root 7992 0.0 0.1 1360 276 pts/0 S 11:15 0:00 qmail-lspawn ./maildir/

qmailr 7993 0.0 0.1 1356 276 pts/0 S 11:15 0:00 [qmail-rspawn]

qmailq 7994 0.0 0.1 1352 288 pts/0 S 11:15 0:00 [qmail-clean]

qmail 접속 확인

telnet localhost 25

#Trying 127.0.0.1...

#Connected to localhost (127.0.0.1).

#Escape character is '^]'.

#220 demian.bz ESMTP Postfix

/etc/rc.d/rc.local 파일에 등록하여 부팅시 qmail 자동실행

#running qmail local

csh -cf '/var/qmail/rc &'

qmail 기타(로그 스크립트) 환경설정

//var/src/tar

cd /var/src

tar -xzf tar/init-scripts.tar.gz

cp init-scripts/rc /var/qmail/rc

chmod 755 /var/qmail/rc

mkdir /var/log/qmail

echo ./Maildir/ >/var/qmail/control/defaultdelivery

cp init-scripts/qmailctl /var/qmail/bin/

chmod 755 /var/qmail/bin/qmailctl

ln -s /var/qmail/bin/qmailctl /usr/bin

# Alcuni programmi hanno bisogno di sendmail :-)

ln -s /var/qmail/bin/sendmail /usr/sbin/sendmail

ln -s /var/qmail/bin/sendmail /usr/lib/sendmail

# Script per il servizio qmail

mkdir -p /var/qmail/supervise/qmail-send/log

mkdir -p /var/qmail/supervise/qmail-smtpd/log

mkdir -p /var/qmail/supervise/qmail-pop3d/log

mkdir -p /var/qmail/supervise/qmail-pop3ds/log

chmod +t /var/qmail/supervise/qmail-send

chmod +t /var/qmail/supervise/qmail-smtpd

chmod +t /var/qmail/supervise/qmail-pop3d/log

chmod +t /var/qmail/supervise/qmail-pop3ds/log

cp /var/src/init-scripts/send.run /var/qmail/supervise/qmail-send/run

cp /var/src/init-scripts/send.log.run /var/qmail/supervise/qmail-send/log/run

cp /var/src/init-scripts/smtpd.run /var/qmail/supervise/qmail-smtpd/run

cp /var/src/init-scripts/smtpd.log.run /var/qmail/supervise/qmail-smtpd/log/run

cp /var/src/init-scripts/pop3d.run /var/qmail/supervise/qmail-pop3d/run

cp /var/src/init-scripts/pop3d.log.run /var/qmail/supervise/qmail-pop3d/log/run

cp /var/src/init-scripts/pop3ds.run /var/qmail/supervise/qmail-pop3ds/run

cp /var/src/init-scripts/pop3ds.log.run /var/qmail/supervise/qmail-pop3ds/log/run

echo 20 > /var/qmail/control/concurrencyincoming

chmod 644 /var/qmail/control/concurrencyincoming

chmod 755 /var/qmail/supervise/qmail-send/run

chmod 755 /var/qmail/supervise/qmail-send/log/run

chmod 755 /var/qmail/supervise/qmail-smtpd/run

chmod 755 /var/qmail/supervise/qmail-smtpd/log/run

chmod 755 /var/qmail/supervise/qmail-pop3d/run

chmod 755 /var/qmail/supervise/qmail-pop3d/log/run

chmod 755 /var/qmail/supervise/qmail-pop3ds/run

chmod 755 /var/qmail/supervise/qmail-pop3ds/log/run

mkdir -p /var/log/qmail/smtpd

mkdir -p /var/log/qmail/pop3d

mkdir -p /var/log/qmail/pop3ds

chown qmaill /var/log/qmail /var/log/qmail/smtpd

chown qmaill /var/log/qmail/pop3d /var/log/qmail/pop3ds

ln -s /var/qmail/supervise/qmail-send /var/qmail/supervise/qmail-smtpd /service

# Verifica che tutto funzioni lanciando

qmailctl stat

/service/qmail-send: up (pid 1000) 2 seconds

/service/qmail-send/log: up (pid 1001) 2 seconds

/service/qmail-smtpd: up (pid 1002) 1 seconds

/service/qmail-smtpd/log: up (pid 1003) 1 seconds

/etc/rc.d/rc.local 파일

#!/bin/sh

# This script will be executed *after* all the other init scripts.

# You can put your own initialization stuff in here if you don't

# want to do the full Sys V style init stuff.

touch /var/lock/subsys/local

hostname demian.bz

#set MASQ

echo 1 > /proc/sys/net/ipv4/ip_forward

iptables -P FORWARD DROP

iptables -A FORWARD -i eth1 -j ACCEPT

iptables -A FORWARD -o eth1 -j ACCEPT

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

#running xinetd

/etc/rc.d/init.d/xinetd start

#running DNS

/etc/rc.d/init.d/named start

#running qmail local

csh -cf '/var/qmail/rc &'

#running mysql

#/etc/rc.d/init.d/mysql.server start

/usr/local/mysql/bin/safe_mysqld --user=root &

#running apache

/usr/local/apache/bin/apachectl start


이동: Home à os0101
주소: http://www.kernel.bz/os/01/os0101.htm
제목: 리눅스 웹사이트 구축을 위한 패키지 설치방법	저작권은 저자에게 있습니다
저자: 정재준(rgbi3307@nate.com)	최근수정일:2008-12-07