Iptables prevent nmap scanning and binlog

iptables prevent nmap scanning
nmap Application ：

（1） Detect whether a group of hosts are online
（2） Scan host port , The network services provided by sniffer
（3） Infer the operating system used by the host

The configuration command is as follows ：

#iptables -F

#iptables -A INPUT -p tcp --tcp-flags ALL FIN,URG,PSH -j Drop

#iptables -A INPUT -p tcp --tcp-flags SYN,RST SYN,RST -j Drop

#iptables -A INPUT -p tcp --tcp-flags SYN,FIN SYN,FIN -j Drop

#iptables -A INPUT -p tcp --tcp-flags SYN,SYN --dport 80 -j Drop

binlog Implementation steps of incremental backup ：

binlog：

1. Turn on binary log
log_bin
server_id=50
#max_binlog_size= The number # The default is 1G, Super 1G Just create a new binlog journal
2. restart MySQL service
systemctl restart mysqld
3. Check whether logging is enabled
1) Access to database ,show master status; # View the native binlog Log files
position —> Offset —> Record the number of the command
2) see /var/lib/mysql You can see binlog Log file and log index file

Configuration command ：
1. Manually generate a new log file # Every binlog The offset of the log is from 154 Start
-flush logs or 　mysql -uroot -p123456 -e ‘flush logs’
-systemctl restart mysqld
-mysqldump

2. Clean up the log
1. Delete all logs before the specified log file purge master logs to “binlog file name ”
2. Delete all reset master;

3. Custom storage name
1. Configure in profile ,
bin_log=/mylog/rzc
2. Just restart the service