Iptables prevents nmap scanning and enables incremental backup of binlog

nmap Application ：

• Host detection
• Port scanning
• Version checking
• System detection
• Support the writing of detection script

We can make Linux Yes nmap Scan no response , utilize iptables Tools to filter network information , So that the system cannot respond to the information requested by the scan

The configuration command is as follows ：

 #iptables -F

  #iptables -A INPUT -p tcp --tcp-flags ALL FIN,URG,PSH -j Drop

  #iptables -A INPUT -p tcp --tcp-flags SYN,RST SYN,RST -j Drop

  #iptables -A INPUT -p tcp --tcp-flags SYN,FIN SYN,FIN -j Drop

  #iptables -A INPUT -p tcp --tcp-flags SYN,SYN --dport 80 -j Drop
 

binlog Implementation steps of incremental backup ：

1. Turn on binary log
log_bin(log-bin It's fine too )                            # log enable
server_id=50                                    #id Can only be 1-255
#max_binlog_size= The number                             # The default is 1G, Super 1G Just create a new binlog journal
2. restart MySQL service
systemctl restart mysqld
3. Check whether logging is enabled
1) Access to database ,show master status;                    # View the native binlog Log files
position ---> Offset ---> Record the number of the command
2) see /var/lib/mysql You can see binlog Log file and log index file

Configuration command ：
1. Manually generate a new log file                             # Every binlog The offset of the log is from 154 Start
    -flush logs or 　mysql -uroot -p123456 -e ‘flush logs’
    -systemctl restart mysqld
    -mysqldump

2. Clean up the log
    1. Delete all logs before the specified log file purge master logs to “binlog file name ”
    2. Delete all     reset master;

3. Custom storage name
    1. Configure in profile ,
    bin_log=/mylog/rzc
    2. Just restart the service