{"id":37,"date":"2023-06-05T12:45:31","date_gmt":"2023-06-05T04:45:31","guid":{"rendered":"http:\/\/pro369.com\/linux\/?p=37"},"modified":"2019-03-27T10:02:00","modified_gmt":"2019-03-27T10:02:00","slug":"linux%e4%b8%bb%e6%a9%9f%e4%bc%ba%e6%9c%8d%e5%99%a8%e6%9e%b6%e8%a8%ad%e6%8a%80%e8%a1%93%ef%bc%88%e9%98%b2%e7%81%ab%e7%89%86%e7%ae%a1%e5%88%b6%e9%80%a3%e7%b7%9a%ef%bc%89","status":"publish","type":"post","link":"https:\/\/por.tw\/linux\/linux%e4%b8%bb%e6%a9%9f%e4%bc%ba%e6%9c%8d%e5%99%a8%e6%9e%b6%e8%a8%ad%e6%8a%80%e8%a1%93%ef%bc%88%e9%98%b2%e7%81%ab%e7%89%86%e7%ae%a1%e5%88%b6%e9%80%a3%e7%b7%9a%ef%bc%89\/","title":{"rendered":"Linux\u4e3b\u6a5f\u4f3a\u670d\u5668\u67b6\u8a2d\u6280\u8853\uff08\u9632\u706b\u7246\u7ba1\u5236\u9023\u7dda\uff09"},"content":{"rendered":"

Linux\u4e3b\u6a5f\u4f3a\u670d\u5668\u67b6\u8a2d\u6280\u8853\uff08\u9632\u706b\u7246\u7ba1\u5236\u9023\u7dda\uff09<\/strong><\/span><\/p>\n

\u672c\u6587\u4e3b\u8981\u662f\u6cbf\u7e8c\u300c\u6a4b\u63a5\u5f0f\u9632\u706b\u7246\u300d\u53ca\u300cNAT\u4e3b\u6a5f\u300d\u5169\u6587\uff0c\u8aaa\u660e\u5176\u5f8c\u7e8c\u7684\u8cc7\u5b89\u63a7\u7ba1\u4f5c\u6cd5\u3002\u7531\u65bc\u9019\u5169\u8005\u7686\u662f\u4f7f\u7528 OB2D \u67b6\u8a2d\uff0c\u4e26\u5229\u7528 iptables \u4f86\u505a\u70ba\u5c01\u5305\u904e\u6ffe\u7684\u6a5f\u5236\uff0c\u56e0\u6b64\uff0c\u4ed6\u5011\u5167\u90e8\u7db2\u8def\u7684\u7d42\u7aef\u8a2d\u5099\u63a7\u7ba1\u65b9\u5f0f\u662f\u4e00\u6a23\u7684\u3002<\/p>\n

\u5176\u5be6\u5927\u90e8\u5206\u7684\u7ba1\u5236\u63aa\u65bd\u90fd\u53ea\u7ba1\u5230\u300c\u541b\u5b50\u300d\u800c\u5df2\uff0c\u5c0d\u6280\u8853\u9ad8\u8d85\u7684\u300c\u5c0f\u4eba\u300d\u7121\u6548\u3002\u4e0b\u9762\u6709\u4e00\u7bc7\u53ef\u4ee5\u8b93\u7db2\u7ba1\u5011\u77e5\u5df1\u77e5\u5f7c\u7684\u597d\u6587\u300c\u5982\u4f55\u7a81\u7834\u5340\u57df\u7db2\u8def\u5c0d\u4e0a\u7db2\u7684\u9650\u5236\u300d\uff0c\u5927\u5bb6\u5148\u770b\u4e00\u4e0b\uff1a http:\/\/forum.slime.com.tw\/thread165780.html<\/a>
\n\u770b\u5b8c\u53ea\u6709\u4e00\u500b\u611f\u60f3\uff0c\u5982\u679c\u6211\u7684\u6280\u8853\u9023\u300c\u52a0\u5bc6\u8df3\u677f\uff08FLAT\uff09\u300d\u90fd\u9632\u5f97\u4e86\uff0c\u90a3\u4e0d\u5c31\u53ef\u4ee5\u958b\u516c\u53f8\u8ce3\u90a3\u7a2e\u4e00\u53f0\u6578\u767e\u842c\u7684 IPS(\u5165\u4fb5\u9632\u79a6\u7cfb\u7d71\uff09\u4e86\u55ce\uff1f\u7b2c\u4e8c\u500b\u611f\u60f3\uff0c\u96e3\u602a\u90a3\u4e9b\u6578\u767e\u842c\u7684 IPS \u8a2d\u5b9a\u756b\u9762\u8d85\u7d1a\u8907\u96dc\u3002<\/p>\n

\"\"<\/p>\n

\u901a\u8a0a\u57e0\u7ba1\u5236<\/p>\n

\u300c\u901a\u8a0a\u57e0\u662f\u5426\u8981\u7ba1\u5236?\u300d\u9019\u500b\u554f\u984c\uff0c\u898b\u4eba\u898b\u667a\uff0c\u5176\u5be6\u6c92\u6709\u6a19\u6e96\u7b54\u6848\u3002\uff0c\u56e0\u70ba\u5404\u7db2\u7ad9\u7686\u5df2\u5efa\u7f6e\u59a5\u786c\u9ad4\u9632\u706b\u7246\uff0c\u6240\u4ee5\u7db2\u7ad9\u5167\u662f\u5426\u9084\u8981\u7ba1\u5236\u901a\u8a0a\u57e0\u4fbf\u662f\u500b\u96e3\u984c\u3002\u4ee5\u4e0b\u7b46\u8005\u5217\u793a\u4e00\u4e0b\u5404\u81ea\u7684\u512a\u7f3a\u9ede\uff0c\u4ee5\u7b46\u8005\u7684\u50f9\u503c\u89c0\u66a8 NGN \u5c08\u6848\u5efa\u8b70\u67b6\u8a2d NAT \u4e3b\u6a5f\u8003\u91cf\u4e0b\uff0c\u7b46\u8005\u6bd4\u8f03\u5efa\u8b70\u7db2\u7ad9\u63a1\u7528\u9810\u8a2d\u4e0d\u7ba1\u5236\u7684\u4f5c\u6cd5\u3002<\/p>\n

* \u9810\u8a2d\u7ba1\u5236\uff0c\u53ea\u958b\u653e\u90e8\u5206
\no \u505a\u6cd5\uff1a\u53ef\u53c3\u8003 http:\/\/myip.tw\/b2ddoc\/LinuxBase\/m7_security.html \u6709\u95dc NAT \u901a\u8a0a\u57e0\u904e\u6ffe\u7b49\u76f8\u95dc\u90e8\u5206\u6587\u4ef6
\no \u512a\u9ede\uff1a\u82e5\u5167\u90e8\u6a5f\u5668\u4e2d\u6bd2\uff0c\u7121\u6cd5\u5c0d\u5916\u6383\u63cf\u5165\u4fb5\uff0c\u7db2\u8def\u9694\u96e2\u6548\u679c\u8f03\u597d\u3002
\no \u7f3a\u9ede\uff1a\u5fc5\u9808\u5145\u5206\u8003\u616e\u5404\u7a2e\u9810\u8a2d\u72c0\u6cc1\uff0c\u82e5\u5c11\u958b\u4e00\u5169\u7d44\u901a\u8a0a\u57e0\uff0c\u9020\u6210\u8a2d\u5099\u7121\u6cd5\u9023\u7dda\uff0c\u4e5f\u662f\u4e00\u7a2e\u56f0\u64fe\u3002
\n* \u9810\u8a2d\u4e0d\u7ba1
\no \u505a\u6cd5\uff1aNAT\u4e3b\u6a5f\u90e8\u5206\uff0c\u53ea\u8981\u505a\u5230\u555f\u52d5\u5c01\u5305\u8f49\u9001\uff0c\u5176\u9918\u901a\u8a0a\u57e0\u7684\u7ba1\u7406\uff0c\u4fdd\u7559\u5176\u9810\u8a2d\u7684\u8a2d\u5b9a\u3002
\no \u512a\u9ede\uff1a\u7c21\u55ae\u597d\u8a2d\uff0c\u76f8\u5bb9\u6027\u9ad8
\no \u7f3a\u9ede\uff1a\u7121\u6cd5\u5b8c\u5168\u9694\u96e2\u5167\u5916\u7db2\u6bb5<\/p>\n

\u9023\u7dda\u72c0\u6cc1\u6aa2\u8996
\n\u6d41\u91cf\u6aa2\u8996<\/p>\n

BandWidthd \u662f\u4e00\u5957\u7c21\u6613\u7684\u6d41\u91cf\u76e3\u63a7\u8edf\u9ad4\uff0c\u53ea\u8981\u555f\u52d5\u5f8c\uff0c\u5b83\u6703\u7522\u751f\u65e5\u3001\u9031\u3001\u6708\u7684 TOP 20 IP \u6d41\u91cf\u8868\uff0c\u4e26\u88fd\u6210\u7db2\u9801\uff0c\u6211\u5011\u53ea\u8981\u5efa\u7acb\u8d77\u7db2\u9801\u9023\u7d50\uff0c\u4e26\u8a2d\u59a5\u9023\u7dda\u9650\u5236\uff0c\u4fbf\u53ef\u5b89\u5fc3\u7684\u63d0\u4f9b\u7d66\u7db2\u7ba1\u4eba\u54e1\u4e4b\u91cd\u8981\u53c3\u8003\u3002\u503c\u5f97\u6ce8\u610f\u7684\u662f\uff0c\u5b83\u5fc5\u9808\u67b6\u5728\u6d41\u91cf\u7684\u54bd\u5589\u9ede\uff08\u5982 NAT \u6216\u6a4b\u63a5\u5f0f\u9632\u706b\u7246\uff09\u4e0a\uff0c\u7576\u6240\u6709\u5167\u7db2\u7684\u7db2\u8def\u5c01\u5305\u7686\u7d93\u7531\u5b83\u9032\u51fa\uff0c\u6240\u6293\u7684\u6d41\u91cf\u624d\u662f\u78ba\u5be6\u6709\u7528\u7684\u8cc7\u6599\u3002<\/p>\n

* \u5b89\u88dd bandwidthd
\nroot@nat:~# apt-get install bandwidthd<\/p>\n

Interface to listen on: eth1\u00a0\u00a0 \uff08BridgeMode \u4e5f\u4e00\u6a23\uff09
\nSubnets to log details about: 192.168.110.0\/24\u00a0\u00a0 \uff08BridgeMode \u6539\u6210\u5be6\u9ad4 IP\uff0c\u4f8b\uff1a 163.26.182.0\/24\uff09
\nRecover old data from logs on restart? <\u662f><\/p>\n

* \u8a3b\u89e3
\no \u8a3b1: Interface –> \u865b\u64ec IP \u7684\u7db2\u5361, \u4f8b: eth1
\no \u8a3b2: Subnets –> \u8981\u76e3\u807d\u7684\u7db2\u6bb5, \u4f9d\u865b\u64ec IP \u6240\u8a2d\u5b9a\u7684\u7db2\u6bb5\u70ba\u6e96\uff0c\u4f8b\uff1a 192.168.110.0\/24<\/p>\n

* \u5efa\u7acb \/etc\/bandwidthd\/bandwidthd.conf\uff0c\u4ee5\u4e0b\u70ba\u53c3\u8003\u6a94\uff0c\u8acb\u5be6\u6cc1\u4fee\u6539\u5167\u5bb9<\/p>\n

####################################################
\n# Bandwidthd.conf
\n#
\n# Commented out options are here to provide documentation and represent defaults<\/p>\n

# \u76e3\u63a7\u7db2\u6bb5\uff0c\u5fc5\u9808\u4f7f\u7528 CIDR \u683c\u5f0f\u7684\u906e\u7f69\u5beb\u6cd5
\nsubnet 192.168.110.0\/24<\/p>\n

# \u76e3\u63a7\u7db2\u5361\uff1aNAT \u586b\u865b\u64ec IP \u5361; BridgeMode \u586b br0
\ndev “eth1”<\/p>\n

###################################################
\n# Options that don’t usually get changed<\/p>\n

# An interval is 2.5 minutes, this is how many intervals to skip before doing a graphing run
\n#skip_intervals 0<\/p>\n

# Graph cutoff is how many k must be transfered by an ip before we bother to graph it
\n#graph_cutoff 1024
\n#Put interface in promiscuous mode to score to traffic that may not be routing through the host machine.<\/p>\n

# \u975c\u807d\u6a21\u5f0f\uff0c\u56e0\u5be6\u969b\u6d41\u91cf\u4e00\u5b9a\u6703\u7d93\u904e\u7db2\u5361\uff0c\u6240\u4ee5\u8a2d\u6210 false
\n#promiscuous true
\npromiscuous false<\/p>\n

#Log data to cdf file htdocs\/log.cdf
\n#output_cdf false<\/p>\n

output_cdf true<\/p>\n

#Set the cdf log output directory
\n#log_dir “\/var\/lib\/bandwidthd”<\/p>\n

#Read back the cdf file on startup
\n#recover_cdf false<\/p>\n

recover_cdf true<\/p>\n

#Libpcap format filter string used to control what bandwidthd see’s
\n#Please always include “ip” in the string to avoid strange problems
\n#filter “ip”<\/p>\n

#Draw Graphs – \u8a2d\u6210 true \u5f8c\uff0c\u6703\u52d5\u7528\u67d0\u7a0b\u5ea6\u7684 RAM \u53ca CPU \u4f7f\u7528\u7387
\ngraph true<\/p>\n

#\u6d41\u91cf\u5716\u5e7e\u79d2\u66f4\u65b0\u4e00\u6b21(default 150, use 0 to disable).
\n#meta_refresh 150
\nmeta_refresh 150<\/p>\n

#\u653e\u7f6e\u6d41\u91cf\u5716\u4e4b\u5be6\u9ad4\u4f4d\u7f6e
\nhtdocs_dir “\/var\/lib\/bandwidthd\/htdocs”<\/p>\n

* \u5efa\u7acb http:\/\/nat.your.domain\/bandw \u7db2\u9801
\no \u5efa\u7acb \/etc\/apache2\/conf.d\/bandw.conf
\nroot@dns:~# vi \/etc\/apache2\/conf.d\/bandw.conf (\u5167\u5bb9\u5982\u4e0b\u6240\u793a)<\/p>\n

Alias \/bandw \/var\/lib\/bandwidthd\/htdocs<\/p>\n

<Directory \/var\/lib\/bandwidthd\/htdocs>
\nOptions FollowSymLinks
\nOrder deny,allow
\nDeny from all
\n# \u5728\u6b64\u52a0\u4e0a\u5141\u8a31\u700f\u89bd\u7684\u7db2\u5740
\nAllow from 127.0.0.1 163.26.182.0\/24
\n<\/Directory><\/p>\n

* \u91cd\u65b0\u555f\u52d5 Apache2
\nroot@dns:~# service apache2 restart<\/p>\n

* \u6e2c\u8a66\u9023\u7dda\u6ce8\u610f\uff1a\u525b\u88dd\u597d\u7684\u6d41\u91cf\u76e3\u63a7\uff0c\u5fc5\u9808\u8010\u5fc3\u7b49\u5f85\u5176\u7522\u751f\u5831\u8868\u53ca\u5716\u6a94\uff0c\u6700\u597d\u662f\u7b49\u4e00\u5c0f\u6642\u4ee5\u4e0a\u518d\u6aa2\u8996<\/p>\n

* \u9023\u7dda\u793a\u4f8b<\/p>\n

Bandwidthd Sample.png<\/p>\n

\u52d5\u614b\u9023\u7dda\u72c0\u6cc1<\/p>\n

* \u7528 TCPTRACK \u89c0\u770b\u76ee\u524d\u5167\u7db2\u5c0d\u5916\u52d5\u614b\u9023\u7dda\u72c0\u614b
\no \u5148\u78ba\u5b9a\u662f\u5426\u5df2\u5b89\u88dd
\nroot@nat:~# dpkg -l |grep tcptrack
\n\u82e5\u8df3\u51fa\u4e00\u884c\u7a7a\u767d\u5217\uff0c\u5c31\u662f\u6c92\u5b89\u88dd\uff0c\u6b64\u6642\u624d\u9700\u4f9d\u4e0b\u9762\u6b65\u9a5f\u5b89\u88dd\u3002
\no \u5b89\u88dd
\nroot@nat:~# apt-get install tcptrack
\no \u5047\u8a2d 192.168.1.0\/24 \u662f\u8a2d\u5b9a\u5728 eth1 \u7db2\u5361\u4e0a\uff0c\u53ef\u7528\u4e0b\u5217\u6307\u4ee4\u6aa2\u8996\u52d5\u614b\u9023\u7dda\u72c0\u6cc1
\nroot@nat:~# tcptrack -i eth1<\/p>\n

* \u4f7f\u7528 IPTRAF \u5de5\u5177
\no iptraf \u662f\u53ef\u4ee5\u5728\u6587\u5b57\u4ecb\u9762\u904b\u4f5c\u7684\u5716\u5f62\u5316\u7db2\u8def\u72c0\u6cc1\u6aa2\u8996\u5668\uff0c\u529f\u80fd\u9060\u6bd4 tcptrack \u5f37\u5927\u8a31\u591a
\no \u5b89\u88ddroot@dns:~# apt-get install iptraf
\no \u4f7f\u7528\u65b9\u6cd5\u66ab\u6642\u6c92\u7a7a\u4ecb\u7d39<\/p>\n

\u5167\u90e8\u7db2\u8def\u9023\u7dda\u7ba1\u7406<\/p>\n

\u82e5\u5b78\u6821\u7684 NAT \u4e3b\u6a5f\u67b6\u8a2d\u5be6\u9ad4\u8207\u865b\u64ec\u7686\u63a5\u56de\u4e3b\u7dda\u8def\uff0c\u90a3\u9ebc\u6821\u5167\u7db2\u8def\u8a2d\u5099\uff08\u542b NGN \u7121\u7dda AP \u4e0a\u7db2\uff09\uff0c\u5176\u865b\u64ec IPv4 \u5c01\u5305\u90fd\u4e00\u5b9a\u6703\u7d93\u904e\u6b64\u4e3b\u6a5f\u624d\u4e0a\u5f97\u4e86\u7db2\u8def\u3002\u56e0\u6b64\uff0c\u6211\u5011\u5c31\u53ef\u4ee5\u8655\u7406\u4ee5\u4e0b\u5e7e\u4ef6\u4e8b\u60c5\uff1a<\/p>\n

1. \u76e3\u63a7\u5167\u7db2\u7684\u6d41\u91cf
\n2. \u5229\u7528\u9396 MAC \u4f4d\u5740\u6280\u8853\uff0c\u5c0d\u554f\u984c\u7684\u8a2d\u5099\u9032\u884c\u65b7\u7dda\u8655\u7406\uff0c\u4ee4\u5176\u7121\u6cd5\u4e0a\u7db2\u653b\u64ca\u5225\u4eba\u3002<\/p>\n

\u6d41\u91cf\u7ba1\u5236<\/p>\n

\u958b\u5b78\u4ee5\u4f86\uff0c\u4e00\u76f4\u6709\u5169\u500b user \u5728\u525b\u4e0b\u73ed\u6642\u9593\u6216\u534a\u591c\u5927\u91cf\u4e0b\u8f09\u6771\u897f\uff0c\u5c0e\u81f4\u5168\u6821\u7db2\u8def\u8b8a\u5f97\u5f88\u6162\uff0c\u9020\u6210\u5176\u4ed6 user \u7684\u4e0d\u4fbf\u3002\u56e0\u6b64\u8a08\u756b\u5c0d\u5b78\u6821\u7684\u7db2\u8def\u67b6\u8a2d QoS \u6a5f\u5236\u3002\u8a08\u756b\u5206\u6210\u5169\u90e8\u5206\u8655\u7406\uff0c\u5be6\u9ad4 IP \u90e8\u5206\u63a1\u7528 OB2D\u589e\u8a2d\u4e00\u53f0 Bridge Mode FireWall\uff0bTC(htp\u6f14\u7b97\u6cd5)\uff0bIPTABLES\uff0c\u539f\u672c\u7684 NAT \u5c31\u5728\u5176\u4e0a\u76f4\u63a5\u8a2d\u5b9a TC\uff0bIPTABLES\u3002<\/p>\n

\u800c\u4e14\u57fa\u65bc\u5c0d\u540c\u4e8b\u9593\u7684\u5c0a\u91cd\uff08\u5176\u5be6\u662f\u81ea\u5df1\u61f6\uff09\uff0c\u53ea\u6703\u91dd\u5c0d\u67d0\u5e7e\u53f0\u6d41\u91cf\u7279\u5927\u7684 MAC \u505a\u9650\u5236\uff0c\u4e0d\u9632\u7919\u5176\u4ed6\u5584\u826f\u8001\u767e\u59d3\u3002\u56e0\u6b64\u7814\u7a76\u4e86\u4e00\u4e0b\u55ae\u4e00IP \u9650\u5236\u4e0a\u50b3\u8207\u4e0b\u8f09\u7684\u6d41\u91cf\u7684\u65b9\u6cd5\uff0c\u76ee\u524d\u627e\u5230\u8f03\u5408\u7406\u7684\u65b9\u5f0f\u662f\u4f7f\u7528 tc \u6307\u4ee4\uff0c\u4e0b\u5217\u662f\u53c3\u8003\u6587\u4ef6…\u3002\u4f46\u662f\u7ba1\u5236\u4e00\u5169\u5929\u5f8c\u767c\u73fe\uff0c\u8a72 user \u4e0d\u77e5\u4f7f\u7528\u4ec0\u9ebc\u5de5\u5177\uff0c\u5728\u5927\u591a\u6578\u6642\u9593\u7684\u5e73\u7a69\u5f8c\uff0c\u4ecd\u6703\u6709\u77ed\u66ab\u66b4\u91cf\uff0827mbit\/s\uff09\uff0c\u9019\u6a23\u4ecd\u6703\u5e72\u64fe\u5b78\u6821\u7db2\u8def\u904b\u4f5c\u3002\u56e0\u6b64\uff0c\u4e0d\u5f97\u5df2\u53ea\u597d\u63a1\u7528 iptables \u7684\u6bcf\u79d2\u5c01\u5305\u9650\u5236\u63aa\u65bd\uff0c\u624d\u6210\u529f\u58d3\u4e0b\u53bb\uff0c\u4e0d\u77e5\u6709\u7121\u5176\u4ed6\u7db2\u7ba1\u5df2\u63a1\u7528\u800c\u77e5\u9053\u539f\u56e0\uff0c\u82e5\u6709\u518d\u4f86\u4fe1\u8207\u7b46\u8005\u5206\u4eab\u4e00\u4e0b\uff0c\u611f\u8b1d\u4e86\u3002<\/p>\n

IPTABLES\uff0bTC(HTB)<\/p>\n

* \u53c3\u8003\u4e00\uff1a
\nhttp:\/\/www.austin.oyhome.com\/main.php?action=view&auto_seq=12&fmain=indite_mac
\n* \u53c3\u8003\u4e8c\uff0c\u9019\u4e00\u7bc7\u8b1b\u5f97\u5f88\u6dfa\u986f\u6613\u61c2\uff0c\u503c\u5f97\u63a8\u85a6\uff01
\nhttp:\/\/www.pczone.com.tw\/vbb3\/thread\/29\/116666\/
\n* \u53c3\u8003\u4e09\uff1a
\nhttp:\/\/clplayer.pixnet.net\/blog\/post\/537244<\/p>\n

* \u7531\u65bc tc \u6307\u4ee4\u662f\u7531 iproute \u5957\u4ef6\u6240\u63d0\u4f9b\uff0c\u6240\u4ee5\u8981\u5148\u78ba\u8a8d iproute \u5957\u4ef6\u662f\u5426\u5df2\u5b89\u88dd
\nroot@dns:~# dpkg -l |grep iproute
\n\u82e5\u51fa\u73fe\u4e0b\u5217\u8a0a\u606f\uff0c\u4ee3\u8868\u5957\u4ef6\u5df2\u88ab\u5b89\u88dd\u3002<\/p>\n

ii\u00a0 iproute\u00a0\u00a0\u00a0\u00a0\u00a0 20100519-3\u00a0\u00a0\u00a0\u00a0\u00a0 networking and traffic control tools<\/p>\n

* \u82e5\u6c92\u5b89\u88dd\uff0c\u5b89\u88dd\u6307\u4ee4\u5982\u4e0b
\nroot@dns:~# apt-get update
\nroot@dns:~# apt-get install iproute<\/p>\n

* \u4f7f\u7528\u672c\u7ad9\u63d0\u4f9b\u7684 fwtc.sh \u5354\u52a9\u6d41\u91cf\u7ba1\u5236
\no \u529f\u80fd\uff1a\u9069\u7528\u65bc nat \u53ca bridge mode \u4e0b\uff0c\u91dd\u5c0d\u67d0\u6bb5IP\u6216\u7279\u5b9a MAC \u9032\u884c\u6d41\u91cf\u7ba1\u5236
\no \u539f\u7406\uff1a\u4f7f\u7528 tc \u6307\u4ee4\u4f86\u7ba1\u5236\u6d41\u91cf\u53ef\u5206\u6210 cbq \u53ca htb \u5169\u7a2e\u65b9\u6cd5\uff0c\u7b46\u8005\u6240\u63a1\u7528\u7684\u662f htb \u904e\u6ffe\u6cd5\uff0c\u5b83\u5728\u5854\u914d iptables \u7684 set-mark \u5f8c\uff0c\u53ef\u7c21\u5316 tc \u53c3\u6578\u3002\u52a0\u4e0a iptables \u7cbe\u6e96\u7684\u6293\u53d6\u80fd\u529b\uff0c\u4f8b\u5982\u67d0\u53f0 mac\uff1b\u67d0\u7a2e\u5354\u5b9a\uff08L4 or L7\uff09\u7b49\uff0c\u5f62\u6210\u5f37\u5927\u7684\u904e\u6ffe\u529b\u3002<\/p>\n

* \u5148\u5207\u63db\u6210 root \u8eab\u4efd
\nroot@dns:~# sudo -i<\/p>\n

* \u4e0b\u8f09
\nroot@dns:~# wget http:\/\/myip.tw\/download\/yhtools.tar.gz
\nroot@dns:~# tar xzvf yhtools.tar.gz
\nroot@dns:~# cd .\/yhtools<\/p>\n

* \u8a2d\u5b9a\u53c3\u6578
\n\u7de8\u8f2f yhtools \u8cc7\u6599\u593e\u5167\u7684\u300c fwtc.sh \u300d\uff0c\u4fee\u6539\u4e0b\u5217\u53c3\u6578\uff08\u8acb\u4f9d\u63d0\u793a\u586b\u5165\u6b63\u78ba\u53c3\u6578\uff09
\nroot@dns:~\/yhtools# vi fwtc.sh<\/p>\n

#———————– \u5171\u7528\u53c3\u6578\u8a2d\u5b9a\u5340————————————
\n#\u4e0a\u50b3\u9650\u5236\u7db2\u5361\uff1b\u5be6\u9ad4 IP \u6216 Bridge \u5c0d\u5916\uff08\u9023\u63a5\u8def\u7531\u7aef\uff09
\nDEV_UP=”eth0″<\/p>\n

#\u4e0b\u8f09\u9650\u5236\u7db2\u5361\uff1b\u865b\u64ec IP \u6216 Bridge Mode \u7684\u5167\u7db2\uff08\u9023\u96c6\u7dda\u5668\u7aef\u81f3\u5168\u90e8\u5167\u7db2\uff09
\nDEV_DW=”eth1″<\/p>\n

#\u9632\u706b\u7246\u7a2e\u985e\uff0c\u9650\u586b\uff1a”nat” \u6216 “bridge”\uff1b \u8a3b\uff1abridge \u6307\u7684\u662f\u900f\u901a\u5f0f\u9632\u706b\u7246\uff0cIN\/OUT \u7686\u5be6\u9ad4 IP
\nFWTYPE=”nat”<\/p>\n

#\u7ba1\u5236\u985e\u578b\uff1a\u9650\u586b\uff1a”ipr”, “mac”\uff0c\u5206\u5225\u6307\u7684\u662f\u300cIP\u7bc4\u570d\u300d\u6216\u300c\u7db2\u5361MAC\u4f4d\u5740\u300d
\nTCTYPE=”ipr”<\/p>\n

#\u5c0d\u5916\u4e0a\u50b3\u5be6\u969b\u6700\u5927\u983b\u5bec\uff0c\u55ae\u4f4d\u70ba mbit \u6216 kbit
\nUPMAX=”100mbit”<\/p>\n

#\u5c0d\u5916\u4e0b\u8f09\u5be6\u969b\u6700\u5927\u983b\u5bec\uff0c\u55ae\u4f4d\u70ba mbit \u6216 kbit
\nDWMAX=”100mbit”<\/p>\n

#\u6bcf\u53f0 Client \u6d41\u91cf\u9650\u5236\uff0c\u6ce8\u610f\u6b64\u8655\u7684\u8a08\u91cf\u55ae\u4f4d\u662f kbytes\/\u79d2
\n##\u4e0a\u50b3\u4fdd\u8b49\u983b\u5bec\uff08\u4e0d\u53ef\u4ee5\u592a\u5927\uff09\uff0c\u6700\u597d\u76f4\u63a5\u7531\u300c\u6700\u5927\u983b\u5bec \/ Client\u6578\u300d
\nUpRate=”100kbps”
\n##\u4e0a\u50b3\u6700\u5927\u983b\u5bec
\nUpCeil=”400kbps”
\n##\u4e0b\u8f09\u4fdd\u8b49\u983b\u5bec\uff08\u4e0d\u53ef\u4ee5\u592a\u5927\uff09\uff0c\u6700\u597d\u76f4\u63a5\u7531\u300c\u6700\u5927\u983b\u5bec \/ Client\u6578\u300d
\nDwRate=”200kbps”
\n##\u4e0b\u8f09\u6700\u5927\u983b\u5bec
\nDwCeil=”800kbps”
\n#———————————————————————–<\/p>\n

#————————- \u9078\u7528 IP \u7bc4\u570d\uff08ipr\uff09\u8a2d\u5b9a\u5340—————————–
\n#\u63a7\u5236\u7db2\u6bb5\uff0c\u8acb\u586b IPv4 \u7db2\u6bb5\u524d\u4e09\u78bc\u518d\u52a0\u300c.\u300d\uff0c\u4f8b “192.168.1.”
\nNETC=”192.168.110.”<\/p>\n

#\u8d77\u59cb IP
\nIPS=”2″<\/p>\n

#\u7d50\u675f IP
\nIPE=”254″
\n#———————————————————————–
\n#———————— \u9078\u7528 mac \u7ba1\u63a7\uff08mac\uff09\u8a2d\u5b9a\u5340—————————–
\n#\u6bcf\u500b mac address: (1).\u7368\u7acb\u4e00\u5217\uff0c(2).\u5927\u5beb\uff1b\u4e0b\u5217\u5167\u5bb9\u70ba\u66f8\u5beb\u7bc4\u4f8b
\nMACL=”
\n00:50:7F:AB:XX:XX
\nD0:27:88:23:XX:XX
\n00:22:15:C4:XX:XX
\n00:26:18:87:XX:XX
\n”
\n#———————————————————————–<\/p>\n

* \u555f\u52d5\uff0f\u95dc\u9589\uff0f\u72c0\u614b\u986f\u793a
\n\u555f\u52d5\uff1aroot@dns:~\/yhtools# .\/fwtc.sh start
\n\u4e2d\u6b62\uff1aroot@dns:~\/yhtools# .\/fwtc.sh stop
\n\u986f\u793a\u72c0\u614b\uff1aroot@dns:~\/yhtools# .\/fwtc.sh show<\/p>\n

\u8a3b\uff1a\u7a0b\u5f0f\u7121\u6cd5\u76e1\u5982\u4eba\u610f\uff0c\u90e8\u5206\u529f\u80fd\u53ef\u80fd\u4e0d\u7b26\u5408\u60a8\u7684\u9700\u6c42\uff0c\u8acb\u81ea\u884c\u4fee\u6539\u5957\u7528\u3002<\/p>\n

\u7d14IPTABLES<\/p>\n

* \u4f7f\u7528 iptables \u7684\u6bcf\u79d2\u5c01\u5305\u6578\u9650\u5236<\/p>\n

iptables -A FORWARD -m mac –mac-source 48:5B:39:XX:XX:XX -m limit –limit 60\/s –limit-burst 65 -j ACCEPT
\niptables -A FORWARD -m mac –mac-source 48:5B:39:XX:XX:XX -j DROP<\/p>\n

\u8a3b1\uff1a\u5be6\u969b\u4e0a\u3000IPTABLES -m limit \u5927\u591a\u7528\u65bc\u963b\u64cb DDoS \u653b\u64ca\u7528\uff0c\u505a\u70ba\u6d41\u91cf\u7ba1\u5236\u9700\u586b\u601d\uff0c\u56e0\u70ba\u9019\u6703\u9020\u6210\u88ab\u63a7\u65b9\u5c01\u5305 lost \u7387\u5347\u9ad8\u3002
\n\u8a3b2\uff1a\u82e5\u5e73\u5747\u5c01\u5305\u5927\u5c0f\u5728 1500 bytes \u5de6\u53f3\uff0c\u6bcf\u79d2 60 \u5c01\u5305\uff0c\u5c31\u5df2\u63a5\u8fd1 10mbit\/s
\n\u8a3b3\uff1a\u7d93\u4e00\u5929\u7684\u5be6\u8b49\u4e0b\u4f86\uff0c\u6709\u7684 user \u9084\u662f\u80fd\u77ed\u66ab\u7684\uff08Burst\uff09\u7a81\u7834\u5230 15mbit\/s \u5de6\u53f3\uff0c\u4e0d\u904e\u9019\u6a23\u4e5f\u53ef\u63a5\u53d7\uff0c\u56e0\u70ba\u5df2\u4e0d\u518d\u5f71\u97ff\u5168\u6821\u7db2\u8def\u4e86\u3002<\/p>\n

\u9396\u67d0\u4e9b\u7279\u5b9a\u7db2\u7ad9<\/p>\n

* \u9996\u5148\u627e\u51fa\u8a72\u7db2\u7ad9\u4e4b IP Address\uff0c\u4ee5\u5947\u6469\u70ba\u4f8b
\nroot@dns:~# nslookup tw.yahoo.com –>\u5f97\u5230 119.160.246.241 \u9019\u7d44 IP<\/p>\n

* \u4fee\u6539 \/etc\/rc.local \uff0c\u5728\u4ee5\u4e0b\u4f4d\u7f6e\u52a0\u4e0a\u7d05\u5b57\u90e8\u5206\u7684\u898f\u5247\u5217<\/p>\n

###—————————————————–###
\n# \u555f\u52d5\u5167\u90e8\u5c0d\u5916\u8f49\u5740
\n###—————————————————–###
\n$IPTABLES -t nat -A POSTROUTING -o $FW_IFACE -j SNAT –to-source $FW_IP<\/p>\n

###—————————————————–###
\n# \u555f\u52d5\u5916\u90e8\u5c0d\u5167\u90e8\u8f49\u5740
\n###—————————————————–###
\n# \u51e1\u5c0d $FW_IP:8080 \u9023\u7dda\u8005, \u5247\u8f49\u5740\u81f3 192.168.1.3:80
\n#$IPTABLES -t nat -A PREROUTING -p tcp -d $FW_IP –dport 8080 -j DNAT –to 192.168.110.3:80<\/p>\n

$IPTABLES -A FORWARD -o $FW_IFACE -p tcp -d 119.160.246.241 –dport 80 -j DROP<\/p>\n

# \u4ee5\u4e0b\u5c01\u6389\u5167\u90e8\u4e3b\u6a5f\u9023\u5230\u5916\u90e8\u4e3b\u6a5f\u7684 port 6677, \u8acb\u81ea\u884c\u91dd\u5c0d\u4e0d\u540c\u670d\u52d9 port \u865f\u505a\u4fee\u6539<\/p>\n

\u9396 MAC \u505a\u6cd5<\/p>\n

* \u7528 nmap \u627e\u51fa\u9023\u7dda\u8a2d\u5099\u6240\u4f7f\u7528\u7684 IP \u53ca MAC \u4f4d\u5740
\no \u5047\u8a2d\u767c\u73fe 192.168.110.13 \u4e0d\u65b7\u5c0d\u5916\u6383\u63cf\uff0c\u61f7\u7591\u5176\u53ef\u80fd\u4e2d\u6bd2\uff0c\u4e0d\u8b93\u5176\u4e0a\u7db2\u7684\u6700\u4f73\u65b9\u6cd5\u662f\u9396\u7db2\u5361 MAC \u4f4d\u5740\uff0c\u9019\u6a23\u4e00\u4f86\u4f7f\u7528\u8005\u5982\u679c\u63db\u4e86 IP Address \u4e5f\u7121\u6cd5\u4e0a\u7db2\u3002
\no \u4f7f\u7528 nmap \u4f86\u627e 192.168.110.13 \u7684 MAC \u4f4d\u5740
\nroot@nat:~# nmap -sP 192.168.110.13
\no \u4f7f\u7528 nmap \u627e\u6574\u500b\u5167\u7db2\u6240\u6709\u6b63\u5728\u7dda\u4e0a\u7684\u8a2d\u5099
\nroot@nat:~# nmap -sP 192.168.110.0\/24
\no \u5176\u4ed6 nmap \u7684\u5176\u4ed6\u7528\u6cd5\uff0c\u8acb\u53c3\u8003\u672c\u7ad9\u53e6\u4e00\u7bc7\u6587\u7ae0\u300cLinux \u57fa\u672c\u5de5\u5177\u6307\u4ee4\u300d<\/p>\n

* \u4fee\u6539 \/etc\/rc.local \u9396\u5176 MAC \u4f4d\u5740
\no \u8a3b\uff1aNAT \u4e3b\u6a5f\u4e00\u5b9a\u8981\u52a0\u5728\u555f\u52d5\u5916\u90e8\u5c0d\u5167\u90e8\u8f49\u5740\u5f8c\u9762\uff08\u7d05\u5b57\u90e8\u5206\uff09\u3002<\/p>\n

###—————————————————–###
\n# \u555f\u52d5\u5167\u90e8\u5c0d\u5916\u8f49\u5740
\n###—————————————————–###
\n$IPTABLES -t nat -A POSTROUTING -o $FW_IFACE -j SNAT –to-source $FW_IP<\/p>\n

###—————————————————–###
\n# \u555f\u52d5\u5916\u90e8\u5c0d\u5167\u90e8\u8f49\u5740
\n###—————————————————–###
\n# \u51e1\u5c0d $FW_IP:8080 \u9023\u7dda\u8005, \u5247\u8f49\u5740\u81f3 192.168.1.3:80
\n#$IPTABLES -t nat -A PREROUTING -p tcp -d $FW_IP –dport 8080 -j DNAT –to 192.168.110.3:80<\/p>\n

### \u555f\u52d5 mac \u9396\u5b9a\u529f\u80fd\uff0c\u628a\u4e0b\u5217\u6e05\u55ae\u4e2d\u7684\u96fb\u8166\u7686\u9396\u8d77\u4f86
\n$IPTABLES -A FORWARD -p tcp -m mac –mac-source ##:##:##:51:3C:3A -j DROP<\/p>\n

L7 Filter
\n\u4f7f\u7528 L7-Filter<\/p>\n

\u4e03\u5c64\u904e\u6ffe\u7684\u610f\u601d\u662f\uff0c\u53ef\u4ee5\u76f4\u63a5\u5c0d\u5c01\u5305\u5167\u5bb9\u9032\u884c\u904e\u6ffe\u3002\u82e5\u4e0d\u52a0\u88dd L7Filter \u529f\u80fd\uff0cIPTABLES \u53ea\u80fd\u5224\u8b80\u5230 L4 \u7684\u5c64\u7d1a\uff0c\u4e5f\u5c31\u662f\u53ea\u80fd\u7ba1\u5236\u901a\u8a0a\u57e0\u3002\u53ef\u662f\u5f80\u5f80\u4e00\u4e9b\u6709\u8cc7\u5b89\u7591\u616e\u7684 P2P \u6216\u50b3\u8a0a\u8edf\u9ad4\u4e5f\u5f88\u8070\u660e\uff0c\u5728\u5927\u591a\u6578\u57e0\u88ab\u5c01\u9396\u5f8c\uff0c\u6539\u7528\u5e38\u7528\u57e0\u4f86\u6e9d\u901a\uff0c\u6bd4\u5982 port 80, 21, 143…\u7b49\uff0c\u9020\u6210\u7db2\u8def\u5b89\u5168\u7684\u5371\u5bb3\uff0c\u56e0\u6b64\u6709\u5fc5\u8981\u5e6b\u54bd\u5589\u9ede\u4e0a\u7684 firewall \u52a0\u5f37\u5c01\u5305\u7684\u904e\u6ffe\u80fd\u529b\u3002<\/p>\n

\u4f7f\u7528 userspace l7-filter \u914d\u5408 iptables \u4f86\u904e\u6ffe\u5c01\u5305\u5167\u5bb9\u7684\u505a\u6cd5\u5982\u4e0b\uff1a<\/p>\n

* \u5b89\u88dd
\nroot@fw:~# apt-get install l7-filter-userspace l7-protocols
\n* \u8f09\u5165kernel\u6a21\u7d44\uff1anf_conntrack_netlink
\nroot@fw:~# modprobe nf_conntrack_netlink
\n* \u53ef\u7528\u6a23\u7248\u6a94\u653e\u7f6e\u5730
\no l7-filter \u7684\u6a23\u677f\u6a94\u7531 l7-protocols \u5957\u7528\u7dad\u8b77\uff0c\u5b89\u88dd\u5f8c\u6703\u653e\u7f6e\u5728 \/etc\/l7-protocols\/protocols \u5167
\no \u88e1\u9762\u6709\u767e\u4f86\u500b *.pat \u6a23\u677f\u6a94\uff0c\u4f8b xunlie.pat, bittorrent.pat, edonkey.pat \u7b49
\n* \u5efa\u7acb \/etc\/l7-filter.conf \u8a2d\u5b9a\u6a94\uff0c\u52a0\u5165\u8981\u6514\u963b\u7684\u901a\u8a0a\u5354\u5b9a\uff0c\u4e0d\u5fc5\u518d\u52a0\u526f\u6a94\u540d\u300c.pat\u300d<\/p>\n

xunlei 9
\nbittorrent 10
\nedonkey 11<\/p>\n

* \u5728\u80cc\u666f\u555f\u52d5 l7-filter
\nroot@fw:~# l7-filter -f \/etc\/l7-filter.conf &
\n* \u518d\u52a0\u5165 iptables \u898f\u5247\u5217\u81f3 \/etc\/rc.local \u81f3\u300c\u62d2\u7d55\u5916\u90e8 IP \u9023\u81f3\u5167\u90e8 port \u865f\u300d\u4e4b\u4e0a<\/p>\n

###——————————————————–###
\n# L7-filter\uff0c\u8a3b\uff1a -j QUEUE\u3000\u662f\u6307 FORWARD \u5c01\u5305\u9001\u81f3 userspace \u53bb\u8655\u7406
\n###——————————————————–###<\/p>\n

$IPTABLES -A FORWARD -j QUEUE
\n$IPTABLES -t mangle -A POSTROUTING -m mark –mark 9 -j DROP
\n$IPTABLES -t mangle -A POSTROUTING -m mark –mark 10 -j DROP
\n$IPTABLES -t mangle -A POSTROUTING -m mark –mark 11 -j DROP<\/p>\n

###—————————————————–###
\n# \u62d2\u7d55\u5916\u90e8 IP \u9023\u81f3\u5167\u90e8 port \u865f
\n###—————————————————–###
\n……<\/p>\n

\u8a3b\uff1a\u8acb\u6ce8\u610f l7-filter.conf \u5167\u7684\u7de8\u865f\u8207 mark \u7684\u7de8\u865f\u5fc5\u9808\u4e00\u81f4<\/p>\n

\u81ea\u8a02\u7c21\u6613\u904e\u6ffe\u6a23\u677f<\/p>\n

* \u81ea\u8a02\u7684\u6a23\u677f\uff0c\u4ee5\u963b\u64cb facebook \u7684\u904a\u6232\uff08\u4f46\u4ecd\u53ef\u4e0a www.facebook.com\uff09\u70ba\u4f8b
\no \u4ecb\u7d39 Pattern \u5beb\u6cd5\u4e4b\u5b98\u65b9\u7db2\u7ad9
\nhttp:\/\/l7-filter.sourceforge.net\/Pattern-HOWTO
\no \u81ea\u8a02\u6a23\u677f\u7b2c\u4e00\u6b65\u8981\u4f7f\u7528 wireshark \u7b49\u8edf\u9ad4\u4f86\u5206\u6790\u5c01\u5305
\no \u518d\u4f86\u5efa\u7acb\u6a23\u677f\u6a94\uff0c\u6bcf\u500b\u6a23\u677f\u6a94\u5167\u5bb9\uff0c\u57fa\u672c\u4e0a\u53ea\u8981\u5169\u884c\uff0c\u7b2c\u4e00\u884c\u662f\u6a23\u677f\u540d\u7a31\uff0c\u7b2c\u4e8c\u884c\u4f9b\u904e\u6ffe\u5224\u65b7\u7684\u6b63\u898f\u8868\u9054\u5f0f\u898f\u5247
\no \u7531\u65bc\u6211\u5011\u7684\u76ee\u6a19\u53ea\u662f facebook \u904a\u6232\u7db2\u7ad9 apps.facebook.com\uff0c\u56e0\u6b64\u53ea\u8981\u91dd\u5c0d\u95dc\u9375\u5b57\u8a2d\u6a23\u677f\u5373\u53ef\u3002
\n\u5efa\u7acb \/etc\/l7-protocols\/protocols\/facebook.pat \u5167\u5bb9\u5982\u4e0b<\/p>\n

facebook
\napps.facebook.com<\/p>\n

* \u555f\u7528\u6b64\u6a23\u677f\u7684\u505a\u6cd5\u5c31\u5982\u540c\u4e0a\u9762\u6240\u8ff0\u4e00\u6a23\uff0c\u4e0d\u518d\u91cd\u8986\u3002<\/p>\n

\u95dc\u9589 l7-filter<\/p>\n

* \u9996\u5148\u8981\u4fee\u6539 \/etc\/rc.local \u628a\u525b\u52a0\u7684\u90a3\u5e7e\u884c\u52a0 # \u8a3b\u89e3<\/p>\n

###——————————————————–###
\n# L7-filter\uff0c\u8a3b\uff1a -j QUEUE: \u628a FORWARD \u5c01\u5305\u9001\u81f3 userspace \u53bb\u8655\u7406
\n###——————————————————–###
\n#$IPTABLES -A FORWARD -j QUEUE
\n#$IPTABLES -t mangle -A POSTROUTING -m mark –mark 9 -j DROP
\n#$IPTABLES -t mangle -A POSTROUTING -m mark –mark 10 -j DROP
\n#$IPTABLES -t mangle -A POSTROUTING -m mark –mark 11 -j DROP<\/p>\n

* \u5957\u7528\u65b0\u898f\u5247
\nroot@fw:~# service rc.local start
\n* \u95dc\u9589 l7-filter \u80cc\u666f\u670d\u52d9
\no \u67e5\u51fa PID
\nroot@fw:~# ps aux |grep l7-filter<\/p>\n

root\u00a0\u00a0\u00a0\u00a0 16524\u00a0 0.0\u00a0 0.4\u00a0 20140\u00a0 1884 pts\/1\u00a0\u00a0\u00a0 Sl\u00a0\u00a0 16:18\u00a0\u00a0 0:00 l7-filter -f \/etc\/l7-filter.conf<\/p>\n

* KILL PID
\nroot@fw:~# kill -9 16524<\/p>\n","protected":false},"excerpt":{"rendered":"

Linux\u4e3b\u6a5f\u4f3a\u670d\u5668\u67b6\u8a2d\u6280\u8853\uff08\u9632\u706b\u7246\u7ba1\u5236\u9023\u7dda\uff09 \u672c\u6587\u4e3b\u8981\u662f\u6cbf\u7e8c\u300c\u6a4b\u63a5\u5f0f\u9632\u706b\u7246\u300d\u53ca\u300cNAT\u4e3b\u6a5f\u300d\u5169\u6587\uff0c\u8aaa\u660e\u5176\u5f8c\u7e8c […]<\/p>\n","protected":false},"author":1,"featured_media":503,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[22],"class_list":["post-37","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux","tag-linux"],"_links":{"self":[{"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/posts\/37"}],"collection":[{"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/comments?post=37"}],"version-history":[{"count":0,"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/posts\/37\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/media\/503"}],"wp:attachment":[{"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/media?parent=37"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/categories?post=37"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/por.tw\/linux\/wp-json\/wp\/v2\/tags?post=37"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}