Changes between Initial Version and Version 1 of Ticket #21, comment 4


Ignore:
Timestamp:
Mar 17, 2023 12:12:11 PM (2 years ago)
Author:
elven
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #21, comment 4

    initial v1  
    11PO server原本是開放port 3838直接NAT進來內部,但最近發現有被攻擊的記錄. 故關閉原本port 3838直接NAT到PO serer, 改成3838 NAT到nginx,然後透過nginx的設定,只有當 /PO/servlet的封包才會轉送到PO server,降低被攻擊的風險.
    22
     3{{{
    34外部 po.wnjsoft.com:80   => nginx:80   => check /PO/servlet => PO server
    45外部 po.wnjsoft.com:3838 => nginx:3838 => check /PO/servlet => PO server
     6}}}