Shulou(Shulou.com)06/01 Report--

Today, I will talk to you about how to set security on Baidu CVM. Many people may not know much about it. In order to make you understand better, the editor summarized the following content for you. I hope you can gain something according to this article.

After purchasing the CVM, the service environment of the CVM and the required software have been installed. How to set up the CVM system to be more secure? the policy is: minimum services + minimum permissions. Take Windows system as an example

General Settin

1, user rights. Set the corresponding service to the corresponding user, with minimum permissions, as long as it is enough, and not enough to add it again.

2. Directory permissions. All partitions except the partition where the system is located give Administrators and SYSTEM full control, and then give separate directory permissions to the subdirectories under them.

3. Modify the remote access service port. To change the remote connection port method, you can change the decimal to hexadecimal with the calculator that comes with windows.

4. Restrict Ping with firewall

Port Settin

1. Open only the ports that need to be used, and close the unnecessary ones to reduce the attack surface. (do not open ports that are not needed)

80:IIS7 21:FTP 3389: remote 3306:MySQL 1433:Mssql

Firewall Settin

1. Turn on the firewall

2. Advanced firewall settings (setting inbound and outbound rules)

3. Control panel → Windows Firewall Settings → change Settings → exception, check FTP, HTTP, remote Desktop Services Core Network

HTTPS can not be used without ticking, 3306:Mysql, 1433:Mssql

After reading the above content, do you have any further understanding of how to set security on Baidu CVM? If you want to know more knowledge or related content, please follow the industry information channel, thank you for your support.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.