姓张的小子 —— 博客

shell> cd /usr/local/src
shell> tar -zxvf mod_evasive_1.10.1.tar.gz
shell> cd modsecurity-apache-1.9/apache2/
shell> cp apxs-ciamod_evasive20.c /opt/apache/bin/

LoadModule evasive20_module modules/mod_evasive20.so

<ifmodulemod_evasive20 .c>
DOSHashTableSize3097
DOSPageCount2
DOSSiteCount50
DOSPageInterval1
DOSSiteInterval1
DOSBlockingPeriod10
</ifmodulemod_evasive20>

shell> cd /usr/local/src
shell> tar -zxvf modsecurity-apache-1.9.2.tar.gz
shell> cd modsecurity-apache-1.9/apache2/
shell> cp apxs-ciamod_security.c /opt/apache/bin/

<ifmodulemod_security .c>
SecFilterEngineOn
SecFilterCheckURLEncodingOn
SecFilterDefaultAction”deny,log,status:500″
#SecFilterForceByteRange32126
#SecFilterScanPOSTOn
SecAuditLoglogs/audit_log
###
SecFilter”\.\./”
#####
SecFilter/etc/*passwd
SecFilter/bin/*sh

#forcssattack
SecFilter”< (|)*script"
SecFilter"<(.|) >”
#forsqlattack
SecFilter”delete[] from”
SecFilter”insert[] into”
SecFilter”select. from”
SecFilter”union[] from”
SecFilter”drop[]”
</ifmodulemod_security>

<location />
# Insert filter
SetOutputFilter DEFLATE 

# Netscape 4.x has some problems…
BrowserMatch ^Mozilla/4 gzip-only-text/html 

# Netscape 4.06-4.08 have some more problems
BrowserMatch ^Mozilla/4.0[678] no-gzip 

# MSIE masquerades as Netscape, but it is fine
# BrowserMatch \bMSIE !no-gzip !gzip-only-text/html 

# NOTE: Due to a bug in mod_setenvif up to Apache 2.0.59
# the above regex won’t work. You can use the following
# workaround to get the desired effect:
BrowserMatch \bMSI[E] !no-gzip !gzip-only-text/html 

# Don’t compress images and other
SetEnvIfNoCase Request_URI .(?:gif|jpe?g|png)$ no-gzip dont-vary
SetEnvIfNoCase Request_URI .(?:exe|t?gz|zip|bz2|sit|rar)$ no-gzip dont-vary
SetEnvIfNoCase Request_URI .pdf$ no-gzip dont-vary 

# Make sure proxies don’t deliver the wrong content
#Header append Vary User-Agent env=!dont-vary 

DeflateFilterNote ratio
LogFormat ‘”%v %h %l %u %t “%r” %>s %b “%{Referer}i” “%{User-Agent}i”” (%{ratio}n)’ deflate 

CustomLog logs/deflate_log deflate

或者把SetEnvIfNoCase替换成

AddOutputFilterByType DEFLATE text/*
AddOutputFilterByType DEFLATE application/ms* application/vnd* application/postscript 

不管哪种方法都是为了把某些不需要压缩的文件排出，这样被压缩过的网页就会比没有压缩的网页小很多，传输速度也会变快，就是说打开网页会快一些。

<directory />
Options FollowSymLinks
AllowOverride All 将None修改为All

去掉#ServerName前的#设置为www.zz.net
ServerName www.zz.net:80
设置虚拟主机
NameVirtualHost *
<virtualhost *>
DocumentRoot /var/www/html/img.zz.net
ServerName img.zz.net
</virtualhost>

重启Apache2服务，然后修改.htaccess 文件，如果没有就在/var/www/html/img.zz.net新建一个

RewriteEngine on
RewriteCond %{HTTP_REFERER} !^http://www.zz.net/.*$ [NC]
只允许通过www.zz.net/*才能访问img.zz.net下的文件。
RewriteCond %{HTTP_REFERER} !^http://www.zz.net$ [NC]
只允许通过www.zz.net才能访问img.zz.net下的文件
RewriteRule .*.(jpg|jpeg|gif|png|bmp|rar|zip|doc)$ http://error.zz.net/error.cwj[R,NC]
如果非法链接将会转向到错误页面

这样别人就不能用你的图片啦