一、前言
本人结合网上资料和个人的实践，利用一个下午的时间写出了这个适用于资源下载型网站的典型配置。这种配置的WEB网站初步实现了IP线程和线程流量的管理，同时proftpd用于上传资源，ssh用于主机管理。无疑这样可以自己支配宝贵的网络带宽，文章后面有个简单的防火墙配置仅供参考，我用的linux版本是redhat as 3.0。希望大家在看了这篇文章后多多和我交流， MAIL:LLZQQ@163.COM
二、软件版本
apache-1.3.29
mysql-4.0.16
php-4.3.4
proftpd-1.2.9
mod_limitipconn-0.04
mod_bandwidth-2.0.4
三、安装配置Mysql
# cd mysql-4.0.16
# ./configure --prefix=/usr/local/mysql --localstatedir=/usr/local/mysql/data
--disable-maintainer-mode ?with-mysqld-user=mysql --enable-large-files-without-debug
# make
# make install
添加mysql用户
# /usr/sbin/groupadd mysql
Then we create a user called mysql which belongs to the mysql group;
# /usr/sbin/useradd -g mysql mysql
安装数据库文件：
#./scripts/mysql_install_db
设置文件权限：
# chown -R root:mysql /usr/local/mysql
# chown -R mysql:mysql /usr/local/mysql/data
配置ld.so.conf
# vi /etc/ld.so.conf
增加下面一句：
/usr/local/mysql/lib/mysql
建立mysql的启动文件：
# cp support-files/mysql.server /etc/init.d/mysql
# cp support-files/my-medium.cnf /etc/my.cnf
以安全模式启动mysql：
# /usr/local/mysql/bin/mysqld_safe ?user=mysql &
设置mysql的root密码：
# /usr/local/mysql/bin/mysqladmin -u root password new_password
把mysql服务设置为开机启动：
# chmod 755 /etc/init.d/mysql
# chkconfig ?-add mysql
# chkconfig mysql on
四、安装配置PHP
#cd php-4.3.4
#./configure --prefix=/usr/local/php --with-apxs=/usr/local/apache/bin/apxs --with-mysql=/usr/local/mysql
#make
#make install
建立php的配置文件：
# cp php.ini-dist /usr/local/php/lib/php.ini
修改php的配置文件：
#vi /usr/local/php/lib/php.ini
doc_root= “/home/www/”
file_uploads=Off
register-golbals = On
建立测试php页面
# vi /home/www/test.php
<?php phpinfo(); ?
# chomd 755 /home/www/test.php
五、安装apache-1.3.29
# tar zvxf apache_1.3.29.tar.gz
# cd apache_1.3.29
# cp ../mod_bandwidth.c mod_bandwidth.c
修改src/include/httpd.h 增大最大线程数
# vi src/include/httpd.h
修改其中的
#define HARD_SERVER_LIMIT 256
为
#define HARD_SERVER_LIMIT 2560
# ./configure --prefix=/usr/local/apache --enable-module=so
--enable-module=rewrite --enable-shared=max
--htdocsdir=/home/www --add-module=mod_bandwidth.c
--permute-module=BEGIN:bandwidth
# make
# make install
建立启动文件：
#cp apachectl /etc/init.d/httpd
修改apache的配置文件：
#vi /usr/local/apache/conf/httpd.conf
修改、添加和确认存在下列配置项：
addDefaultCharset
GB2312
注释掉“addDefaultCharset
ISO8859*”
ExtendedStatus On
LoadModule php4_module modules/libphp4.so
DirectoryIndex index.html index.html.var index.php
AddType application/x-httpd-php .php
AddType application/x-httpd-php-source .phps
LoadModule limitipconn_module libexec/mod_limitipconn.so
AddModule mod_limitipconn.c
安装mod_limitipconn-0.04
# tar xzf mod_limitipconn-0.04.tar.gz
# cd mod_limitipconn-0.04
# vi Makefile
APXS = /usr/local/apache/bin/apxs
# make
# make install
使用mod_limitip模块需要在httpd.conf中增加这个设置
<IfModule mod_limitipconn.c
<Location /home/www/
设置要控制的目录
MaxConnPerIP 2
限制每个IP的最大线程数
</Location
</IfModule
完成mod_bandwidth模块的安装
创建 mod_bandwidth 运行需要的目录
mkdir /var/apachebw
mkdir /var/apachebw/link
mkdir /var/apachebw/master
chmod -R 777 /var/apachebw
修改httpd.conf增加下列内容
<IfModule mod_bandwidth.c
BandWidthDataDir "/var/apachebw/"
BandWidthModule on
<Directory /home/www
BandWidth 192.168.0 0 200000
制局域网内用户的下载速度为200k
BandWidth all 51200
限制其他用户的下载速度为每秒 51200 字节
</Directory
</IfModule
修改/etc/init.d/httpd
# vi /etc/init.d/httpd
在三行之后添加如下内容：
#!/bin/sh
#
# Startup script for the Apache Web Server
# chkconfig: - 85 15
# description: Apache is a World Wide Web server.
It is used to serve #
HTML files and CGI.
# processname: httpd
# pidfile: /usr/local/apache/log/httpd.pid
# config: /usr/local/apache/conf/httpd.conf
把apache服务设置为开机启动：
# chkconfig ?-add httpd
# chmod 755 /etc/init.d/httpd
# chkconfig httpd on
六、安装porftpd-1.2.9
# tar ?zxvf proftpd-1.2.9.tar.gz
# cd proftpd-1.2.9
# ./configure
--prefix=/usr/local/proftpd
# make
# make
install
建立启动文件、把proftpd设置为开机启动
# cp ./contrib/dist/rpm/proftpd.init.d /etc/rc.d/init.d/proftpd
# chkconfig --add proftpd
# chmod 755 /etc/rc.d/init.d/proftpd
# vi /etc/rc.d/init.d/functions
export PATH="/sbin:/usr/sbin:/bin:/usr/bin:/usr/X11R6/bin:/usr/local/proftpd/
sbin"
# vi /etc/rc.d/init.d/proftpd
config: /usr/local/proftpd/etc/proftpd.conf
PATH="$PATH:/usr/local/proftpd/sbin"
# chkconfig proftpd on
建立帐号和目录：
# mkdir /home/test
# chmod 755 /home/test
# adduser -d /home/test -g ftp -s /sbin/nologin test
# passwd test
# adduser -d /home/upload -g ftp -s /sbin/nologin upload
# passwd upload
配置/usr/local/proftpd/etc/proftpd.conf，禁用匿名登陆
ServerName
"llzqq's ftp service"
ServerType
standalone
DefaultServer
on
# Port 21 is the standard FTP port.
Port
21
# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask
022
MaxInstances
10
# Set the user and group under which the server will run.
User
nobody
Group
ftp
# To cause every FTP user to be "jailed" (chrooted) into their home
# directory, uncomment this line.
DefaultRoot ~
# Normally, we want files to be overwriteable.
<Directory /
AllowOverwrite
on
</Directory
# We want 'welcome.msg' displayed at login, and '.message' displayed
# in each newly chdired directory.
DisplayLogin
