﻿<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/"><channel><title>语源科技BlogJava-dd.zhang 的技术专栏</title><link>http://www.blogjava.net/ddzhang/</link><description /><language>zh-cn</language><lastBuildDate>Sun, 12 Apr 2026 07:54:24 GMT</lastBuildDate><pubDate>Sun, 12 Apr 2026 07:54:24 GMT</pubDate><ttl>60</ttl><item><title>apache continuum build maven2 项目 无法编译class</title><link>http://www.blogjava.net/ddzhang/archive/2008/08/26/224364.html</link><dc:creator>dd.zhang</dc:creator><author>dd.zhang</author><pubDate>Tue, 26 Aug 2008 01:14:00 GMT</pubDate><guid>http://www.blogjava.net/ddzhang/archive/2008/08/26/224364.html</guid><wfw:comment>http://www.blogjava.net/ddzhang/comments/224364.html</wfw:comment><comments>http://www.blogjava.net/ddzhang/archive/2008/08/26/224364.html#Feedback</comments><slash:comments>2</slash:comments><wfw:commentRss>http://www.blogjava.net/ddzhang/comments/commentRss/224364.html</wfw:commentRss><trackback:ping>http://www.blogjava.net/ddzhang/services/trackbacks/224364.html</trackback:ping><description><![CDATA[使用continuum 构建项目,构建成功.
<br />
[INFO] BUILD SUCCESSFUL
<br />
<br />
但是我到E:\apache-continuum-1.1\continuum-1.1\apps\continuum\webapp\WEB-INF\working-directory\30\target
<br />
下面查看continuum构建完之后的war包
<br />
<br />
.war\WEB-INF\classes文件夹里没有class文件,只有properties和xml配置文件
<img src ="http://www.blogjava.net/ddzhang/aggbug/224364.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.blogjava.net/ddzhang/" target="_blank">dd.zhang</a> 2008-08-26 09:14 <a href="http://www.blogjava.net/ddzhang/archive/2008/08/26/224364.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>Tomcat配置SSL</title><link>http://www.blogjava.net/ddzhang/archive/2008/01/22/177093.html</link><dc:creator>dd.zhang</dc:creator><author>dd.zhang</author><pubDate>Tue, 22 Jan 2008 09:17:00 GMT</pubDate><guid>http://www.blogjava.net/ddzhang/archive/2008/01/22/177093.html</guid><wfw:comment>http://www.blogjava.net/ddzhang/comments/177093.html</wfw:comment><comments>http://www.blogjava.net/ddzhang/archive/2008/01/22/177093.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.blogjava.net/ddzhang/comments/commentRss/177093.html</wfw:commentRss><trackback:ping>http://www.blogjava.net/ddzhang/services/trackbacks/177093.html</trackback:ping><description><![CDATA[<p><span style="font-size: 12pt"><span style="font-size: 14pt"><span style="font-size: 12pt"><span style="font-family: Arial"><span style="font-size: 10pt"><span style="font-family: Verdana"><span style="font-size: 14pt"><span style="font-family: Arial"><span style="font-family: Verdana">step 1</span></span></span> : 生成server key<br />
使用java/kegtool工具<br />
<span style="color: #333399">keytool -genkey -alias tomcat -keyalg RSA -keypass changeit -storepass changeit -keystore e:/server.keystore -validity 3600 </span><br />
注:参数 <span style="color: #333399">-validity</span> 指证书的有效期(天)，缺省有效期很短，只有90天。<br />
<br />
<span style="font-size: 14pt">step 2</span> : 将证书导入java证书信任库,服务端和客户端都必须导入证书<br />
分2步,第一步导出证书,第二步导入信任库(tomcat为证书别名)<br />
<span style="color: #333399">keytool -export -trustcacerts -alias tomcat -file server.cer -keystore e:/server.keystore -storepass changeit<br />
</span></span></span></span></span></span></span><span style="font-size: 12pt"><span style="font-size: 14pt"><span style="font-size: 12pt"><span style="font-family: Arial"><span style="font-size: 10pt"><span style="font-family: Verdana"><span style="color: #333399">keytool -import -trustcacerts -alias tomcat -file server.cer -keystore E:/Java/jdk1.6.0_03/jre/lib/security/cacerts -storepass changeit</span><br />
其他有用的keytool命令<br />
列表:<span style="color: #333399">keytool -list -v -keystore E:/Java/jre1.6.0_03/lib/security/cacerts </span><br />
删除:<span style="color: #333399">keytool -delete -trustcacerts -alias tomcat -keystore E:/Java/jdk1.6.0_03/jre/lib/security/cacerts -storepass changeit</span><br />
注:<span style="color: #333399">E:/Java/jdk1.6.0_03/jre/lib/security/cacerts<font color="#000000">的JRE路径和tomcat设置的E:\Java\jdk1.6.0_03\jre\bin\client\jvm.dll路径相同</font></span><br />
<br />
<span style="font-size: 14pt">step 3</span> : 配置tomcat server.xml,服务端和客户端都必须配置<br />
tomcat6.0加入以下xml代码<br />
<span style="color: #333399">&lt;Connector protocol="org.apache.coyote.http11.Http11Protocol"<br />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; port="8443" minSpareThreads="5" maxSpareThreads="75"<br />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; enableLookups="true" disableUploadTimeout="true" <br />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; acceptCount="100"&nbsp; maxThreads="200"<br />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; scheme="https" secure="true" SSLEnabled="true"<br />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; keystoreFile="e:/server.keystore" keystorePass="changeit"<br />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; clientAuth="false" sslProtocol="TLS"/&gt;</span><br />
&nbsp;<br />
参考:</span></span></span></span></span></span><a href="http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html"><span style="font-size: 12pt"><span style="font-size: 14pt"><span style="font-size: 12pt"><span style="font-family: Arial"><span style="font-size: 10pt"><span style="font-family: Verdana">http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html</span></span></span></span></span></span></a><span style="font-size: 12pt"><span style="font-size: 14pt"><span style="font-size: 12pt"><span style="font-family: Arial"><span style="font-size: 10pt"><span style="font-family: Verdana"> </span></span></span></span></span></span></p>
<img src ="http://www.blogjava.net/ddzhang/aggbug/177093.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.blogjava.net/ddzhang/" target="_blank">dd.zhang</a> 2008-01-22 17:17 <a href="http://www.blogjava.net/ddzhang/archive/2008/01/22/177093.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>tomcat访问网络映射驱动器被windows2003限制</title><link>http://www.blogjava.net/ddzhang/archive/2008/01/22/177087.html</link><dc:creator>dd.zhang</dc:creator><author>dd.zhang</author><pubDate>Tue, 22 Jan 2008 09:07:00 GMT</pubDate><guid>http://www.blogjava.net/ddzhang/archive/2008/01/22/177087.html</guid><wfw:comment>http://www.blogjava.net/ddzhang/comments/177087.html</wfw:comment><comments>http://www.blogjava.net/ddzhang/archive/2008/01/22/177087.html#Feedback</comments><slash:comments>4</slash:comments><wfw:commentRss>http://www.blogjava.net/ddzhang/comments/commentRss/177087.html</wfw:commentRss><trackback:ping>http://www.blogjava.net/ddzhang/services/trackbacks/177087.html</trackback:ping><description><![CDATA[<div>今天部署文件服务器集群时遇见一个奇怪的问题,服务器是windows2003,tomcat不能访问网络映射驱动器<br />
反复检查多变,排除程序问题,那么问题就出在windows身上,2003的安全比较高,所以本身屏蔽了比较多的服务,而且对登录程序的用户也又限制.默认的登录tomcat的帐户应该是system用户(没有具体查证),本地帐户不具有访问网络的权限.问题找到了.<br />
打开 服务管理,配置Tomcat服务属性里的登录帐户,修改登录帐户为具有访问网络的帐户(你可以修改为administrator试试).<br />
问题还没有完全解决,tomcat只能通过<a>\\192.168.0.202\files</a>网络路径的形式访问共享,不能通过网络映射驱动器访问(Y:\files)<br />
由于时间紧迫.所有没有去研究windows2003哪个服务屏蔽administrator访问网络映射驱动器的权限.下次有时间再研究</div>
<img src ="http://www.blogjava.net/ddzhang/aggbug/177087.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.blogjava.net/ddzhang/" target="_blank">dd.zhang</a> 2008-01-22 17:07 <a href="http://www.blogjava.net/ddzhang/archive/2008/01/22/177087.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>往网络映射磁盘写文件遇见的怪事 </title><link>http://www.blogjava.net/ddzhang/archive/2007/11/16/161091.html</link><dc:creator>dd.zhang</dc:creator><author>dd.zhang</author><pubDate>Fri, 16 Nov 2007 10:31:00 GMT</pubDate><guid>http://www.blogjava.net/ddzhang/archive/2007/11/16/161091.html</guid><wfw:comment>http://www.blogjava.net/ddzhang/comments/161091.html</wfw:comment><comments>http://www.blogjava.net/ddzhang/archive/2007/11/16/161091.html#Feedback</comments><slash:comments>8</slash:comments><wfw:commentRss>http://www.blogjava.net/ddzhang/comments/commentRss/161091.html</wfw:commentRss><trackback:ping>http://www.blogjava.net/ddzhang/services/trackbacks/161091.html</trackback:ping><description><![CDATA[<p>环境,两台主机 操作系统都是 window2003,主机A映射一个主机B的网络磁盘 <br />
在开发环境windows xp home版可以正常的往主机B的网络磁盘写文件 <br />
拿到服务器上就完蛋,抛出异常java.io.FileNotFoundException <br />
拿同事的机器(同样是home版)跑tomcat,也能正常写. <br />
起初以为是系统登录用户的问题.两台主机都建立同样的用户和密码,再测试还是失败. <br />
换个方法建立域帐户,把两台主机都加入到域里面,使用同样域帐户登陆主机,最后失败中的失败. <br />
实在搞不明白.如果不行就换linux了</p>
<p>还做了一个测试,在主机A上写了个普通的class,cmd java class执行,执行一个写往主机B网络磁盘写文件的操作,可以写过去,但是在tomcat环境下却写不过去..why....</p>
<img src ="http://www.blogjava.net/ddzhang/aggbug/161091.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.blogjava.net/ddzhang/" target="_blank">dd.zhang</a> 2007-11-16 18:31 <a href="http://www.blogjava.net/ddzhang/archive/2007/11/16/161091.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>关于tomcat6集群的问题 </title><link>http://www.blogjava.net/ddzhang/archive/2007/11/08/159100.html</link><dc:creator>dd.zhang</dc:creator><author>dd.zhang</author><pubDate>Thu, 08 Nov 2007 07:14:00 GMT</pubDate><guid>http://www.blogjava.net/ddzhang/archive/2007/11/08/159100.html</guid><wfw:comment>http://www.blogjava.net/ddzhang/comments/159100.html</wfw:comment><comments>http://www.blogjava.net/ddzhang/archive/2007/11/08/159100.html#Feedback</comments><slash:comments>1</slash:comments><wfw:commentRss>http://www.blogjava.net/ddzhang/comments/commentRss/159100.html</wfw:commentRss><trackback:ping>http://www.blogjava.net/ddzhang/services/trackbacks/159100.html</trackback:ping><description><![CDATA[今天研究了下TOMCAT集群，遇到问题，望解答！ &nbsp; <br />
环境是一样的2台机器(下面用tomcat1,tomcat2来表示这两台机器） &nbsp; <br />
按照官方网站的文档配置，2个服务器都能正常起来。而且都监听到了对方的存在，下面是输出信息： &nbsp; <br />
信息: &nbsp; &nbsp; &nbsp; Verification &nbsp; &nbsp; &nbsp; complete. &nbsp; &nbsp; &nbsp; Member &nbsp; &nbsp; &nbsp; disappeared[org.apache.catalina.tribes.membership.MemberImpl[tcp://WDGJ-14:4001,WDGJ-14,4001, &nbsp; &nbsp; &nbsp; alive=1608998,id={101 &nbsp; &nbsp; &nbsp; 20 &nbsp; &nbsp; &nbsp; -85 &nbsp; &nbsp; &nbsp; 1 &nbsp; &nbsp; &nbsp; -96 &nbsp; &nbsp; &nbsp; 113 &nbsp; &nbsp; &nbsp; 79 &nbsp; &nbsp; &nbsp; 34 &nbsp; &nbsp; &nbsp; -116 &nbsp; &nbsp; &nbsp; 24 &nbsp; &nbsp; &nbsp; -43 &nbsp; &nbsp; &nbsp; -93 &nbsp; &nbsp; &nbsp; 27 &nbsp; &nbsp; &nbsp; -49 &nbsp; &nbsp; &nbsp; -87 &nbsp; &nbsp; &nbsp; 44 &nbsp; &nbsp; &nbsp; }, &nbsp; &nbsp; &nbsp; payload={}, &nbsp; &nbsp; &nbsp; command={}, &nbsp; &nbsp; &nbsp; domain={}, &nbsp; &nbsp; &nbsp; ]] &nbsp; <br />
web.xml的 &lt;distributable/&gt; 已经配置了 <br />
<br />
使用同一个IE窗口访问2个服务得到的SESSION &nbsp; &nbsp; &nbsp; ID不同，在tomcat1保存一个session &nbsp; &nbsp; &nbsp; attribute，在tomcat2上没有，得到结果，配置失败。SESSION没有被复制到另一个服务。望高手帮帮忙！ &nbsp; <br />
我没有做负载均衡，只做了集群。 <br />
以下是tomcat官网上的原话，不知道是不是我没理解明白，谁能再给说明下： <br />
1.All &nbsp; your &nbsp; session &nbsp; attributes &nbsp; must &nbsp; implement &nbsp; java.io.Serializable &nbsp; <br />
2.Uncomment &nbsp; the &nbsp; Cluster &nbsp; element &nbsp; in &nbsp; server.xml &nbsp; <br />
If &nbsp; you &nbsp; have &nbsp; defined &nbsp; custom &nbsp; cluster &nbsp; valves, &nbsp; make &nbsp; sure &nbsp; you &nbsp; have &nbsp; the &nbsp; ReplicationValve &nbsp; defined &nbsp; as &nbsp; well &nbsp; under &nbsp; the &nbsp; Cluster &nbsp; element &nbsp; in &nbsp; server.xml &nbsp; <br />
3.If &nbsp; your &nbsp; Tomcat &nbsp; instances &nbsp; are &nbsp; running &nbsp; on &nbsp; the &nbsp; same &nbsp; machine, &nbsp; make &nbsp; sure &nbsp; the &nbsp; tcpListenPort &nbsp; attribute &nbsp; is &nbsp; unique &nbsp; for &nbsp; each &nbsp; instance, &nbsp; in &nbsp; most &nbsp; cases &nbsp; Tomcat &nbsp; is &nbsp; smart &nbsp; enough &nbsp; to &nbsp; resolve &nbsp; this &nbsp; on &nbsp; it 's &nbsp; own &nbsp; by &nbsp; autodetecting &nbsp; available &nbsp; ports &nbsp; in &nbsp; the &nbsp; range &nbsp; 4000-4100 &nbsp; <br />
4.Make &nbsp; sure &nbsp; your &nbsp; web.xml &nbsp; has &nbsp; the &nbsp; &lt;distributable/&gt; &nbsp; element &nbsp; or &nbsp; set &nbsp; at &nbsp; your &nbsp; &lt;Context &nbsp; distributable= "true " &nbsp; /&gt; &nbsp; <br />
5.If &nbsp; you &nbsp; are &nbsp; using &nbsp; mod_jk, &nbsp; make &nbsp; sure &nbsp; that &nbsp; jvmRoute &nbsp; attribute &nbsp; is &nbsp; set &nbsp; at &nbsp; your &nbsp; Engine &nbsp; &lt;Engine &nbsp; name= "Catalina " &nbsp; jvmRoute= "node01 " &nbsp; &gt; &nbsp; and &nbsp; that &nbsp; the &nbsp; jvmRoute &nbsp; attribute &nbsp; value &nbsp; matches &nbsp; your &nbsp; worker &nbsp; name &nbsp; in &nbsp; workers.properties &nbsp; <br />
6.Make &nbsp; sure &nbsp; that &nbsp; all &nbsp; nodes &nbsp; have &nbsp; the &nbsp; same &nbsp; time &nbsp; and &nbsp; sync &nbsp; with &nbsp; NTP &nbsp; service! &nbsp; <br />
7.Make &nbsp; sure &nbsp; that &nbsp; your &nbsp; loadbalancer &nbsp; is &nbsp; configured &nbsp; for &nbsp; sticky &nbsp; session &nbsp; mode. &nbsp; <br />
<br />
两个TOMCAT的server.xml唯一不同的地方就是Receiver的监听端口，一个是4000一个是4001 &nbsp; <br />
server.xml文件如下： &nbsp; <br />
&lt;Server &nbsp; &nbsp; &nbsp; port= &nbsp; "8005 &nbsp; " &nbsp; &nbsp; &nbsp; shutdown= &nbsp; "SHUTDOWN &nbsp; "&gt; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &lt;Listener &nbsp; &nbsp; &nbsp; className= &nbsp; "org.apache.catalina.core.AprLifecycleListener &nbsp; " &nbsp; &nbsp; &nbsp; SSLEngine= &nbsp; "on &nbsp; " &nbsp; &nbsp; &nbsp; /&gt; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &lt;Listener &nbsp; &nbsp; &nbsp; className= &nbsp; "org.apache.catalina.core.JasperListener &nbsp; " &nbsp; &nbsp; &nbsp; /&gt; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &lt;Listener &nbsp; &nbsp; &nbsp; className= &nbsp; "org.apache.catalina.mbeans.ServerLifecycleListener &nbsp; " &nbsp; &nbsp; &nbsp; /&gt; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &lt;Listener &nbsp; &nbsp; &nbsp; className= &nbsp; "org.apache.catalina.mbeans.GlobalResourcesLifecycleListener &nbsp; " &nbsp; &nbsp; &nbsp; /&gt; &nbsp; <br />
<br />
&nbsp; &nbsp; &nbsp; &nbsp; &lt;GlobalNamingResources&gt; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;Resource &nbsp; &nbsp; &nbsp; name= &nbsp; "UserDatabase &nbsp; " &nbsp; &nbsp; &nbsp; auth= &nbsp; "Container &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; type= &nbsp; "org.apache.catalina.UserDatabase &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; description= &nbsp; "User &nbsp; &nbsp; &nbsp; database &nbsp; &nbsp; &nbsp; that &nbsp; &nbsp; &nbsp; can &nbsp; &nbsp; &nbsp; be &nbsp; &nbsp; &nbsp; updated &nbsp; &nbsp; &nbsp; and &nbsp; &nbsp; &nbsp; saved &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; factory= &nbsp; "org.apache.catalina.users.MemoryUserDatabaseFactory &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; pathname= &nbsp; "conf/tomcat-users.xml &nbsp; " &nbsp; &nbsp; &nbsp; /&gt; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &lt;/GlobalNamingResources&gt; &nbsp; <br />
<br />
&nbsp; &nbsp; &nbsp; &nbsp; &lt;Service &nbsp; &nbsp; &nbsp; name= &nbsp; "Catalina &nbsp; "&gt; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;Connector &nbsp; &nbsp; &nbsp; port= &nbsp; "80 &nbsp; " &nbsp; &nbsp; &nbsp; protocol= &nbsp; "HTTP/1.1 &nbsp; " &nbsp; &nbsp; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; connectionTimeout= &nbsp; "20000 &nbsp; " &nbsp; &nbsp; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; redirectPort= &nbsp; "8443 &nbsp; " &nbsp; &nbsp; &nbsp; /&gt; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;Connector &nbsp; &nbsp; &nbsp; port= &nbsp; "8009 &nbsp; " &nbsp; &nbsp; &nbsp; protocol= &nbsp; "AJP/1.3 &nbsp; " &nbsp; &nbsp; &nbsp; redirectPort= &nbsp; "8443 &nbsp; " &nbsp; &nbsp; &nbsp; /&gt; &nbsp; <br />
<br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;Engine &nbsp; &nbsp; &nbsp; name= &nbsp; "Catalina &nbsp; " &nbsp; &nbsp; &nbsp; defaultHost= &nbsp; "localhost &nbsp; "&gt; &nbsp; <br />
<br />
&nbsp; &nbsp; &lt;Cluster &nbsp; &nbsp; &nbsp; className= &nbsp; "org.apache.catalina.ha.tcp.SimpleTcpCluster &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; channelSendOptions= &nbsp; "8 &nbsp; "&gt; &nbsp; <br />
<br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;Manager &nbsp; &nbsp; &nbsp; className= &nbsp; "org.apache.catalina.ha.session.DeltaManager &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; expireSessionsOnShutdown= &nbsp; "false &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; notifyListenersOnReplication= &nbsp; "true &nbsp; "/&gt; &nbsp; <br />
<br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;Channel &nbsp; &nbsp; &nbsp; className= &nbsp; "org.apache.catalina.tribes.group.GroupChannel &nbsp; "&gt; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;Membership &nbsp; &nbsp; &nbsp; className= &nbsp; "org.apache.catalina.tribes.membership.McastService &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; address= &nbsp; "228.0.0.4 &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; port= &nbsp; "45564 &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; frequency= &nbsp; "500 &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; dropTime= &nbsp; "3000 &nbsp; "/&gt; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;Receiver &nbsp; &nbsp; &nbsp; className= &nbsp; "org.apache.catalina.tribes.transport.nio.NioReceiver &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; address= &nbsp; "auto &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; port= &nbsp; "4000 &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; autoBind= &nbsp; "100 &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; selectorTimeout= &nbsp; "5000 &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; maxThreads= &nbsp; "6 &nbsp; "/&gt; &nbsp; <br />
<br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;Sender &nbsp; &nbsp; &nbsp; className= &nbsp; "org.apache.catalina.tribes.transport.ReplicationTransmitter &nbsp; "&gt; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;Transport &nbsp; &nbsp; &nbsp; className= &nbsp; "org.apache.catalina.tribes.transport.nio.PooledParallelSender &nbsp; "/&gt; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;/Sender&gt; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;Interceptor &nbsp; &nbsp; &nbsp; className= &nbsp; "org.apache.catalina.tribes.group.interceptors.TcpFailureDetector &nbsp; "/&gt; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;Interceptor &nbsp; &nbsp; &nbsp; className= &nbsp; "org.apache.catalina.tribes.group.interceptors.MessageDispatch15Interceptor &nbsp; "/&gt; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;/Channel&gt; &nbsp; <br />
<br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;Valve &nbsp; &nbsp; &nbsp; className= &nbsp; "org.apache.catalina.ha.tcp.ReplicationValve &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; filter= &nbsp; " &nbsp; "/&gt; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;Valve &nbsp; &nbsp; &nbsp; className= &nbsp; "org.apache.catalina.ha.session.JvmRouteBinderValve &nbsp; "/&gt; &nbsp; <br />
<br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;Deployer &nbsp; &nbsp; &nbsp; className= &nbsp; "org.apache.catalina.ha.deploy.FarmWarDeployer &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; tempDir= &nbsp; "/tmp/war-temp/ &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; deployDir= &nbsp; "/tmp/war-deploy/ &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; watchDir= &nbsp; "/tmp/war-listen/ &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; watchEnabled= &nbsp; "false &nbsp; "/&gt; &nbsp; <br />
<br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;ClusterListener &nbsp; &nbsp; &nbsp; className= &nbsp; "org.apache.catalina.ha.session.JvmRouteSessionIDBinderListener &nbsp; "/&gt; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;ClusterListener &nbsp; &nbsp; &nbsp; className= &nbsp; "org.apache.catalina.ha.session.ClusterSessionListener &nbsp; "/&gt; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;/Cluster&gt; &nbsp; <br />
<br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;Realm &nbsp; &nbsp; &nbsp; className= &nbsp; "org.apache.catalina.realm.UserDatabaseRealm &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; resourceName= &nbsp; "UserDatabase &nbsp; "/&gt; &nbsp; <br />
<br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;Host &nbsp; &nbsp; &nbsp; name= &nbsp; "localhost &nbsp; " &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; appBase= &nbsp; "webapps &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; unpackWARs= &nbsp; "true &nbsp; " &nbsp; &nbsp; &nbsp; autoDeploy= &nbsp; "true &nbsp; " &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; xmlValidation= &nbsp; "false &nbsp; " &nbsp; &nbsp; &nbsp; xmlNamespaceAware= &nbsp; "false &nbsp; "&gt; &nbsp; <br />
<br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;/Host&gt; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;/Engine&gt; &nbsp; <br />
&nbsp; &nbsp; &nbsp; &nbsp; &lt;/Service&gt; &nbsp; <br />
&lt;/Server&gt;&nbsp;&nbsp; <br />
<img src ="http://www.blogjava.net/ddzhang/aggbug/159100.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.blogjava.net/ddzhang/" target="_blank">dd.zhang</a> 2007-11-08 15:14 <a href="http://www.blogjava.net/ddzhang/archive/2007/11/08/159100.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>网站安全快速检查清单</title><link>http://www.blogjava.net/ddzhang/archive/2007/10/08/151109.html</link><dc:creator>dd.zhang</dc:creator><author>dd.zhang</author><pubDate>Mon, 08 Oct 2007 09:22:00 GMT</pubDate><guid>http://www.blogjava.net/ddzhang/archive/2007/10/08/151109.html</guid><wfw:comment>http://www.blogjava.net/ddzhang/comments/151109.html</wfw:comment><comments>http://www.blogjava.net/ddzhang/archive/2007/10/08/151109.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.blogjava.net/ddzhang/comments/commentRss/151109.html</wfw:commentRss><trackback:ping>http://www.blogjava.net/ddzhang/services/trackbacks/151109.html</trackback:ping><description><![CDATA[<span class="byline-author">欢迎大家访问 <a href="http://www.ossearch.cn/">开源搜索http://www.ossearch.cn</a>(集成各类开源搜索,Java开源,Java技术文档,php开源,php技术文档,.net技术文档,BT,软件,电影,游戏,音乐综合搜索)<br />
<br />
<span class="byline-author">转载自<a href="http://www.googlechinawebmaster.com/" target="_blank">谷歌中文网站管理员博客</a> </span><br />
<br />
原文：<a href="http://googlewebmastercentral.blogspot.com/2007/09/quick-security-checklist-for-webmasters.html" target="_blank">Quick security checklist for webmasters</a><br />
发表于： 2007 年 9 月 18 日，星期二，12:34AM<br />
<br />
最近几个月，失密网站的数量明显增多。一种解释是黑客黑掉了一些网站来发布恶意软件或制造垃圾搜索结果。不论是何原因，这是我们为站长们提供一些网站安全方面的小技巧的好时机。<br />
<br />
<strong>免责声明</strong>：虽然我们收集了很多小贴士以及链接，我们也鼓励管理员&#8220;请在家中尝试以下方法&#8221;，但是这绝不是一个保护你网站安全的完整清单。我们希望它有帮助，但我们也建议您要对网站安全进行更深入的研究。<br />
<br />
<strong>检查你的服务器配置</strong><br />
<br />
在 Apache 的网站上有一些<a href="http://httpd.apache.org/docs/1.3/misc/security_tips.html" target="_blank">安全配置技巧</a>， 微软也有一个 <a href="http://technet2.microsoft.com/WindowsServer/zh-CHS/Library/138a8ea6-680e-4c69-88fa-c57e9d0ea8132052.mspx?mfr=true" target="_blank">IIS 技术资源中心</a>。其中的主要技巧包括目录权限信息，服务器端包括认证和加密信息。<br />
<br />
<strong>总是使用最新的软件更新和补丁</strong><br />
<br />
人们经常犯的的错误是在自己的网站上安装一个论坛或博客软件，然后就再也不管了。就像你的车总是要保养一样，保持对你安装的任何软件的最新更新也是很重要的。需要一些小贴士？<a href="http://www.mblair.net/no-sweat-website-security/" target="_blank">Mark Blair 的博客</a>上有一些很好的，包括为你网站上所有的软件和插件列个清单，并跟踪版本号和更新历史。他还建议利用任何软件开发者网站提供的 feed。<br />
<br />
<strong>经常留意你的日志文件</strong><br />
<br />
养成这个习惯有很多好处，其中之一就是安全性的增加。你可能会对你的发现有些惊讶。<br />
<br />
<strong>检查你的网站，看看有没有常见漏洞</strong><br />
<br />
避免存在有开放权限的目录。这几乎就像把你家的前门敞开，门前的垫子上写着&#8220;来吧，请随意！&#8221; 你也要检查任何 <a href="http://www.owasp.org/index.php/Cross_Site_Scripting" target="_blank">xss</a>（跨站点脚本）和 <a href="http://www.owasp.org/index.php/Cross_Site_Scripting" target="_blank">SQL 注入</a>漏洞。最后，选择好密码。你可以依循 Gmail 支持中心的一个很好的<a href="http://mail.google.com/support/bin/answer.py?answer=29409&amp;topic=8266" target="_blank">指南</a>，它会帮助你选择一个密码。<br />
<br />
<strong>警惕第三方内容提供商</strong><br />
<br />
如果你正考虑安装一个由第三方提供的应用软件，例如一个控件，计数器，广告网络，或网络统计服务，一定要非常小心。虽然网络上有很多非常好的第三方内容，有些提供商也可 能利用这些应用软件来干坏事，例如对你的访客有危险的脚本。要确保应用软件来自有信誉的提供者。他们有一个合法网站吗？他们提供技术支持吗？他们有联系信息吗？有其他管理员用过该软件吗？<br />
<br />
<strong>尝试在谷歌上用 site: 搜索来看看谷歌索引了你的什么网页</strong><br />
<br />
这看似有点明显，但它经常被忽视。对你的网站做一个例检并确保一切正常总是有好处的。不熟悉 site: 搜索操作？它是一个让你只在一个具体网站上搜索的方法。举例说，搜索 <a href="http://www.google.com/search?q=site%3Agoogleblog.blogspot.com" target="_blank">site:googleblog.blogspot.com </a>只会返回谷歌官方（英文）博客的结果。<br />
<br />
<strong>使用谷歌的<a href="http://www.google.cn/webmasters/" target="_blank">站长工具</a></strong><br />
<br />
谷歌的站长工具是免费的。它还有各种各样的好功能。譬如，它有关于你的网站的状态数据和管理 Googlebot 抓取您网站的工具。另一个亮点是，如果谷歌认为你的网站已被攻陷并被放置了恶意软件， 我们的<a href="http://www.googlechinawebmaster.com/2007/09/blog-post_6441.html" target="_blank">站长控制台会显示更详细的信息</a>，如一些有害网址的样本。一旦你认为恶意软件已经被删除，你可以通过站长工具来要求重新审查。<br />
<br />
<strong>使用安全协议</strong><br />
<br />
数据传输应该用 SSH 和 SFTP，而不是象 telnet 或 FTP 的纯文本协议。 SSH 和 SFTP 会加密，也就更安全。关于这个和其他许多有用的小技巧，请参考 StopBadware.org 的<a href="http://www.googlechinawebmaster.com/2007/09/blog-post_25.html" target="_blank">清除和保护你的网站的小技巧</a>。<br />
<br />
<strong>阅读<a href="http://googleonlinesecurity.blogspot.com/" target="_blank">谷歌在线安全博客</a></strong><br />
<br />
这个博客上有很多很好的关于线上安全的内容并有指向有用资源的链接。建议你把它加到你的 Google Reader Feeds。:)<br />
<br />
<strong>从您的网站寄存服务公司寻求支持</strong><br />
<br />
许多网站寄存服务公司都有技术服务组。如果你觉得有点儿不对劲，或者仅仅想确保你的网站是好的，你可以访问他们的网站或给他们打一个电话。<br />
<br />
我们希望你能从我们的小贴士中发现有用的信息。如果您想分享你自己的技巧，请为这篇文章发表评论，或者在<a href="http://groups.google.com/group/Google_Webmaster_Help" target="_blank">谷歌站长帮助小组</a>开一个讨论。立即动手，让你的网站更安全！</span>
<img src ="http://www.blogjava.net/ddzhang/aggbug/151109.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.blogjava.net/ddzhang/" target="_blank">dd.zhang</a> 2007-10-08 17:22 <a href="http://www.blogjava.net/ddzhang/archive/2007/10/08/151109.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>通过站长工具重新评估恶意软件站</title><link>http://www.blogjava.net/ddzhang/archive/2007/10/08/151103.html</link><dc:creator>dd.zhang</dc:creator><author>dd.zhang</author><pubDate>Mon, 08 Oct 2007 08:54:00 GMT</pubDate><guid>http://www.blogjava.net/ddzhang/archive/2007/10/08/151103.html</guid><wfw:comment>http://www.blogjava.net/ddzhang/comments/151103.html</wfw:comment><comments>http://www.blogjava.net/ddzhang/archive/2007/10/08/151103.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.blogjava.net/ddzhang/comments/commentRss/151103.html</wfw:commentRss><trackback:ping>http://www.blogjava.net/ddzhang/services/trackbacks/151103.html</trackback:ping><description><![CDATA[<span class="byline-author">欢迎大家访问 <a href="http://www.ossearch.cn/">开源搜索http://www.ossearch.cn</a>(集成各类开源搜索,Java开源,Java技术文档,php开源,php技术文档,.net技术文档,BT,软件,电影,游戏,音乐综合搜索)<br />
<br />
转载自<a href="http://www.googlechinawebmaster.com/" target="_blank">谷歌中文网站管理员博客</a> </span><br />
<br />
原文：<a href="http://googlewebmastercentral.blogspot.com/2007/08/malware-reviews-via-webmaster-tools.html" target="_blank">Malware reviews via Webmaster Tools</a><br />
发表于： 2007年8月13日，星期一，12:27PM<br />
<br />
在过去的一年里，受<a href="http://stopbadware.org/home/help" target="_blank">流氓/恶意软件</a>感染的网站数目从每周几个增长到每周数千。在我们以前的帖子&#8220;<a href="http://googlechinablog.com/2007/06/blog-post_05.html" target="_blank">关于恶意软件警告</a>&#8221;以及&#8220;<a href="http://groups.google.com/group/stopbadware" target="_blank">停止恶意软件讨论组</a>&#8221;里，我们听到了一些你们的建议，也就是改善我们与被感染网站的站长的交流。现在，我们的<a href="http://www.google.com/webmasters/tools" target="_blank">站长工具</a>可以重新评估感染恶意软件的网站。<br />
<br />
通过我们，<a href="http://www.google.com/support/bin/answer.py?answer=45449&amp;topic=360&amp;hl=zh-CN&amp;sa=X&amp;oi=malwarewarninglink&amp;resnum=1&amp;ct=help" target="_blank">对搜索结果加上&#8220;恶意软件&#8221;标记</a>&#8221;或是在站长工具里对你网站的一个总的概括，你可能发现你的网站感染了恶意软件。我们现在已经简化了审查程序，使 Google（谷歌）在你的网站时去掉&#8220;恶意软件的标签：<br />
<br />
1. 在站长工具里看一看你的感染了恶意软件的 URL 的样本。<br />
<br />
2. 根据 <a href="http://www.googlechinawebmaster.com/2007/09/blog-post_25.html" target="_blank">StopBadware.org</a> 网站的安全提示对你的网站作出必要的改动。<br />
<br />
3. <strong>新做法</strong>：使用站长工具要求谷歌重新评估你的网站。 我们会检查你的网站还有没有恶意软件。<br />
<br />
4. <strong>新做法</strong>： 你可以检查我们重新评估的状态。<br />
* 如果我们觉得你的网站仍是有害的，我们会提供你的危险URL的最新名单。<br />
* 如果我们确认你的网站已经是正常了，你可以期待我们很快（通常是 24 小时以内）清除关于你的网站有恶意软件的信息。 <br />
&nbsp;&nbsp;&nbsp;&nbsp;<a href="http://googlechinablog.com/uploaded_images/summary-718555.png" target="_blank"><br />
<img style="border-right: 1px solid; border-top: 1px solid; border-left: 1px solid; border-bottom: 1px solid" alt="" src="http://googlechinablog.com/uploaded_images/summary-718553.png" border="0" /></a><br />
<br />
我们鼓励所有站长去熟悉<a href="http://www.googlechinawebmaster.com/2007/09/blog-post_25.html#preventing" target="_blank">Stopbadware 的恶意软件预防小技巧</a>。如果你有其他问题，请阅读我们的相关<a href="http://www.google.cn/support/webmasters/bin/answer.py?answer=45432" target="_blank">文献</a>或在<a href="http://groups.google.com/group/stopbadware" target="_blank">讨论组</a>上发帖。我们希望您觉得这个在<a href="http://www.google.com/webmasters/sitemaps/?hl=zh-CN" target="_blank">站长工具</a>中的新功能是有用的，特别是对发现和修正任何和恶意软件相关的问题。我们也对你们为认识和预防恶意软件的努力表示感谢。 
<img src ="http://www.blogjava.net/ddzhang/aggbug/151103.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.blogjava.net/ddzhang/" target="_blank">dd.zhang</a> 2007-10-08 16:54 <a href="http://www.blogjava.net/ddzhang/archive/2007/10/08/151103.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>最近发现一个不错的网站 http://www.ossearch.cn </title><link>http://www.blogjava.net/ddzhang/archive/2007/09/26/148278.html</link><dc:creator>dd.zhang</dc:creator><author>dd.zhang</author><pubDate>Wed, 26 Sep 2007 04:11:00 GMT</pubDate><guid>http://www.blogjava.net/ddzhang/archive/2007/09/26/148278.html</guid><wfw:comment>http://www.blogjava.net/ddzhang/comments/148278.html</wfw:comment><comments>http://www.blogjava.net/ddzhang/archive/2007/09/26/148278.html#Feedback</comments><slash:comments>2</slash:comments><wfw:commentRss>http://www.blogjava.net/ddzhang/comments/commentRss/148278.html</wfw:commentRss><trackback:ping>http://www.blogjava.net/ddzhang/services/trackbacks/148278.html</trackback:ping><description><![CDATA[最近发现一个不错的网站
http://www.ossearch.cn
自己进去看看就知道了.
我感觉挺好<br />
<img src ="http://www.blogjava.net/ddzhang/aggbug/148278.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.blogjava.net/ddzhang/" target="_blank">dd.zhang</a> 2007-09-26 12:11 <a href="http://www.blogjava.net/ddzhang/archive/2007/09/26/148278.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>GOOGLE怎样处理垃圾网站举报？</title><link>http://www.blogjava.net/ddzhang/archive/2007/09/17/145915.html</link><dc:creator>dd.zhang</dc:creator><author>dd.zhang</author><pubDate>Mon, 17 Sep 2007 09:19:00 GMT</pubDate><guid>http://www.blogjava.net/ddzhang/archive/2007/09/17/145915.html</guid><wfw:comment>http://www.blogjava.net/ddzhang/comments/145915.html</wfw:comment><comments>http://www.blogjava.net/ddzhang/archive/2007/09/17/145915.html#Feedback</comments><slash:comments>1</slash:comments><wfw:commentRss>http://www.blogjava.net/ddzhang/comments/commentRss/145915.html</wfw:commentRss><trackback:ping>http://www.blogjava.net/ddzhang/services/trackbacks/145915.html</trackback:ping><description><![CDATA[欢迎大家访问 <a href="http://www.thinkinginjava.org">http://www.thinkinginjava.org</a>(Java开源,Java开源大全,webwork,hibernate,struts,spring等java热门开源介绍)<br />
<br />
<a href="https://www.google.cn/webmasters/tools/" target="_blank">谷歌网站管理员工具</a>不仅能帮助我们和网站管理员沟通，也提供了<a href="https://www.google.com/webmasters/tools/spamreport?hl=zh-CN" target="_blank">举报垃圾网站</a>的在线渠道。感谢我们的用户，我们收到了很多垃圾网站举报。这些举报对我们改进搜索质量，给出更相关、有用的结果有很大帮助。谷歌用户可以很方便地通过两个渠道（认证的和不需认证的）进行垃圾网站举报。我们往往优先处理通过<a href="https://www.google.com/webmasters/tools/spamreport?hl=zh-cn" target="_blank">认证的渠道</a>（譬如站长工具）递交的垃圾网站。当然，你也可以提交<a href="http://www.google.cn/contact/spamreport.html" target="_blank">未经认证报告</a>。由于未经认证报告是匿名举报，我们给他们赋予的优先级会相对较低。<br />
<br />
这里我们想讲一讲我们是如何处理从站长管理员工具得到的垃圾网站举报的。<br />
<br />
<strong>我们评估垃圾网站举报</strong><br />
<br />
我们非常重视垃圾网站的举报，并有专门人员及时处理。<br />
<br />
我们主要根据我们的<a href="http://www.google.com/support/webmasters/bin/answer.py?hl=zh-CN&amp;answer=35769" target="_blank">网站管理员指南</a>来处理垃圾网站举报，确定是否赞同或不赞同用户的举报。<br />
<br />
垃圾站点通常使用作弊手法来误导搜索引擎使之错误地把用户带入某些网站。谷歌网站管理员指南包含大部分（但不是全部）常见形式的欺骗性或操纵行为。我们建议你经常阅读我们<a href="http://www.google.cn/support/webmasters/" target="_blank">网站管理员帮助中心</a>上的网站管理员指南。该指南内容将不但帮助你创建一个对搜索引擎友好的网站，而且避免了谷歌和你的用户把你的网站看作是垃圾网站。<br />
<br />
在有些情况下，我们并不赞同用户的举报内容，被举报的网站将不会受到任何影响。对确认作弊的垃圾网站我们会将他们转交给我们的软件工程师作出相应的惩罚。<br />
<br />
<strong>我们对确认的垃圾网站进行惩罚</strong><br />
<br />
对确认作弊的网站，我们会人工地或从算法上采取一些行动。当然，我们对作弊网站的惩罚度会视网站违反质量指南的严重程度而定，也就是说，对确认作弊的网站并不总是把他们全部从我们的索引中移去。<br />
<br />
改进反垃圾网站算法<br />
反垃圾网站算法是我们打击垃圾网站最有效的方法。对某一网站的举报可能改进我们对所有类似垃圾网站的处理算法。当然，在我们使用我们的新代码之前，我们会大量地测试新代码。这个过程需要时间。当人们问"为什么我举报的网站没有受到惩罚？&#8221;，如果是我们确认的垃圾网站举报，很可能是我们正在给出，或者将会给出一个算法上的处理。<br />
<br />
人工处理一个垃圾站点<br />
我们也可能人工处理一个确认了的垃圾网站。这个过程显然要快得多，但它并不是一个健全的方法。我们更愿意使用算法改善我们的搜索质量。<br />
<br />
<strong>我们可能联系网站管理员，让他们改正他们的网站</strong><br />
<br />
如果我们发现一个被举报的垃圾站点可能无意中违反了谷歌网站管理员指南，我们会试图联络网站管理员来以纠正他们的错误。我们可能通过<a href="http://googlewebmastercentral.blogspot.com/2007/08/update-on-penalty-notifications.html" target="_blank">电子邮件</a>来联系网站管理员。如果他们已经在网站管理员工具上<a href="http://www.google.cn/support/webmasters/bin/topic.py?topic=8472" target="_blank">确认</a>了他们的网站，我们会通过<a href="http://www.google.com/support/webmasters/bin/answer.py?answer=61504&amp;hl=zh-CN" target="_blank">信息中心</a>来传递我们的信息。<br />
<br />
我们的宗旨是为用户提供最相关的结果。我们希望我们的用户和网站管理员继续举报垃圾网站。它对我们改进算法和改善搜索质量是有很大帮助的。如果您还不了解什么是垃圾网站，请访问我们的帮助中心或者在我们的<a href="http://groups.google.com/group/Google_Webmaster_Help" target="_blank">讨论组</a>上发表你的问题。当然，如果你发现一个垃圾网站，<a href="https://www.google.com/webmasters/tools/spamreport?hl=zh-CN" target="_blank">请告诉我们</a>！
 <img src ="http://www.blogjava.net/ddzhang/aggbug/145915.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.blogjava.net/ddzhang/" target="_blank">dd.zhang</a> 2007-09-17 17:19 <a href="http://www.blogjava.net/ddzhang/archive/2007/09/17/145915.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>www.thinkinginjava.org正式上线</title><link>http://www.blogjava.net/ddzhang/archive/2007/09/16/145504.html</link><dc:creator>dd.zhang</dc:creator><author>dd.zhang</author><pubDate>Sun, 16 Sep 2007 05:03:00 GMT</pubDate><guid>http://www.blogjava.net/ddzhang/archive/2007/09/16/145504.html</guid><wfw:comment>http://www.blogjava.net/ddzhang/comments/145504.html</wfw:comment><comments>http://www.blogjava.net/ddzhang/archive/2007/09/16/145504.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.blogjava.net/ddzhang/comments/commentRss/145504.html</wfw:commentRss><trackback:ping>http://www.blogjava.net/ddzhang/services/trackbacks/145504.html</trackback:ping><description><![CDATA[<a href="http://www.thinkinginjava.org">www.thinkinginjava.org</a>正式上线<br />
Java开源,Java开源大全,webwork,hibernate,struts,spring等java热门开源介绍<br />
ThinkInJava,支持JAVA开源,欢迎大家访问<br />
<img src ="http://www.blogjava.net/ddzhang/aggbug/145504.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.blogjava.net/ddzhang/" target="_blank">dd.zhang</a> 2007-09-16 13:03 <a href="http://www.blogjava.net/ddzhang/archive/2007/09/16/145504.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item></channel></rss>