-----------------------------------------------------------------------------------------------------
Starting Nmap 6.25 ( http://nmap.org ) at 2013-03-01 23:25 SE Asia Standard Time
Nmap scan report for 115.79.207.29
Host is up.
PORT STATE SERVICE
80/tcp filtered http
TRACEROUTE (using proto 1/icmp)
HOP RTT ADDRESS
1 ... 30
Nmap done: 1 IP address (1 host up) scanned in 11.59 seconds
-----------------------------------------------------------------------------------------------------

Starting Nmap 6.25 ( http://nmap.org ) at 2013-03-01 22:39 SE Asia Standard Time
Nmap scan report for 11x.79.20x.29
Host is up (0.020s latency).
PORT STATE SERVICE
80/tcp open http
TRACEROUTE (using port 80/tcp)
HOP RTT ADDRESS
1 ... 8
9 23.00 ms 11x.79.20x.29
Nmap done: 1 IP address (1 host up) scanned in 4.40 seconds

# Firewall configuration written by system-config-securitylevel
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j REJECT
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 25 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 137 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 138 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 139 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 445 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 1221 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 1403 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 1723 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 30000 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 3389 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 53 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 8080 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 8080 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 11211 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT

[root@server2 ~]# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp dpt:domain
ACCEPT tcp -- anywhere anywhere tcp dpt:domain
ACCEPT udp -- anywhere anywhere udp dpt:bootps
ACCEPT tcp -- anywhere anywhere tcp dpt:bootps
RH-Firewall-1-INPUT all -- anywhere anywhere
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere 192.168.122.0/24 state RELATED,ESTABLISHED
ACCEPT all -- 192.168.122.0/24 anywhere
ACCEPT all -- anywhere anywhere
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
RH-Firewall-1-INPUT all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain RH-Firewall-1-INPUT (2 references)
target prot opt source destination
REJECT icmp -- anywhere anywhere icmp any reject-with icmp-port-unreachable
ACCEPT esp -- anywhere anywhere
ACCEPT ah -- anywhere anywhere
ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns
ACCEPT udp -- anywhere anywhere udp dpt:ipp
ACCEPT tcp -- anywhere anywhere tcp dpt:ipp
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ftp
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:smtp
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh
ACCEPT udp -- anywhere anywhere state NEW udp dpt:netbios-ns
ACCEPT udp -- anywhere anywhere state NEW udp dpt:netbios-dgm
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:netbios-ssn
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:microsoft-ds
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:http
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:scp-config
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ndmp
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:sweetware-apps
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:prm-nm-np
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:pptp
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:30000
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:mysql
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ms-wbt-server
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:domain
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:webcache
ACCEPT udp -- anywhere anywhere state NEW udp dpt:webcache
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:11211
REJECT all -- anywhere anywhere reject-with icmp-host-prohibited

C:\Users\QNV>nslookup MYDOMAIN.COM
Server: UnKnown
Address: 192.168.20.254
Non-authoritative answer:
Name: MYDOMAIN.COM
Address: 11X.79.20X.29

ServerRoot "/usr/local/apache"
Listen 8080
<IfModule !mpm_netware_module>
<IfModule !mpm_winnt_module>
User www
Group www
</IfModule>
</IfModule>
# 'Main' server configuration
ServerAdmin <a href="mailto:webmaster@MYDOMAIN.COM">webmaster@MYDOMAIN.COM</a>
ServerName www.MYDOMAIN.COM:8080
DocumentRoot "/home/wwwroot"
<Directory />
Options ExecCGI FollowSymLinks Includes IncludesNOEXEC -Indexes -MultiViews SymLinksIfOwnerMatch
AllowOverride All
Order allow,deny
Allow from all
Allow from 127.0.0.1
</Directory>
<Directory "/home/wwwroot">
Options Indexes -Indexes FollowSymLinks
AllowOverride All
Order allow,deny
Allow from all
Allow from 127.0.0.1
</Directory>
<IfModule dir_module>
DirectoryIndex index.html index.htm index.shtml index.php index.perl index.pl index.cgi
</IfModule>
<FilesMatch "^\.ht">
Order allow,deny
Deny from all
Satisfy All
</FilesMatch>
ErrorLog "logs/error_log"
LogLevel warn
<IfModule log_config_module>
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
<IfModule logio_module>
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
</IfModule>
CustomLog "logs/access_log" common
</IfModule>
<IfModule alias_module>
ScriptAlias /cgi-bin/ "/usr/local/apache/cgi-bin/"
</IfModule>
<IfModule cgid_module>
</IfModule>
<Directory "/usr/local/apache/cgi-bin">
AllowOverride None
Options None
Order allow,deny
Allow from all
Allow from 127.0.0.1
</Directory>
DefaultType text/plain
RewriteEngine on
AddType text/html .shtml
AddHandler cgi-script .cgi .pl .plx .ppl .perl
AddHandler server-parsed .shtml
<IfModule mime_module>
TypesConfig conf/mime.types
AddType application/x-compress .Z
AddType application/x-gzip .gz .tgz
AddType application/perl .pl .plx .ppl .perl
AddType application/x-img .img
AddType application/x-httpd-php .php .php3 .php4 .php5 .php6
AddType application/x-httpd-php-source .phps
AddType application/cgi .cgi
AddType text/x-sql .sql
AddType text/x-log .log
AddType text/x-config .cnf conf
AddType text/x-registry .reg
AddType text/html .shtml
AddType application/x-tar .tgz
AddType application/rar .rar
AddType application/x-compressed .rar
AddType application/x-rar .rar
AddType application/x-rar-compressed .rar
AddType text/vnd.wap.wml .wml
</IfModule>
ErrorDocument 403 http://namviet-it.com/index.php
LoadModule php5_module modules/libphp5.so
Include conf/extra/rpaf.conf
Include conf/extra/httpd-mpm.conf
Include conf/extra/httpd-multilang-errordoc.conf
Include conf/extra/httpd-autoindex.conf
Include conf/extra/httpd-languages.conf
Include conf/extra/httpd-vhosts.conf
Include conf/extra/httpd-default.conf
Include conf/vhost/*.conf

user www www;
worker_processes 1;
error_log /home/wwwlogs/nginx_error.log crit;
pid /usr/local/nginx/logs/nginx.pid;
#Specifies the value for maximum file descriptors that can be opened by this process.
worker_rlimit_nofile 51200;
events
{
use epoll;
worker_connections 51200;
}
http
{
include mime.types;
default_type application/octet-stream;
server_names_hash_bucket_size 128;
client_header_buffer_size 32k;
large_client_header_buffers 4 32k;
client_max_body_size 50m;
sendfile on;
tcp_nopush off;
keepalive_timeout 3;
tcp_nodelay on;
fastcgi_connect_timeout 300;
fastcgi_send_timeout 300;
fastcgi_read_timeout 300;
fastcgi_buffer_size 64k;
fastcgi_buffers 4 64k;
fastcgi_busy_buffers_size 128k;
fastcgi_temp_file_write_size 256k;
gzip on;
gzip_min_length 1k;
gzip_buffers 4 16k;
gzip_http_version 1.0;
gzip_comp_level 2;
gzip_types text/plain application/x-javascript text/css application/xml;
gzip_vary on;
#limit_zone crawler $binary_remote_addr 10m;
log_format access '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" $http_x_forwarded_for';
access_log /home/wwwlogs/access.log access;
proxy_cache_path /usr/local/nginx/cache_temp levels=1:2 keys_zone=server-cache:8m max_size=1000m inactive=600m;
proxy_temp_path /usr/local/nginx/proxy_temp;
server
{
listen 80;
server_name www.MYDOMAIN.COM MYDOMAIN.COM;
index index.html index.htm index.php;
root /home/wwwroot/MYDOMAIN.COM;
location / {
try_files $uri @apache;
}
location @apache {
internal;
proxy_pass http://127.0.0.1:8080;
proxy_cache server-cache;
proxy_cache_valid 200 302 60m;
proxy_cache_valid 404 1m;
include proxy.conf;
}
location ~ .*\.(php|php5)?$
{
proxy_pass http://127.0.0.1:8080;
proxy_wwwect off;
proxy_cache server-cache;
proxy_cache_valid 200 302 60m;
proxy_cache_valid 404 1m;
include proxy.conf;
}
location /status {
stub_status on;
access_log off;
}
location /phpmyadmin {
alias /home/wwwroot/phpmyadmin;
index index.php;
}
location /backup {
alias /home/wwwroot/backup;
index index.php;
}
location /fileserver {
alias /home/wwwroot/ftp;
index index.php;
}
}
include vhost/*.conf;
}

Thông báo của trình duyệt trên tất cả các máy khi kết nối vào website:
Rất tiếc! Google Chrome không thể kết nối với MYDOMAIN.COM
Đề xuất:
Truy cập bản sao được lưu trong bộ nhớ cache của MYDOMAIN.COM
Truy cập vào MYDOMAIN1.COM
Truy cập vào MYDOMAIN2.COM
Thử tải lại: MYDOMAIN3.COM
Tìm kiếm trên Google:

server {
listen 80;
add_header Cache-Control public;
listen 127.0.0.1:8080 rcvbuf=64k backlog=128;
access_log /var/www/log/nvit.com.vn-nginx.access.log;
error_log /var/www/log/nvit.com.vn-nginx_error.log debug;
server_name nvit.com.vn www.nvit.com.vn;
large_client_header_buffers 4 8k;
## Only allow GET and HEAD request methods
if ($request_method !~ ^(GET|HEAD)$ ) {
return 444;
}
## Deny illegal Host headers
if ($host !~* ^(nvit.com.vn|www.nvit.com.vn)$ ) {
return 444;
}
## Only allow GET and HEAD request methods
if ($request_method !~ ^(GET|HEAD)$ ) {
return 444;
}
## Deny certain User-Agents (case insensitive)
## The ~* makes it case insensitive as opposed to just a ~
if ($http_user_agent ~* (Baiduspider|Jullo) ) {
return 444;
}
## Redirect from www to non-www
if ($host = 'www.nvit.com.vn' ) {
rewrite ^/(.*)$  http://nvit.com.vn/$1 permanent;
}
## Stop Image and Document Hijacking
location ~* (\.jpg|\.png|\.css)$ {
if ($http_referer !~ ^(http://nvit.com.vn) ) {
return 444;
}
}
location / {
proxy_pass http://127.0.0.1:8080;
try_files $uri $uri/ /index.php?q=$request_uri;
set $memcached_key $uri;
memcached_pass 127.0.0.1:11211;
index index.php index.html index.htm;
root /home/nvit/public_html/;
}
location ~ \.php$ {
root /home/nvit/public_html/;
fastcgi_pass unix:/var/lib/php5-fpm.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
}
}