-----------------------------------------------------------------------------------------------------
Starting Nmap 6.25 ( http://nmap.org ) at 2013-03-01 23:25 SE Asia Standard Time

Nmap scan report for 115.79.207.29

Host is up.

PORT   STATE    SERVICE

80/tcp filtered http


TRACEROUTE (using proto 1/icmp)

HOP RTT    ADDRESS

1   ... 30

Nmap done: 1 IP address (1 host up) scanned in 11.59 seconds
-----------------------------------------------------------------------------------------------------

Starting Nmap 6.25 ( http://nmap.org ) at 2013-03-01 22:39 SE Asia Standard Time

Nmap scan report for 11x.79.20x.29

Host is up (0.020s latency).

PORT   STATE SERVICE

80/tcp open  http


TRACEROUTE (using port 80/tcp)

HOP RTT      ADDRESS

1   ... 8

9   23.00 ms 11x.79.20x.29

Nmap done: 1 IP address (1 host up) scanned in 4.40 seconds

# Firewall configuration written by system-config-securitylevel
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j REJECT
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 25 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 137 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 138 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 139 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 445 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 1221 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 1403 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 1723 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 30000 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 3389 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 53 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 8080 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 8080 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 11211 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT

[root@server2 ~]# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     udp  --  anywhere             anywhere            udp dpt:domain 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:domain 
ACCEPT     udp  --  anywhere             anywhere            udp dpt:bootps 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:bootps 
RH-Firewall-1-INPUT  all  --  anywhere             anywhere            

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             192.168.122.0/24    state RELATED,ESTABLISHED 
ACCEPT     all  --  192.168.122.0/24     anywhere            
ACCEPT     all  --  anywhere             anywhere            
REJECT     all  --  anywhere             anywhere            reject-with icmp-port-unreachable 
REJECT     all  --  anywhere             anywhere            reject-with icmp-port-unreachable 
RH-Firewall-1-INPUT  all  --  anywhere             anywhere            

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain RH-Firewall-1-INPUT (2 references)
target     prot opt source               destination         
REJECT     icmp --  anywhere             anywhere            icmp any reject-with icmp-port-unreachable 
ACCEPT     esp  --  anywhere             anywhere            
ACCEPT     ah   --  anywhere             anywhere            
ACCEPT     udp  --  anywhere             224.0.0.251         udp dpt:mdns 
ACCEPT     udp  --  anywhere             anywhere            udp dpt:ipp 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ipp 
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ftp 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:smtp 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ssh 
ACCEPT     udp  --  anywhere             anywhere            state NEW udp dpt:netbios-ns 
ACCEPT     udp  --  anywhere             anywhere            state NEW udp dpt:netbios-dgm 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:netbios-ssn 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:microsoft-ds 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:http 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:scp-config 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ndmp 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:sweetware-apps 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:prm-nm-np 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:pptp 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:30000 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:mysql 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ms-wbt-server 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:domain 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:webcache 
ACCEPT     udp  --  anywhere             anywhere            state NEW udp dpt:webcache 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:11211 
REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited

C:\Users\QNV>nslookup MYDOMAIN.COM
Server:  UnKnown
Address:  192.168.20.254

Non-authoritative answer:
Name:    MYDOMAIN.COM
Address:  11X.79.20X.29

ServerRoot "/usr/local/apache"
Listen 8080
<IfModule !mpm_netware_module>
<IfModule !mpm_winnt_module>
User www
Group www
</IfModule>
</IfModule>
# 'Main' server configuration
ServerAdmin webmaster@MYDOMAIN.COM
ServerName www.MYDOMAIN.COM:8080
DocumentRoot "/home/wwwroot"
<Directory />
    Options ExecCGI FollowSymLinks Includes IncludesNOEXEC -Indexes -MultiViews SymLinksIfOwnerMatch
    AllowOverride All
    Order allow,deny
    Allow from all
	Allow from 127.0.0.1
</Directory>
<Directory "/home/wwwroot">
    Options Indexes -Indexes FollowSymLinks
       AllowOverride All
    Order allow,deny
    Allow from all
	Allow from 127.0.0.1
</Directory>
<IfModule dir_module>
    DirectoryIndex index.html index.htm index.shtml index.php index.perl index.pl index.cgi
</IfModule>
<FilesMatch "^\.ht">
    Order allow,deny
    Deny from all
    Satisfy All
</FilesMatch>
ErrorLog "logs/error_log"
LogLevel warn
<IfModule log_config_module>
     LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
    LogFormat "%h %l %u %t \"%r\" %>s %b" common
    <IfModule logio_module>
      LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
    </IfModule>
     CustomLog "logs/access_log" common
</IfModule>
<IfModule alias_module>
  
    ScriptAlias /cgi-bin/ "/usr/local/apache/cgi-bin/"
</IfModule>
<IfModule cgid_module>
  </IfModule>
<Directory "/usr/local/apache/cgi-bin">
    AllowOverride None
    Options None
    Order allow,deny
    Allow from all
	Allow from 127.0.0.1
</Directory>
DefaultType text/plain
RewriteEngine on
AddType text/html .shtml
AddHandler cgi-script .cgi .pl .plx .ppl .perl
AddHandler server-parsed .shtml
<IfModule mime_module>
    TypesConfig conf/mime.types
    AddType application/x-compress .Z
    AddType application/x-gzip .gz .tgz
    AddType application/perl .pl .plx .ppl .perl
    AddType application/x-img .img
    AddType application/x-httpd-php .php .php3 .php4 .php5 .php6
    AddType application/x-httpd-php-source .phps
    AddType application/cgi .cgi
    AddType text/x-sql .sql
    AddType text/x-log .log
    AddType text/x-config .cnf conf
    AddType text/x-registry .reg
    AddType text/html .shtml
    AddType application/x-tar .tgz
    AddType application/rar .rar
    AddType application/x-compressed .rar
    AddType application/x-rar .rar
    AddType application/x-rar-compressed .rar
    AddType text/vnd.wap.wml .wml
</IfModule>
ErrorDocument 403 http://namviet-it.com/index.php
LoadModule php5_module        modules/libphp5.so
Include conf/extra/rpaf.conf

Include conf/extra/httpd-mpm.conf
Include conf/extra/httpd-multilang-errordoc.conf
Include conf/extra/httpd-autoindex.conf
Include conf/extra/httpd-languages.conf
Include conf/extra/httpd-vhosts.conf
Include conf/extra/httpd-default.conf
Include conf/vhost/*.conf

user  www www;

worker_processes 1;

error_log  /home/wwwlogs/nginx_error.log  crit;

pid        /usr/local/nginx/logs/nginx.pid;

#Specifies the value for maximum file descriptors that can be opened by this process.
worker_rlimit_nofile 51200;

events
	{
		use epoll;
		worker_connections 51200;
	}

http
	{
		include       mime.types;
		default_type  application/octet-stream;

		server_names_hash_bucket_size 128;
		client_header_buffer_size 32k;
		large_client_header_buffers 4 32k;
		client_max_body_size 50m;

		sendfile on;
		tcp_nopush     off;

		keepalive_timeout 3;

		tcp_nodelay on;

		fastcgi_connect_timeout 300;
		fastcgi_send_timeout 300;
		fastcgi_read_timeout 300;
		fastcgi_buffer_size 64k;
		fastcgi_buffers 4 64k;
		fastcgi_busy_buffers_size 128k;
		fastcgi_temp_file_write_size 256k;

		gzip on;
		gzip_min_length  1k;
		gzip_buffers     4 16k;
		gzip_http_version 1.0;
		gzip_comp_level 2;
		gzip_types       text/plain application/x-javascript text/css application/xml;
		gzip_vary on;

		#limit_zone  crawler  $binary_remote_addr  10m;
		
		log_format  access  '$remote_addr - $remote_user [$time_local] "$request" '
             '$status $body_bytes_sent "$http_referer" '
             '"$http_user_agent" $http_x_forwarded_for';
		access_log  /home/wwwlogs/access.log  access;

		proxy_cache_path /usr/local/nginx/cache_temp levels=1:2 keys_zone=server-cache:8m max_size=1000m inactive=600m;
		proxy_temp_path /usr/local/nginx/proxy_temp;
server
	{
		listen	80;
		server_name www.MYDOMAIN.COM MYDOMAIN.COM;
		index index.html index.htm index.php;
		root  /home/wwwroot/MYDOMAIN.COM;
		
		location / {
			try_files $uri @apache;
		}

		location @apache {
			internal;
			proxy_pass http://127.0.0.1:8080;
			proxy_cache server-cache;
			proxy_cache_valid  200 302  60m;
			proxy_cache_valid  404      1m;
		include proxy.conf;
			}

		location ~ .*\.(php|php5)?$
			{
				proxy_pass http://127.0.0.1:8080;
				proxy_wwwect     off;
				proxy_cache server-cache;
				proxy_cache_valid  200 302  60m;
				proxy_cache_valid  404      1m;
				include proxy.conf;
			}

		location /status {
			stub_status on;
			access_log   off;
		}

			
		location /phpmyadmin {
		alias /home/wwwroot/phpmyadmin;
		index index.php;
		}
		
		location /backup {
		alias /home/wwwroot/backup;
		index index.php;
		}
		
		location /fileserver {
		alias /home/wwwroot/ftp;
		index index.php;
		}
			}
include vhost/*.conf;
}

Thông báo của trình duyệt trên tất cả các máy khi kết nối vào website:

Rất tiếc! Google Chrome không thể kết nối với MYDOMAIN.COM
Đề xuất:
Truy cập bản sao được lưu trong bộ nhớ cache của MYDOMAIN.COM
Truy cập vào MYDOMAIN1.COM
Truy cập vào MYDOMAIN2.COM
Thử tải lại: MYDOMAIN3.COM
Tìm kiếm trên Google:

server {
        listen 80;
		add_header  Cache-Control public;
		listen      127.0.0.1:8080 rcvbuf=64k backlog=128;
		access_log  /var/www/log/nvit.com.vn-nginx.access.log;
		error_log  /var/www/log/nvit.com.vn-nginx_error.log debug;
        server_name nvit.com.vn www.nvit.com.vn;
		large_client_header_buffers 4 8k;
	
	## Only allow GET and HEAD request methods
      if ($request_method !~ ^(GET|HEAD)$ ) {
         return 444;
      }

    ## Deny illegal Host headers
      if ($host !~* ^(nvit.com.vn|www.nvit.com.vn)$ ) {
        return 444;
      }
	## Only allow GET and HEAD request methods
      if ($request_method !~ ^(GET|HEAD)$ ) {
         return 444;
      }

    ## Deny certain User-Agents (case insensitive)
    ## The ~* makes it case insensitive as opposed to just a ~
     if ($http_user_agent ~* (Baiduspider|Jullo) ) {
        return 444;
     }
	  ## Redirect from www to non-www
      if ($host = 'www.nvit.com.vn' ) {
        rewrite  ^/(.*)$  http://nvit.com.vn/$1  permanent;
      }

     ## Stop Image and Document Hijacking
      location ~* (\.jpg|\.png|\.css)$ {
        if ($http_referer !~ ^(http://nvit.com.vn) ) {
          return 444;
        }
      }
		location / {		
		proxy_pass http://127.0.0.1:8080;
		try_files $uri $uri/ /index.php?q=$request_uri;		
		set $memcached_key $uri;
		memcached_pass 127.0.0.1:11211;
		index  index.php index.html index.htm;
		root   /home/nvit/public_html/;
	 					}
		location ~ \.php$ {
			root           /home/nvit/public_html/;
            fastcgi_pass   unix:/var/lib/php5-fpm.sock;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
            include        fastcgi_params;
        }            					   
		}