在我的networking服务器上，为了安全起见，我设置了phpmyadmin以通过端口8084进行操作。 所以要访问它，我通常会访问http://mywebsite.com:8084
在我的办公室里，似乎这个端口被阻塞，不能传出连接。 当我尝试访问phpmyadmin的页面只是挂起，我得到ERR_CONNECTION_TIMED_OUT 。 我可以使用手机信号在手机上访问phpmyadmin。
有没有办法访问我的办公室PC上我的phpmyadmin鉴于这个端口似乎被封锁？
不要以为只要不使用HTTP的标准端口就更安全。
HTTP和HTTPS的标准端口有更多的机会在您的办公室打开，用于传出连接，因此确保phpmyadmin安装的最安全的方法是运行安全的Web服务器并使用相互SSL身份validation ：
Listen 443 https <VirtualHost 1.2.3.4:443> DocumentRoot "/srv/www/html" ServerAdmin [email protected] SSLCACertificateFile /etc/pki/CA/cacert.pem SSLCertificateFile /etc/pki/tls/private/phpmyadmin.domain.com/cert.pem SSLCertificateKeyFile /etc/pki/tls/private/phpmyadmin.domain.com/key.pem SSLCARevocationCheck chain SSLCARevocationFile /etc/pki/CA/crl/crl.pem SSLEngine on SSLStrictSNIVHostCheck on SSLVerifyClient require SSLVerifyDepth 5 ServerName phpmyadmin.domain.com RewriteEngine on RewriteCond %{REMOTE_ADDR} !^127\.0\.0\.1$ RewriteCond %{HTTPS} !=on RewriteRule . - [F] Alias /console /usr/share/phpMyAdmin ErrorLog "|/usr/sbin/rotatelogs -L /var/log/httpd/phpmyadmin/error.log -f /var/log/httpd/phpmyadmin/error.log.%Y%m%d 86400" CustomLog "|/usr/sbin/rotatelogs -L /var/log/httpd/phpmyadmin/access.log -f /var/log/httpd/phpmyadmin/access.log.%Y%m%d 86400" combinedio <Directory /usr/share/phpMyAdmin/> Require ssl Require ssl-verify-client SSLRequireSSL SSLOptions +FakeBasicAuth +StrictRequire SSLRequire %{SSL_CIPHER_USEKEYSIZE} >= 256 SSLRequire %{SSL_CLIENT_S_DN_O} eq "Company" \ and %{SSL_CLIENT_S_DN_OU} eq "Development" \ and %{SSL_CLIENT_S_DN_CN} in {"John Doe", "Jane Doe"} SSLRenegBufferSize 131072 </Directory> <Directory /usr/share/phpMyAdmin/setup/> Require ssl Require ssl-verify-client SSLRequireSSL SSLOptions +FakeBasicAuth +StrictRequire SSLRequire %{SSL_CIPHER_USEKEYSIZE} >= 128 SSLRequire %{SSL_CLIENT_S_DN_O} eq "Comapny" \ and %{SSL_CLIENT_S_DN_OU} eq "Development" \ and %{SSL_CLIENT_S_DN_CN} in {"John Doe", "Jane Doe"} SSLRenegBufferSize 131072 </Directory> <Directory /usr/share/phpMyAdmin/libraries/> Order Deny,Allow Deny from All Allow from None </Directory> <Directory /usr/share/phpMyAdmin/setup/lib/> Order Deny,Allow Deny from All Allow from None </Directory> <Directory /usr/share/phpMyAdmin/setup/frames/> Order Deny,Allow Deny from All Allow from None </Directory> # This configuration prevents mod_security at phpMyAdmin directories from # filtering SQL etc. This may break your mod_security implementation. # #<IfModule mod_security.c> # <Directory /usr/share/phpMyAdmin/> # SecRuleInheritance Off # </Directory> #</IfModule> </VirtualHost>
例如，您可以通过使用允许的IP（ Deny和Allow指令）的有限列表来进一步保护这样的服务器，并且configurationmod_security ， mod_evasive和fail2ban 。