加固要点（rsyncd.conf）
加固要点（rsyncd.conf）
uid = nobody
gid = nobody
[backup]
path = /data/backup
read only = yes
list = no
auth users = rsyncuser
secrets file = /etc/rsyncd.secrets # 权限 600
hosts allow = 10.0.0.0/24
hosts deny = 0.0.0.0/0核查命令
核查命令
ss -ltnp | grep 873
# 授权范围内的连通性确认：
rsync rsync://<目标IP>/ # 能列出模块说明未限制列表read only 与 list = no 是低成本高收益的两个配置项。