Firewall profiles da fitar VPN: me ya sa jama'a ba hanya ba ce
Bayanan firewall yana zaɓar wace ka'idar da za a yi amfani da ita. Ba ya faɗin wace muƙala ce ta ɗauki fakiti, kuma toshewar bayyane ta fi ƙaramin izini.
Ka'idar tana jin daidai: ba da izinin zirga-zirgar gida a bayanin sirri kuma kawai zirga-zirgar VPN a na jama'a. Ba haka ba ne, domin bayanin cibiyar sadarwa yana zaɓar wace ka'idar firewall za a yi amfani da ita kuma ba ya faɗin wace adafta ce ta ɗauki fakiti. Ɗaukar sunan bayanin a matsayin buƙatar hanya shi ne kuskuren da ke sa tsarin fitar da aka iyakance ya yi kama da kammala alhali bai kammala ba.
Da farko rubuta magudanar ruwa, sannan ka yanke shawara wace hanya ce za ta iya tilasta kowace ɗayansu. Wannan jerin magudanar shi ne kawai abin da zai tsira daga canjin ka'ida na gaba.
Rukuni yana zaɓar ka'idoji, ba hanyoyi ba
Lokacin da Windows ya sanya cibiyar sadarwa a matsayin jama'a ko sirri, firewall yana amfani da ka'idar da aka saita don wannan bayanin. Rarraba yana bin cibiyar sadarwar da adaftar ta shiga, kuma ka'idar tana yanke shawara abin da aka yarda da shi a kanta. Babu ɗaya daga cikin waɗannan gaskiyar da ya dogara da ko zirga-zirgar manhaja ta yi amfani da rami. Wannan yancin kai shi ne dukan wahala.
Zaɓin hanya yana a hannun tafiyar da hanya, ta hanyar ma'aunin muƙala da prefix ɗin da rami ke sakawa. Don haka ana iya yi wa bayanin lakabi da jama'a alhali haɗin manhaja yana bin hanyar zahiri, kuma firewall zai ci gaba da bayar da rahoton cewa an yi amfani da ka'idar jama'a.
Shi ya sa ka'idar da aka iyakance ga bayanin ba za ta iya nufin rami kawai ba. Abubuwan biyu sassa ne daban-daban ke yanke shawara kuma ɗaya ba zai iya maye gurbin ɗayan ba.
| Flow | What decides it | What a rule can enforce |
|---|---|---|
| VPN client to its endpoint | Routing plus the outer transport | Allow the client process before the tunnel exists |
| Application to an internet host | Interface metric and prefix length | Block the process unless the tunnel interface is up |
| Application to a LAN host | Local subnet route | Allow one destination, not the whole category |
Toshewar bayyane ta fi ƙaramin izini ƙarfi
Jagorar Microsoft kan ka'idojin firewall ta bambanta izini a matsayin keɓe ga aikin toshewar da aka saba da toshewar bayyane da ke cin karo da izini. Toshewar bayyane tana cin nasara a wannan karo, kuma ka'idojin fita suna bin wannan fifiko.
Don haka sanannen dabarar ƙara ka'idar da ke toshe komai da dogaro da ƙaramin izini da aka sanya a samanta ba ta yin abin da marubucin ta yake tsammani. Windows Firewall ba ya warware karon ta hanyar tsarin ka'idojin da mai gudanarwa ya sanya. Toshewar tana aiki kawai, kuma manhajar da ke haɗawa tana bayar da rahoton ƙarewar lokaci. Ka'idar da ta yi kama da keɓe ba ta taɓa kasancewa cikin wasa ba.
Sigar da aka tallafa ita ce manufar ƙin amincewa ta asali tare da ka'idojin izini da aka amince da su, inda kowace izini ke ambaton shiri, sabis ko manufa daidai gwargwadon da za a iya duba ta. Wannan tsari yana jure wa bincike, domin kowace keɓe a bayyane take kuma babu ɗayansu da ya dogara da tsarin da aka ƙirƙira su.
Ka'idoji biyu da suka saba wa juna sun fi ka'ida ɗaya muni, domin halin da ya samu daidai ne kuma ba a iya bayyana shi a lokaci ɗaya.
Ka ba manufar fita mai mallaka ɗaya
Abokin ciniki na VPN da aka tallafa ya riga ya kula da halin toshewarsa da keɓewar ƙarshensa. Ƙara ka'idojin hannu marasa daidaituwa na iya barin wannan abokin ciniki a wajen ramin da yake buƙata don saitin, ko barin wata hanya ta biyu a buɗe da babu wanda ya lura da ita.
Yanke shawara wanene ya mallaki manufar fita kafin rubuta ka'idoji: saitin abokin ciniki da kansa, manufar firewall da aka sarrafa, ko jerin keɓe na gida da aka rubuta tare da mai shi. Sannan ka daidaita matakan maimakon tara gwaje-gwaje har wani abu ya haɗu. Mai suna shi ma wanda ake tambaya lokacin da matakai biyu ba su daidaita.
Ka kiyaye hanyar dawo da ita kafin ka canza wani abu. Na'ura mai nisa da aka kulle daga hanyar sarrafa kanta mummunan sakamako ne fiye da gibin manufar da kake rufewa. Ka'idar dawo da ita tana da sauƙin tabbatarwa idan an rubuta ta tukuna, kuma tana da sauƙin samu idan canji ya ɓata a wani sa'ar da babu wanda ke jin daɗinta.
Gwada sakamako huɗu maimakon karanta lakabin
Manufa ba ta fi kyau fiye da shari'o'in da take bambanta, don haka ɗauki lakabin bayanin a matsayin mafari ba sakamako ba. Sakamako huɗu suna gaya maka ko tana aiki: buƙatar LAN da aka yi niyya ta yi nasara, buƙatar intanet da aka rufe ta yi nasara, haramtacciyar buƙata kai tsaye ta kasa, kuma yanayin gazawar rami yana kasancewa kamar yadda aka tsara maimakon ja da baya a hankali. Rubuta sakamakon huɗu kusa da canjin ka'ida. Shirin gwaji da shari'o'i huɗu masu suna gajere ne da za a gudanar kowane lokaci kuma ya keɓanta da za a kasa da ƙarfi.
Get-NetConnectionProfile | Select-Object Name,NetworkCategory,InterfaceAlias Get-NetFirewallProfile | Select-Object Name,DefaultOutboundAction Get-NetFirewallRule -Direction Outbound -Enabled True | Where-Object Action -eq Block | Select-Object DisplayName,Profile
Umarni na farko yana nuna yadda aka rarraba kowace cibiyar sadarwar da aka haɗa, wanda sau da yawa ba shine abin da wanda ya rubuta ka'idar ya zata ba. Na biyu yana nuna aikin asali ga kowane bayani, na uku kuma yana lissafa toshewar fita da aka kunna, ciki har da waɗanda za su soke ƙaramin izini a hankali.
Sake gudanar da shari'o'in huɗu bayan canjin cibiyar sadarwa, domin ana iya sake rarraba bayani lokacin da na'urar ta shiga wata cibiyar sadarwa daban. Lakabin bayanin da ya dace ba hujja ba ce cewa hanyar ita ce da ka yi niyya.