OpenVPN a tashar 53: tattaunawa uku da mutane ke rikita
Neman ƙarshen hanya, jigilar da aka ɓoye da DNS bayan rami tattaunawa uku ne. Gano wane mataki ya kasa kafin ka sauya tasha ko mai warwarewa.
Rahotannin da ke cewa an toshe VPN a tashar 53 suna haɗa abubuwan lura uku da suke kasa saboda dalilai daban-daban. Warware sunan ƙarshen hanya yana faruwa kafin wani rami ya kasance, jigilar da aka ɓoye tattaunawa ce daban, kuma tambayoyin DNS da ake yi bayan haka na uku ne. Kowanne yana da alamarsa ta kasa, kuma ɗaya kawai daga cikinsu ya shafi DNS.
Rarraba fakitin bisa manufa kafin ka canza komai, domin gyara yana bin matakin.
Tattaunawa uku, lambar tasha ɗaya
Tattaunawa ta farko neman suna ne don ƙarshen hanya: na'urarka tana tambayar mai warwarewar da aka saita mata inda vpn.example.com yake, kuma wannan amsar tana zuwa ta DNS na yau da kullum kafin abokin ciniki ya aika fakitin rami ɗaya. Ta biyu ita ce jigilar OpenVPN kanta, wadda ke haɗawa da adireshin da neman ya samar a kowace yarjejeniya da tasha da bayanin martabar ya ambata. Ta uku tana faruwa bayan ramin ya tashi, lokacin da manhajoji ke neman sunaye kuma saitunan mai warwarewa da aka tura su ke yanke shawarar wanene zai amsa.
Waɗannan ukun na iya yin nasara ko kasa daban-daban. Abokin ciniki na iya warware ƙarshen hanyarsa sosai kuma har yanzu ya kasa isa mai sauraro, kuma yana iya kafa rami yayin da duk neman sunaye na ciki ke kasa saboda saitunan DNS ba su iso ba.
| Conversation | When it happens | What has to be true |
|---|---|---|
| Endpoint lookup | Before the client contacts a hostname | An underlying resolver path can answer for the endpoint name |
| OpenVPN transport | During tunnel establishment | The gateway listens on its configured transport, address and port, and nothing filters it |
| Application DNS | During or after the protected session | A resolver the client can reach, plus routing that carries its queries |
Karanta teburin a matsayin jerin dubawa ba bayani ba. Idan sunan ƙarshen hanya bai warware ba, babu abin da zai iya aiki daga baya, kuma ramin ba ya farawa.
Lambar tashar ba ta ambata manhajar ba
Tashar 53 tana ɗaukar DNS bisa al'ada, kuma mai gudanar da OpenVPN na iya buga mai sauraro a can, wanda shi ne ainihin dalilin da lambar ba ta zama mai kyau na ganewa. Zaman OpenVPN a kan UDP 53 har yanzu zaman OpenVPN ne, kuma tambayar DNS ga uwar garke a tashar 53 ba ta ce komai game da ko an yarda da rami ba. Layukan proto da remote na bayanin martaba sun bayyana ƙarshen hanya na waje; lambar tashar ba ta bayyana komai da kanta.
Wannan yana yanka bangarorin biyu wajen bincike: bincike na UDP na gama gari zuwa tashar 53 yana tabbatar da cewa tasha tana amsawa, ba cewa sabis ɗin VPN yana amsawa ba. Gwada da ainihin abokin ciniki da ainihin bayanin martaba, domin shi kaɗai ne ke gwada musafaha da sabis ɗin yake tsammani.
Tabbatar da mai sauraro kafin ka zargi hanyar sadarwa
A kan uwar garke, tabbatar da abin da aka ɗaure da ss -lunp | grep 53 sannan ka kwatanta shi da yarjejeniya da tashar da bayanin martabar ya faɗa. Daga hanyar sadarwar abokin ciniki, gudanar da abokin ciniki da ƙarin bayani domin log ɗin ya nuna wace adireshi da jigila ya gwada. Idan uwar garken tana saurare kuma fakitin abokin ciniki ba sa iso, hanya ko manufar da ke hana su, kuma wannan tattaunawa ce da mai hanyar sadarwa ba dalilin canza tasha ba.
Wata tasha tana taimakawa ne kawai idan sabis ɗin yana saurare a can da gaske kuma ɗaukar aikin ya yarda da shi. Matsar da mai sauraro don guje wa tacewar hanyar sadarwa da ake sarrafawa shawara ce ta manufa, ba matakin magance matsala ba. Tambayi mai hanyar sadarwa abin da aka yarda kafin ka canza sabis ɗin, domin hanyar kaucewa da ta karya manufa ana rufewa daga baya. Rubuta wannan amsar kusa da bayanin martaba domin na gaba kada ya sake maimaita bukatar.
Duba DNS bayan rami, daban
Da zarar ramin ya tashi, duba yanayin mai warwarewa a kan muƙaƙƙen VPN sannan ka tambayi suna ɗaya na ciki da suna ɗaya na jama'a. Idan sunayen ciki sun kasa yayin da ramin ke ɗaukar zirga-zirga, ba a yi amfani da saitunan DNS da aka tura ba, wanda tambaya ce ta haɗin abokin ciniki ba ta jigila ba. Idan sunayen jama'a sun kasa kuma sunayen ciki suna aiki, manufar raba rami tana yin abin da aka saita ta yi.
Bar canje-canjen DNS wurin mai warwarewa. Rubuta kan tsarin mai warwarewa da aka sarrafa don cimma gwaji ɗaya na iya karya sunaye masu sirri ga duk sauran abin da ke cikin na'urar. Idan ramin yana tura mai warwarewa kuma abokin ciniki ya yi watsi da shi, gyara haɗin abokin ciniki maimakon ƙara shigarwar tsaye a wani wuri. Shigarwar tsaye suna ɓoye kasawar har sai wani ya canza hanyar sadarwa. Rubuta wane mai warwarewa ake tsammanin zai amsa kowane suna.