Babu bayanin martabar manhajar UFW? Yana bayyana tashoshin sadarwa, ba ayyuka ba

UFW ya ce ba ya samun bayanin martaba da ya dace da OpenSSH, kuma neman sanadin yana kai tsaye zuwa uwar garken SSH. Wannan hanya ce marar kyau: saƙon game da sunan ma'anar katangar wuta ne kuma ba ya faɗin komai game da ko an shigar da sshd, yana aiki ko yana sauraro. Bayanin martabar manhajar UFW jerin tashoshin sadarwa da ka'idoji ne da ke ɗauke da suna. Karanta ma'anar yana ɗaukar umarni ɗaya kuma yawanci yana ƙare binciken.

Mataki 1: lissafa sunayen da UFW ya san da gaske

Tambayi katangar wuta waɗanne sunaye take da su kafin ka nemi ta yarda da ɗaya. Jerin ya fito ne daga bayanan martabar da aka shigar a wannan na'ura, don haka sunan da ya ɓace gaskiya ne game da wannan tsarin, ba game da manhajar da kake ƙoƙarin karewa ba. Idan sunan yana nan, kuskuren ya fito ne daga kuskuren rubutu ko tsohon laƙabi a tarihin harsashinka.

ufw app list
ufw app info OpenSSH

Jerin gajere ne a shigarwa ta al'ada, kuma sunayen ba sunayen fakiti ba ne. Bayanin martaba mai suna OpenSSH na iya ɓacewa yayin da aka shigar da fakitin openssh-server, kuma akasin haka ma yana yiwuwa. Yi amfani da ainihin sunan da jerin ke bugawa; sunan bayanin martabar VPN ko mai ƙaddamar da tebur wanda yake da irin wannan rubutu ba bayanin martabar manhajar UFW ba ne. Idan sunan da kake so ya ɓace, wannan shine binciken, kuma mataki na gaba shine duba abin da ya kamata ya samar da shi.

Mataki 2: karanta ma'anar, ba suna ba

Bayanin martaba fayil ne irin na INI ƙarƙashin /etc/ufw/applications.d, mai suna, take, bayani da filin tashoshi. Filin tashoshi na iya lissafa tashoshi da jigilar bayanai da yawa, don haka sunan yana faɗin ƙasa da ma'anar. Littafin jagorar UFW ya rubuta waɗannan filaye da aikin sabunta manhajoji. Karanta fayil ɗin maimakon ɗauka cewa sunan yana nufin tasha ɗaya da aka sani.

cat /etc/ufw/applications.d/openssh-server
ufw app info OpenSSH

Ma'anar da ke ɗauke da 22/tcp tana bayyana tashar TCP 22 kuma ba wani abu ba. Ba ta tabbatar da cewa daemon ɗin wannan na'ura yana sauraro a can ba, kuma ba ta rufe tasha ta biyu da ka ƙara daga baya. Idan daemon ɗin yana aiki a wani wuri, bayanin martabar izini ne marar kyau ko da sunansa ya dace da samfurin. Kwatanta mai sauraro da ma'anar kafin ka yarda da ɗaya daga cikinsu.

ss -ltnp 'sport = :22'

Tsaya idan ma'anar da mai sauraro ba su dace ba. Yarda da bayanin martaba da ke ambaton tashar da babu wanda ke sauraro a kai yana ƙirƙirar ƙa'ida da ke kama da ci gaba kuma ba ta kare komai.

Mataki 3: raba bayanin martaba daga aikin da ke gudana

Yarda da bayanin martaba mai suna ba ya shigarwa, fara ko saita aikin, kuma aikin da ke gudana ba ya buƙatar bayanin martaba da aka yi fakiti don a iya isa gare shi. Waɗannan shawarwari ne daban waɗanda kayan aiki daban-daban suka mallaka: mai sarrafa fakiti, mai sarrafa ayyuka da katangar wuta. Ɗaukar su a matsayin ɗaya shine yadda mutane ke shigar da uwar garken da ba sa so domin suna na alama ya bayyana.

Ga uwar garken VPN rabuwa tana ci gaba bayan an yarda da mai sauraro na waje. Izinin tashar jigilar da aka ɓoye ba ya kunna turaren kernel, ba ya ƙara ƙa'idar NAT kuma ba ya ba masu amfani da rami damar shiga LAN. Kowanne daga cikinsu manufa ce dabam da nata bita. Bayanin martaba mai sunan samfurin VPN yana bayyana tashoshin da ya lissafa kawai, kuma sauran saitin uwar garken har yanzu naka ne ka rubuta.

Idan bayanin martabar ya ɓace kuma kana buƙatarsa, ƙa'idar tasha bayyananne da aka yi bita ko bayanin martaba na cikin gida ƙarƙashin applications.d duka halal ne. Shigar da fakitin da ba ka so ba haka ba ne.

Mataki 4: ajiye hanyar dawowa kafin ka sake loda katangar wuta

Kafin kowane canjin ƙa'ida, tabbatar kana da hanya ta biyu zuwa na'urar: console, adireshin waje ko janyewar baya da aka tsara. Sannan karanta tsarin ƙa'idoji da manufar al'ada, domin ƙin al'ada ba tare da ƙa'idar SSH ba ita ce hanyar da aka sani ta kulle kanka waje yayin gwaji. Canza ƙa'ida ɗaya lokaci ɗaya ka karanta tabbacin da UFW ke bugawa. Ƙa'idar da aka ajiye, ƙa'idar da ke aiki da aikin da ake iya isa gare shi abubuwa uku ne daban-daban na lura.

ufw status verbose
ufw allow 22/tcp
ufw app update OpenSSH

Bayan canjin, gwada haɗin da aka yarda da shi da hanya ɗaya da ya kamata a ci gaba da ƙin ta. Gwajin ƙin yana da muhimmanci kamar gwajin yarda, domin ƙa'idar da ta fi faɗi fiye da yadda aka yi niyya tana wucewa gwaji na farko kuma ta kasa na biyu. Rubuta sunan bayanin martaba, tashoshin da ya ƙunsa da mai sauraron da ka tabbatar da shi.

Jerin binciken yana ƙarewa lokacin da sunan ya kasance ko da gangan aka maye gurbinsa, ma'anar ta dace da ainihin mai sauraro, ana sarrafa aikin daban, kuma ka gwada hanyar da aka yarda da wadda aka ƙi tare da hanyar dawo da hannu. Kasancewar suna a jerin ba ɗaya daga cikin waɗannan ba ne.