Kill switch a Windows ba tare da ƙarin manhaja ba: profaye ko hanyoyi?

Profayen bangon wuta suna bin rukunin cibiyar sadarwa, hanyoyi suna bin adaftan. Kwatanta duka biyun, sannan gwada yanayin faɗuwa yayin da tunnel ɗin ya tafi kuma alamar tana ƙarya.

Abokin ciniki ya mutu a tsakiyar saukewa kuma alamar tray ɗin ta ɓace. Canja wurin yana ci gaba ta hanyar haɗin gida. Wannan jeri shi ne dalilin da ya sa kill switch yake wanzuwa, kuma Windows na iya kusantar da ɗaya ba tare da wata manhaja ta biyu ba.

Hanyoyi biyu sun cancanci sanin su. Suna kasawa a wurare daban-daban, kuma babu ɗayansu cikakkiyar amsa.

Hanya ta farko: ba da izinin manhajar a profaye ɗaya kawai

Bangon wutar Windows yana iyakance dokoki ga profayen Domain, Private da Public. Dabarar ita ce a ba adaftan tunnel ɗin rukuni ɗaya sannan adaftan na zahiri wani rukuni. Sannan ka rubuta dokar fita wadda ke ba da izinin manhajar da ake karewa a profayen tunnel ɗin kuma tana toshe ta a duk sauran wurare. Bangon wutar yana karanta rukunin, ba sunan adaftan ba.

Da farko saita haɗin VPN zuwa Private da cibiyar sadarwar zahiri zuwa Public. Sannan ƙara dokar toshewa ga manhajar da ta shafi profayen da ba ka so. Bayan haka tabbatar da rabon da Get-NetConnectionProfile, domin dokar tana bin wannan rabon.

Get-NetConnectionProfile | Select-Object Name, InterfaceAlias, NetworkCategory

New-NetFirewallRule -DisplayName 'Block browser off VPN' -Direction Outbound `
  -Program 'C:\Program Files\Mozilla Firefox\firefox.exe' -Action Block -Profile Public

New-NetFirewallRule -DisplayName 'Allow browser on VPN' -Direction Outbound `
  -Program 'C:\Program Files\Mozilla Firefox\firefox.exe' -Action Allow -Profile Private

Raunin yana cikin tsari. Dokar profaye tana bin rukunin, don haka idan Windows ya sake rarraba cibiyar sadarwar otal, toshewar na iya dainawa da aiki. Babu abin da ke canzawa a jerin dokoki idan hakan ta faru.

Hanya ta biyu: cire hanyar da ba ta dindindin ta zahiri

Hanyar bin hanyoyi ta fi ƙarfi kuma ta fi sauƙin dubawa. Rubuta ƙofar zahiri, bar VPN ya sanya nata tsohuwar hanya da ƙaramin ma’auni, sannan share hanyar zahiri ta asali. Babu wani abu da zai iya ɗaukar zirga-zirga bayan haka.

route print -4
route delete 0.0.0.0 mask 0.0.0.0 192.168.50.1
route print -4 | findstr /c:"0.0.0.0"

Idan abokin ciniki ya mutu, hanyar VPN tana tafiya tare da adaftanta. Na’urar tana fita layi maimakon yin ɓarna, kuma abin da kill switch ya kamata ya samar ke nan.

Abubuwa biyu ne ke yanke shawarar ko zai jure mako ɗaya. DHCP yana mayar da ƙofar duk lokacin da haɗin ya girgiza. Adaftan zahiri mai adireshin tsayayye yana guje wa wannan mamaki. Adireshin uwar garken VPN da kanta dole ne ya kasance ana iya isa gare shi. Ba tare da wannan hanyar zuwa uwar gida ba abokin ciniki ba zai taɓa sake haɗawa ba bayan faɗuwar da ta kunna toshewar.

Hanya ta uku: babu ƙofa, hanya ɗaya ta dindindin zuwa uwar gida

Zaɓi na uku yana farawa da share ƙofar daga saitunan adaftan. Sannan hanya ɗaya ta dindindin zuwa ƙarshen VPN tana maye gurbinta. Na’urar tana iya yin magana da uwar garken kuma da babu wani abu har sai tunnel ɗin ya tashi.

route -p add 198.51.100.44 mask 255.255.255.255 192.168.50.1 metric 1
route print -4 | findstr 198.51.100.44

Mayar da ƙofar yana mayar da intanet ta yau da kullum, wanda hakan ya mai da shi maɓallin kunnawa da kashewa mai tsafta. Baya dogaro da rubutun da ke lura da abubuwan da suka faru a fuskar sadarwa. Hakanan baya damuwa yadda ake rarraba cibiyar sadarwar.

Kuɗin shi ne cikakken keɓewa yayin da tunnel ɗin ya tsaya. Sabuntawa suna tsayawa, haka kuma saukewar da ta haifar da wannan aikin. A kwamfutar tafi-da-gidanka ta aiki hakan yakan zama daidai, yayin da a na’ura ta kai shi ne shawara da za a yanke da gangan.

Me ya sa alamar duniya ba ta tabbatar da komai

Windows yana bayar da rahoton isarsa ta hanyar bincike zuwa ƙarshen Microsoft. Wannan binciken bai ce komai ba game da tunnel ɗinka. Tunnel ɗin da ke haɗe yana iya zama a bayan duniyar da ke bayar da rahoton babu intanet, kuma wanda ya mutu yana iya nuna haɗi mai lafiya.

Gwada ta hanyar kashe tsarin abokin ciniki sannan ka yi ƙoƙarin isa adireshin jama’a da lamba. Ana iya amsa tambayar suna daga ajiya, don haka ko alamar ko amsar DNS ba su zama hujja ba.

Abin da za a rubuta bayan faɗuwa ta gaske

Gudanar da gwajin a matsayin jeri ba a matsayin dubawa ɗaya ba. Kashe tsarin maimakon cire haɗi, sannan gwada adireshin lambobi a dukkan iyalai biyu. Bayan haka maido da abokin ciniki kuma tabbatar da cewa har yanzu yana isa uwar garkensa ta hanyar da ka riƙe.

taskkill /IM openvpn-gui.exe /F
ping -4 198.51.100.44
ping -6 2606:4700:4700::1111
route print -4 | findstr /c:"0.0.0.0"

Maimaita jerin bayan barci, bayan canjin Wi-Fi da kuma bayan sauya daga kebul zuwa mara waya. Waɗannan sauye-sauyen su ne inda duka hanyar profaye da halin DHCP ke kasawa. Dokar da ke tsayawa a kan tebur ba lallai ba ta tsaya a otal ba.

Rubuta matakin sakewa kusa da kowace doka da hanya. Microsoft yana rubuta ƙirƙirar dokokin fita a cikin bayanin dokokin bangon wutar Windows, kuma wannan ya fi jagora mai hotunan allo kawai.

Labarai masu alaƙa