Kill switch Windows la'aan software dheeraad ah: profiles ama waddooyin?

Profiles-ka firewall-ka waxay raacaan qaybta shabakadda, waddooyinku waxay raacaan adapter-ka. Isbarbardhig labadaba, ka dibna tijaabi xaaladda burburka marka tunnel-ku maqan yahay oo sumadda been sheegayso.

Macaamiilku wuxuu dhintaa badhtamaha soo dejinta oo sumadda tray-ga way libdhataa. Wareejintu waxay ku sii socotaa xiriirka guriga. Isku xiggaas ayaa ah sababta kill switch uu u jiro, oo Windows wuu ku dhowaan karaa mid la'aan badeeco labaad.

Laba hab ayaa mudan in la ogaado. Waxay ku guuldareystaan meelo kala duwan, oo midkoodna jawaab buuxda maaha.

Habka koowaad: u oggolow barnaamijka hal profile oo keliya

Firewall-ka Windows wuxuu xaddidayaa sharciyada profiles-ka Domain, Private iyo Public. Xariiqdu waa in adapter-ka tunnel-ka la siiyo hal qayb oo adapter-ka jireed la siiyo qayb kale. Kadib waxaad qortaa sharci bax ah oo u oggolow barnaamijka la ilaaliyay profile-ka tunnel-ka oo ka xannibaya meel kasta oo kale. Firewall-ku wuxuu akhriyaa qaybta, ma akhriyo magaca adapter-ka.

Marka hore u dhig xiriirka VPN Private iyo shabakadda jireed Public. Kadib ku dar sharci xannibaad ah oo barnaamijka ah oo khuseeya profiles-ka aadan rabin. Kadibna xaqiiji qoondaynta Get-NetConnectionProfile, sababtoo ah sharcigu wuxuu raacaa isla qoondayntaas.

Get-NetConnectionProfile | Select-Object Name, InterfaceAlias, NetworkCategory

New-NetFirewallRule -DisplayName 'Block browser off VPN' -Direction Outbound `
  -Program 'C:\Program Files\Mozilla Firefox\firefox.exe' -Action Block -Profile Public

New-NetFirewallRule -DisplayName 'Allow browser on VPN' -Direction Outbound `
  -Program 'C:\Program Files\Mozilla Firefox\firefox.exe' -Action Allow -Profile Private

Daciifnimadu waa mid dhismeed. Sharciga profile-ku wuxuu raacaa qaybta, marka marka Windows dib u kala saaro shabakad huteel, xannibaaddu way joojin kartaa dhaqangelinta. Waxba kama beddelmo liiska sharciyada marka taas dhacdo.

Habka labaad: ka saar waddada caadiga ah ee jireed

Habka waddooyinku waa mid qallafsan oo aad uga fudud in la baaro. Qor albaabka jireed, u ogolow VPN-ka inuu dhigto waddadiisa caadiga ah oo mitir hoose leh, kadibna tirtir kan jireed ee caadiga ah. Wax kale ma qaadi karo taraafikada intaas ka dib.

route print -4
route delete 0.0.0.0 mask 0.0.0.0 192.168.50.1
route print -4 | findstr /c:"0.0.0.0"

Marka macaamiilku dhinto, waddada VPN-ku way la tagtaa adapter-keeda. Mashiinku wuxuu u gudbaa offline halkii uu ka daadan lahaa, oo taas ayaa ah waxa kill switch uu soo saarayo.

Laba faahfaahin ayaa go'aamiya haddii uu toddobaad sii noolaan doono. DHCP wuxuu albaabka dib u dhigaa mar kasta oo xiriirku ruxmo. Adapter jireed oo cinwaan taagan leh wuu ka fogaadaa yaabkaas. Cinwaanka server-ka VPN laftiisana waa inuu sii ahaado mid la gaari karo. La'aanteed waddadaas host-ka macaamiilku weligiis dib uma xiriiri karo ka dib go'itaankii kiciyay xannibaadda.

Habka saddexaad: albaab la'aan, hal waddo host ah oo joogto ah

Xulashada saddexaad waxay ku bilaabataa in albaabka laga nadiifiyo dejinta adapter-ka. Kadib hal waddo joogto ah oo u socota dhammaadka VPN ayaa booskiisa qaadata. Mashiinku kadib wuu la hadli karaa server-ka oo wax kale lama hadli karo ilaa tunnel-ku soo baxo.

route -p add 198.51.100.44 mask 255.255.255.255 192.168.50.1 metric 1
route print -4 | findstr 198.51.100.44

Soo celinta albaabka waxay soo celisaa internet-ka caadiga ah, taas oo ka dhigaysa shid-meel nadiif ah. Kuma tiirsana script ilaalinaya dhacdooyinka interface-ka. Sidoo kale dan kama gelin sida shabakadda loo kala saaro.

Qiimaha waa go'doon buuxa inta tunnel-ku hoos jiro. Cusboonaysiintu way istaagtaa, iyo sidoo kale soo dejinta lafteeda kicisay layliskan. Laptop shaqo ahaan tan badanaa waa sax, halka mishiin shakhsi ah ay tahay go'aan si ula kac ah loo qaato.

Sababta sumadda globe-ku waxba u caddaynayso

Windows wuxuu soo sheegaa gaaritaanka iyada oo loo marayo baaritaan ka dhan ah dhammaad Microsoft. Baaritaankaas waxba kama sheegayo tunnel-kaaga. Tunnel ku xiran wuxuu fadhiisan karaa gadaasha globe sheegaya internet la'aan, mid dhintayna wuxuu tusin karaa xiriir caafimaad qaba.

Ku tijaabi inaad disho process-ka macaamiilka kadibna isku day inaad gaarto cinwaan dadweyne lambar ahaan. Weydiinta magacu waxay ka jawaabi kartaa kaydka, marka sumadda iyo jawaabta DNS midkoodna ma aha caddayn.

Maxaa la diiwaan gelinayaa ka dib go'itaan dhab ah

U socodsii tijaabada sida isku xig, ma aha hubin keliya. Dil process-ka halkii aad ka goyn lahayd, kadibna isku day cinwaan tiro leh labada qoys. Kadib soo celi macaamiilka oo xaqiiji inuu weli gaaro server-kiisa iyada oo loo marayo waddada aad haysatay.

taskkill /IM openvpn-gui.exe /F
ping -4 198.51.100.44
ping -6 2606:4700:4700::1111
route print -4 | findstr /c:"0.0.0.0"

Ku celi isku xigga ka dib hurdo, ka dib isbeddel Wi-Fi iyo ka dib u gudubka fiilada oo loo gudbo bilaa-wire. Isbeddelladaas ayaa ah halka habka profile-ka iyo habdhaqanka DHCP labaduba ku guuldareystaan. Sharci miiska ku taagan laguma tiri karo huteel.

Qor tallaabada dib u celinta barbarka sharci kasta iyo waddo kasta. Microsoft wuxuu diiwaan geliyaa abuurista sharciyada baxa tixraaca sharciyada firewall-ka Windows, oo taas ayaa ka wanaagsan hage sawirro shaashad oo keliya.

Maqaallo la xiriira