Amaklayenti e-OpenVPN anamabhuloho awanayo i-inthanethi? Hlola umthetho we-NAT

Iseva enamabhuloho iyasebenza, umthetho we-masquerade ukhona, kodwa isiphequluli kuklayenti sisazungeza. Konke kubonakala kufanele kusebenze, yingakho ihora lokuqala lichitha ekuhloleni umhubhe kanye nobufakazi. Bese ufunda isibali emthethweni we-NAT futhi uthole uziro onganyakazanga. Umthetho ongakaze ubale ngisho iphakethe awukaze uhambisane nalelo, futhi kuseva enamabhuloho isizathu singokwakheka: ithrafikhi yeklayenti iphuma ngedivayisi ye-tap ebonakalayo, kuyilapho umthetho uqoka ikhadi langempela olikopishe kumhlahlandlela wakudala.

Ubufakazi yisibali, hhayi umugqa kuthebula

Imithertho ekhona nemithertho ehambisanayo yizinto ezihlukene, futhi isibali yiso esihlukanisa. Bhala uhla lwethebula le-NAT nezibali ezinemininingwane futhi ufunde izinombolo eceleni komthetho ngamunye ngaphambi kokushintsha noma yini. Isibali esimile kuziro ngenkathi ithrafikhi ihamba sisho ukuthi umthetho weqiwe, noma ngabe amakheli awo abonakala enengqondo kangakanani. Isibali esikhuphukayo ngenkathi uxhumano lusahluleka sikuthumela kwenye indawo: ekudluliseleni, endleleni yokubuya, noma ekugcineni okukude.

iptables -t nat -L POSTROUTING -v -n

Qala ngokufunda isibali eceleni kokufana kwesixhumi. Uma ibanga lomthombo lilungile futhi uhlangothi lokuphuma lungalungile, ukulungisa igama elilodwa emthethweni, hhayi umthetho omusha ngokuphelele.

Thola igama i-kernel elilibhalayo ngempela

Khomba igama ledivayisi yomhubhe ngaphambi kokubhala umthetho, usebenzisa uhlu lwezixhumi hhayi inkumbulo. Kusetho le-OpenVPN elinamabhuloho idivayisi ivamise ukuba isixhumi se-tap esidalwe iseva, futhi igama layo liyingxenye yokulungiselelwa kwakho kwasendaweni, hhayi ingaguquki yomhlaba wonke. Qinisekisa ukuthi ikhona ngenkathi umhubhe usebenza, ngoba idivayisi evela kuphela ngemva kokuxhuma kweklayenti izokwenza ukuhlolwa kwangaphambili kubonakale kuyinkinga yomthetho.

ip -brief link

Bhala phansi igama. Yonke imiyalo elandelayo kulesi sifo ibhekisela kulo, futhi iphutha lokuthayipha lapha likhipha isibali esifanayo sziro njengephutha lokuqala.

Bhala kabusha umthetho uqondise edivayisini yomhubhe

Qondisa umthetho edivayisini yomhubhe futhi ugcine ibanga lamaklayenti njengombandela wokufana, ukuze lihlanganise ithrafikhi yomhubhe futhi lishiye ukuxhumana kukampetha uqobo kungaphazanyiswa. Faka ibanga lakho negama ledivayisi yakho, ngoba kokubili ngezansi kuyizibonelo futhi akukho okudluliswayo phakathi kokufakwa.

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o tap0 -j MASQUERADE

Bese uhlola ezinye izimo ezimbili ezifihlwa wuphawu olufanayo. Hlola ukuthi ukudlulisela kuvuliwe yini, futhi uma kungavulwanga, kuvule ekulungiselelweni kwesabelo uqobo hhayi nge-echo enyamalalayo ngemva kokuqalisa kabusha. Funda nezibali zochungechunge lwe-forward, futhi uma lulahla ithrafikhi yomhubhe, vumela leso sixhumi ngqo bese ushiya inqubomgomo yochungechunge.

Ukufunda uchungechunge lwe-forward nezibali kuthatha umyalo owodwa futhi kususa uhhafu wamathuba asele ngaphambi kokuthi uthinte omunye umthetho.

Kungani ikhadi langempela lingasoze lafane

Ibhuloho iyiswishi yesofthiwe eyakhiwe ngedivayisi ye-tap nesixhumi esisodwa sangempela. Uhlaka lweklayenti lungena kuleyo swishi futhi luphume lubheke kunethiwekhi yangempela njengelungu lebhuloho hhayi njengephakethe elisekhadini. Ngakho i-kernel yabela iphakethe ebhulohweni nembobo yalo, yingakho ikhadi obukade ulicabanga lingasoze livele ekufaneni. Asikho okonakele esixhumini sangempela; asiyona nje idivayisi i-kernel eyabela kuyo leyo phakethe.

Inkinga elandelayo abantu abahlangabezana nayo ivela ekwakhekeni okufanayo: ukuhlunga kwamafremu ebhulohweni kuyinto ehlukile ekuhlungweni kwe-IP. Uma isidingo siwumkhawulo ezingeni lefremu, kungokwa- kuhlunga kwebhuloho, hhayi umthetho wethebula le-IP.

Kufakazele ukusuka ekuqaleni kuze kube sekugcineni, bese ukwenza kube ngokunomphela

Vusa iklayenti elilodwa futhi pingi okuthile ku-LAN yeseva; leyo ndlela izilolonga ukudlulisela ngaphandle kwanoma yikuphi ukuhumusha. Ngemva kwalokho cela okuthile okusesidlangalaleni ukuze umthetho we-masquerade uphoqeleke ukuba usetshenziswe, futhi ufunde isibali futhi: kufanele sinyakaze kulokhu kuhlolwa hhayi okwedlule. Ukubamba okuthathwe edivayisini yomhubhe kubonisa kokubili lapho uhlaka luvela khona nokuthi ithwele liphi ikheli.

Isinyathelo sokugcina: faka imithetho esebenzayo ekulungiselelweni okufundwa ukuqalisa kabusha, futhi ubhale phansi igama ledivayisi elisetshenziswa ngempela yibhuloho lale mpetha. Konke okuthayiphwe ngesandla kuyanyamalala ngemva kokuqalisa kabusha, futhi ukwehluleka okufanayo kuyabuya kungasalele lutho olukuchazayo.

Uma isibali singanyakazi ngemva kokubhala kabusha, qhathanisa ibanga lomthombo emthethweni nekheli iklayenti elilitholile ngempela, ngoba iseva enamabhuloho inganikeza amakheli avela ebangeni obungahlosile.