I-firewall yamafu ne-firewall yomsingathi yesiphakamiso se-VPN

Vumela umgudu we-VPN kunqubomgomo yamafu futhi ukuxhawulana kusengafa esiphakamisweni: isivakashi sisebenzisa isihlungi saso kanye nokubopheka komlaleli waso, futhi noma yikuphi kwalokhu kungalahla lokho amafu akuvumile. Okuhlukile nakho kuyenzeka, lapho umthetho womsingathi uvumela umgudu khona-ke inqubomgomo ephezulu iwulahla kuqala. Abanikazi ababili, amasethi amabili emithetho, indlela eyodwa yephakethe. Yihambise ngokulandelana esikhundleni sokuqagela kungqimba olusolisayo kakhulu.

Qala emaphethelweni bese ungenelela ngaphakathi

Ukulandelana kugxilile: iphoyinti lokugcina elivulekile, isixhumanisi sokusetshenziswa, inqubomgomo yamafu exhunyiwe, ikheli lesivakashi, umlaleli wenqubo, imithetho yokungena yasendaweni. Isigaba ngasinye sidlulisa iphakethe noma siqeda uphenyo, yingakho ukuqala esivakashini kulahlekelwa isikhathi esiningi.

Ithrafikhi yeklayente edluliselwe phambili iyisigaba esihlukile, ehlolwa ngemva kokukhululwa komhubhe. Ungqimba lwamafu lubona kuphela umhubhe wangaphandle, ngakho lungavuma uxhumano kodwa lungabi nhlangano neyodwa nesicelo sesevisi yangaphakathi. Umhubhe oxhumayo kodwa ongafinyeleli kumsingathi wangaphakathi uvamise ukukhomba ekudluliselweni phambili, hhayi emgodini ovaliwe.

Funda inqubomgomo yamafu ngaphambi kokuthinta isivakashi

Qinisekisa umthetho wokungena womgudu we-VPN, iphrothokholi yawo kanye nobubanzi bomthombo obuhambisana neklayente yakho yokuhlola. Bheka futhi uhlu lokulawula ukufinyelela lwesethi yezinkundla: isihlungi sesibili esinemithetho yaso kanye nezinqunyelwe zaso. Kokubili kufanele kuvume ukugeleza ngaphambi kokuthi iphakethe lifinyelele esiphakamisweni. Ukuvuma komunye nokwenqaba komunye yisimo esivamile salesi siphazamiso.

Nciphisa ububanzi kuze kube nencazelo. Ukuvula umgudu we-VPN kuyo yonke i-inthanethi kulula ukukufakazela futhi kunzima ukukuvikela, kanti umthetho oboshelwe ekhelini elilodwa uyaphuka lapho iklayente yakho yokuhlola ishintsha inethiwekhi. Bhala isihlonzi somthetho nomnikazi wenqubomgomo, ukuze ushintsho olulandelayo lulandeleke kuze kufike kumuntu.

Qinisekisa umlaleli, bese kuba uchungechunge lokungena

Esiphakamisweni, hlola ukuthi inqubo ye-VPN iboshelwe ekhelini nasemgodini obulindele, isibonelo nge-ss -lntp 'sport = :1194'. I-daemon eboshelwe ku-127.0.0.1 kuphela yamukela amaklayente endawo futhi ayamukeli lutho ngomhubhe, lokho okubonakala ngaphandle njengomgudu ohlungiwe ngqo.

Bese ufunda imithetho yasendaweni ngohlelo lolimi oyosebenzisa ukulushintsha, njenge-iptables -S INPUT noma i-nft list chain inet filter input. Umthetho obhalwe efayeleni kodwa ongalayishwanga neze, noma ukulahla okuzenzakalelayo ngaphandle kwemvume ehambisanayo, ulahla amaphakethe buthule. Esangweni elidlulisela phambili, hlola futhi izilungiselelo zokudlulisela nendlela yokubuya. Yizo ezinquma okwenzeka emaphaketheni aphathwa ngesiphakamiso hhayi aqondiswe kuso.

Kunesimo kungqimba olulodwa, akukho simo kwelilandelayo

Amaqembu okuphepha akhumbula ukugeleza okuvumile futhi avumela izimpendulo ukuba zibuye zingene. Uhlu lokulawula ukufinyelela lwezethi yezinkundla kanye ne-firewall eziningi zomsingathi azigcini leso simo, ngakho umthetho ohlanganisa kuphela isiqondiso sokuphuma udlulisa isicelo bese ulahla impendulo. Ungalokothi uthwale umcabango ngethrafikhi ebuyayo phakathi kwezingqimba ngaphandle kokufunda umthetho wengqimba lesibili (second layer's rule).

Izibali zinquma lokhu ngokushesha kunokufunda wonke umthetho ku-akhawunti. Isibali esikhulayo sisho ukuthi iphakethe lafika futhi lalahlwa lapho, kanti esimiswe kuqanda sisho ukuthi alizange lifike lapho; iptables -vnL INPUT ne-nft list ruleset zikhombisa lezo zinombolo lapho imithetho ilayishwa nezibali.

Hlola ngesikhathi esisha, hhayi ngesikhathi esiphilayo

Shiya inethiwekhi yomthombo nephrofayili yokuhlola zingashintshiwe ngenkathi uqhathanisa ukubuka, futhi uvula uxhumano olusha ngemva kwakho konke ukushintsha. Ukufinyelela ikhonsoli yewebhu ku-443 akusho lutho mayelana nokuthi i-daemon ye-VPN iboshelwe ku-1194 yini, ngakho hlola umgudu oyidingayo. Isikhathi esivele sikhona siwufakazi omubi kakhulu lapha. Siyaqhubeka sisebenza ngenkathi konke ukungena okusha kunqatshwa.

Ngaphambi kokuhlela inqubomgomo ekude, qinisekisa indlela yokubuya engaxhomekekile endleleni oyishintshayo. Bese uvula isikhathi sesibili sokuphatha eceleni kokuhlolwa kwe-VPN: esisungulwe ngaphambili singaphila isikhathi eside kunomthetho ovimbela emisha. Bhala abanikazi bazo zombili izinqubomgomo ukuze akukho kwakhiwa kabusha okubuyisela uhhafu wendlela; uma zombili izingqimba zivumelana kodwa umhubhe usahluleka, thatha kusixhumanisi sesivakashi bese uhlola ikheli nomgudu okusetshenziswa ngayo iklayente ngempela.