i-dnsmasq ayikwazi ukubopha iphothi 53: thola isokhethi eyigcinile

i-dnsmasq iphetha ngephutha lokuthi ikheli selivele lisetshenziswa, futhi ilogi isho iphothi esikhundleni somenzi. Emshinini osebenza ne-VPN futhi, ukusabela kokuqala ukusola imizila eshayelwe, kodwa ukwehluleka kwe-bind kwenzeka ngaphambi kokuba noma iyiphi iklayenti ithume umbuzo. Kukhona okuthile esivele ibambe isokhethi, futhi umsebenzi uwukuyikhomba. Izinguquko zemizila azikwazi ukukhulula iphothi.

Izinyathelo ezinhlanu ngalokhu kulandelana: phinda iphutha, bhala izilaleli, qonda i-wildcard, yabela umsebenzi, bese uqinisekisa.

Isinyathelo 1: phinda futhi ufunde iphutha

Qala i-dnsmasq ngaphambili ngokulungiselelwa okufanayo okusetshenziswa yisevisi, ukuze iphutha libonakale kutheminali yakho esikhundleni selogi okufanele uyiqagele. Qaphela umndeni wamakheli nekheli lendawo kumyalezo. I-bind ekhelini elithile kanye ne-bind ku-wildcard kungukwehluleka okuhlukene okunabanikazi abahlukene.

Gcina umbhalo oqondile. Ikheli elisetshenziswayo, ukwehluleka kwemvume kanye ne-interface engekho konke kufika njengokwehluleka kokuqala, futhi kukhombisa ukulungiswa okuthathu okuhlukene.

Isinyathelo 2: bhala abanikazi

Qala ngokubhala amasokhethi. Isihlungi kuphothi lomthombo 53 sikhombisa zombili izinto zokuhamba kanye nenqubo enomnikazi uma unegunya lokukubona:

ss -lntup 'sport = :53'

Funda umphumela ngamakholomu: ukuhamba, ikheli lendawo, iphothi, inqubo. Isilaleli se-TCP nesilaleli se-UDP amasokhethi ahlukene, ngakho ukumisa elinye akukhululi elinye. Ikheli le-wildcard limboza yonke i-interface, okusho ukuthi ikheli le-VPN selithathiwe ngisho noma kungekho mugqa olisho ngegama. Futhi igama lenqubo likutshela ukuthi lena i-resolver ephethwe yisabalalisi, i-container, noma into eshiywe isebenza ucwaningo lwangaphambili.

Isinyathelo 3: ugibe lwe-wildcard

Inketho ye-bind-interfaces ishintsha ukuthi i-dnsmasq ibopha isokhethi le-wildcard noma isokhethi elilodwa kuyo yonke i-interface elungisiwe, njengoba kuchaza isichazamazwi se-dnsmasq. Ngaphandle kwayo i-dnsmasq ingabopha i-wildcard bese ihlunga izicelo nge-interface esikhundleni, lokho okwehluleka ngokushesha uma enye i-daemon ibambe i-wildcard. I-Linux yengeza i-bind-dynamic, ephetha ama-interface adalwe ngemva kokuqala, ukukhathazeka kwangempela uma i-interface ye-VPN ivela kuphela lapho ixhuma.

Yingakho ama-daemon amabili akhombisa ukuthi alungiselelwe ama-interface ahlukene nawo ashayisana. Ukungqubuzana kusekhothini, hhayi enhlosweni. Khetha indlela yokubopha ngamabomu futhi ufunde ukuziphatha okubhaliwe kwenguqulo yakho ngaphambi kokuyishintsha.

Isinyathelo 4: yabela umsebenzi

Nquma ukuthi iyiphi i-daemon ephendula amaklayenti e-VPN nokuthi iyiphi ephendula umhambi. I-resolver eyodwa elalela ekhelini lomhubhe futhi idlulisela phezulu iyisakhiwo esivamile; ama-resolver amabili lapho ngalinye licabanga ukuthi lingumnikazi wephothi 53 akusona isakhiwo nhlobo.

Bese uveza leso sinqumo ekulungiselelweni kwesevisi ngayinye: amakheli okulalela, izihlungi ze-interface kanye nokudlulisela. Zishintshe ngumnikazi wesevisi, kungaba iyunithi yesabalalisi, umphathi wenethiwekhi noma indawo yokusebenza ye-container, ukuze ushintsho luhlale ngemva kokuqalwa kabusha.

Isinyathelo 5: qinisekisa isokhethi, bese umzila

Ngemva kokuqalwa kabusha, qinisekisa ukuthi amasokhethi ahlosiwe akhona ngaphambi kokuhlola iklayenti. I-daemon engakaze ibophe ayikwazi ukusindiswa ngumzila, futhi ukwehluleka kweklayenti kwisokhethi eliboshwe kahle kwenye inkinga enesinye isisombululo. Bese uhlola ukufinyeleleka kusuka kuklayenti kumhubhe. Ngemva kwalokho kuphela kufanele ukubuza ukuthi amagama adingekayo ayaxazululwa.

Imiphumela emithathu ehlukene okufanele igcinwe ihlukene: isokhethi sikhona, iklayenti siyafinyelela, impendulo ilungile.

Okungafanele kwenziwe

Ungamisi i-resolver ongayazi ukuze ukhulule iphothi ngaphandle kokwazi ukuthi yini encike kuyo, ngoba ukusesha komhambi ngokwakho ngokuvamile kuncike kuyo. Ungakopishi iresiphi endala ehambisa i-daemon yesibili ekhelini lokulalela lomphakathi, ngoba lokho njengomphumela oseceleni kunquma ukuthi ubani angakubuza. Futhi ungangezi ukudlulisela lapho ukwehluleka kwakungokwendawo.

Uma umshini uphethwe, bhala isinqumo sobunikazi lapho umphathi olandelayo ezosithola khona. Ukungqubuzana kwephothi kuyabuya njalo lapho isithombe sakhiwa kabusha.