Iphakethe le-firewall lifakiwe, imithetho yanyamalala ngemva kokuqala kabusha

Iphakethe lafakwa ngokuhlanzekile, imithetho yahlolwa, futhi ngemva kokuqala kabusha okulandelayo isango lalivulekile ngokuphelele. Akukho okwahluleka emsebenzini; okwahluleka yilokho okwakucatshangwa ukuthi kuzohlala. Ukufaka amathuluzi e-firewall, ukunquma ukuthi imiphi imithetho okufanele isinde, nokuyibuyisela ngesikhathi esifanele kuyimisebenzi emithathu ehlukene.

Uphawu lukutshela ini ngempela

Isethi yemithetho enyamalalayo uma kuqalwa kabusha inomunye wabanikazi abathathu: akekho oyigcinile, enye into yayithatha indawo, noma yabuyiswa ngaphambi kokuba into eyincike kuyo ibe khona. Ababili bokuqala babonakala ekulungiselelweni; owesithathu ubonakala kuphela ekuhlelweni. Yingakho ukuqala kabusha kungabonakala njengokulahlekelwa idatha kuyilapho empeleni kuyinkinga yokulandelana.

Qala ngokubhala okwakuyiqiniso ngaphambi kokuqala kabusha: iyiphi insizakalo eyayiphethe imithetho, iyiphi ifayela noma isizindalwazi eyayiyifunda ekuqaleni, nokuthi lowo mthombo wake wabhalwa yini. Isethi yemithetho esebenzayo ukuthi akekho oyigcinile iyincazelo evumelekile futhi iyiyona ejwayelekile kakhulu.

Ungaqali ngokufaka kabusha iphakethe.

Funda ithuluzi lokugcina ngaphambi kokulisebenzisa

Amathuluzi e-Debian abheka ukugcinwa njengenkinga ye-plugin: i-plugin ngayinye iyazi ukuthi ibhala kanjani imithetho yayo, futhi isembozo esisodwa sizibiza. Isenzo saso sokugcina sigcina konke okulayishiwe ngaleso sikhathi, futhi isenzo sokuqala silayisha leso sithombe kabusha. Asikho isenzo esihlola lokho esikugcinayo.

Leso yisithombe, hhayi ukubuyekezwa. Imvume esele evela kuseshini yokulungisa amaphutha, ukuhlola okungaqediwe, noma umthetho ovulekile owafakwa omunye umsizi, konke kuba ngokunaphakade kanye nenqubomgomo owawuhlose ukuyigcina. Ukugcina isimo nokugunyaza isimo kuyimisebenzi eyehlukene, futhi eyodwa kuphela yayo edinga ukwahlulela. Funda isethi elayishiwe kuqala, bese unquma ukuthi imiphi imigqa efanele ukusinda.

Gcina ngamabomu, ngemva kokufunda lokho okulayishiwe.

Nquma ukuthi yini okufanele isinde

Eminye imithetho ingeyomjikelezo wokuphila kwesixhumanisi futhi kufanele inyamalale nayo. Eminye kufanele iphile isikhathi eside kunethumbu, futhi isibonelo esicacile kakhulu umkhawulo o wenqabela ukuthi ithrafikhi yeklayenti ibuyele esixhumanisini somzimba uma ithumbu liwa. Lezi zigaba ezimbili zidinga izinto ezihlukene zokubuyisela, hhayi isithombe esisodwa esabiwe.

Bhala umphumela ohlosiwe wezikhathi ezintathu: ukuqala, ukunika amandla i-VPN nokulahlekelwa ithumbu. Bese uhlola ukuthi ithuluzi olikhethile lingaziveza yini zonke. Iphakethe lokugcina elilayisha kabusha isithombe esimile likhohlwa eyokuqala futhi kungenzeka lingakwazi neyodwa yezinye, ngoba isithombe asazi ukuthi isimo sethumbu sashintsha nini. Uma singakwazi ukuziveza, igebe lingelinye ingxenye.

Impendulo inqunywa inqubomgomo, hhayi iphakethe.

Hlola ukulandelana kokubuyisela

Ukubuyisela ifayela akufani nokuba umnikazi womphumela. Omunye umphathi angathatha indawo yemithetho, i-accept yangaphambili ingayifihla, noma amaklayenti angaqala ukuthumela ngaphambi kokuba umkhawulo uqale ukusebenza. Buyekeza ukuziphatha ekuqaleni nasekuxhumaneni kabusha, hhayi kuphela ukuba khona kwefayela eligciniwe.

systemctl status netfilter-persistent
iptables -S

Ungacabangi ukuthi ukumisa insizakalo yokugcina akunangozi, ngoba iphakethe libhala ukukhishwa okunemibandela uma ima. Thola ukulungiselelwa kwangempela kwensizakalo ngaphambi kokusebenzisa i-stop noma i-restart njengokuhlola esangweni olilawula kude. Iseshini ye-console nokubuyiselwa okubhaliwe kuyizinga eliphansi ngaphambi kwalokho kuhlola.

Ukulandelana kuyisimilo sesistimu esebenzayo, hhayi sefayela elikudiski.

Yamukela imiphumela emithathu ehlukene

Bhala ukufakwa kwephakethe, isethi yemithetho elayishiwe kanye nenqubomgomo esetshenziswayo njengamaqiniso ahlukene. Igama lephakethe emucwaningweni wosekelo liphendula okokuqala kuphela, futhi yikho okungavamile ukubaluleka.

nft list ruleset

Bese uhlola umsebenzi ovunyelwe nokwenqatshwa okudingekayo.

Uma ukwenqatshwa kusaqhubeka ngemva kokuqala kabusha nangemva kokuwa kwethumbu, inqubomgomo isindile. Uma kuqhubeka kwesinye salezi zimo kuphela, uthole inkinga yokulandelana esikhundleni sokuyilungisa.