Amaphrofayili e-firewall ngokuphambene nokuphuma kwe-VPN: kungani okomphakathi kungeyona indlela
Iphrofayili ye-firewall ikhetha ukuthi iyiphi isethi yemithetho esebenzayo. Ayisho lutho mayelana nokuthi iyiphi i-interface ethwale iphakethe, futhi ukuvinjwa okucacile kunqoba imvume encane.
Umthetho uzwakala unembile: vumela ithrafikhi yasendaweni kuphrofayili yangasese futhi uvumele ithrafikhi ye-VPN kuphela kweyomphakathi. Akunjalo, ngoba iphrofayili yenethiwekhi ikhetha ukuthi iyiphi isethi yemithetho ye-firewall esebenzayo futhi ayisho lutho mayelana nokuthi iyiphi i-adaptha ethwale iphakethe. Ukuthatha igama lephrofayili njengemfuneko yendlela yilona phutha elenza idizayini yokuphuma okulinganiselwe ibonakale iphelile kuyilapho ingakapheli.
Qala ngokubhala phansi ukugeleza, bese unquma ukuthi iyiphi indlela engaqinisekisa ngempela ngakunye kwako. Lolo hlu lokugeleza yilona kuphela into esala ngemuva koshintsho lomthetho olulandela.
Isigaba sikhetha imithetho, hhayi izindlela
Lapho i-Windows ihlukanisa inethiwekhi njengeyomphakathi noma eyangasese, i-firewall isebenzisa isethi yemithetho ehlelwe yaleyondlela. Ukuhlukanisa kulandela inethiwekhi i-adaptha ejoyine kuyo, futhi isethi yemithetho inquma ukuthi yini evunyelwe kuyo. Awekho kula maqiniso ancike ekutheni ithrafikhi yohlelo isebenzise ithaneli yini. Lokho kuzimela yikho konke ubunzima.
Ukukhethwa kwendlela kwenziwa ukuhlela umzila, ngokukala kwe-interface kanye nesiqalo esifakwa yithaneli. Ngakho iphrofayili ingase ibe negama lomphakathi kuyilapho ukuxhumana kohlelo kuthatha indlela yenyama, futhi i-firewall isazobika ukuthi kusetshenziswe isethi yemithetho yomphakathi.
Yingakho umthetho obekelwe iphrofayili awukwazi ukusho ithaneli kuphela. Lezi zici ezimbili zinqunywa izingxenye ezahlukene futhi eyodwa ayikwazi ukuthatha indawo yomunye.
| Flow | What decides it | What a rule can enforce |
|---|---|---|
| VPN client to its endpoint | Routing plus the outer transport | Allow the client process before the tunnel exists |
| Application to an internet host | Interface metric and prefix length | Block the process unless the tunnel interface is up |
| Application to a LAN host | Local subnet route | Allow one destination, not the whole category |
Ukuvinjwa okucacile kunqoba imvume encane
Ukuqondiswa kwe-Microsoft ngemithetho ye-firewall kuhlukanisa imvume njengokukhululwa kwisenzo sokuvinga esizenzakalelayo nokuvinga okucacile okuphikisana nemvume. Ukuvinjwa okucacile kunqoba lokho kungqubuzana, futhi imithetho yokuphuma ilandela ukubaluleka okufanayo.
Ngakho indlela edumile yokwengeza umthetho ovinga konke bese uthembela emvumeni encane ebekwe phezu kwawo ayikwenzi lokho umbhali wayo akulindele. I-Windows Firewall ayixazululi ukungqubuzana ngokulandelana kwemithetho okunikezwe umlawuli. Ukuvinjwa kusebenza nje, futhi uhlelo oluxhumayo lubika ukuphela kwesikhathi. Umthetho owawubonakala njengokukhululwa awukaze ube semdlalweni.
Isimo esisekelwayo inqubo yokwenqaba esizenzakalelayo enemithetho yemvume egunyaziwe, lapho imvume ngayinye isho uhlelo, isevisi noma indawo ngokunemba okwanele ukuze kubuyekezwe. Leyo dizayini iyaphumelela ekuhlolweni, ngoba konke ukukhululwa kuyabonakala futhi akukho okuncike ekulandelaneni okwakhiwe ngakho.
Imithetho emibili ephikisanayo imbi kunomthetho owodwa, ngoba ukuziphatha okuphumayo kulungile futhi akuchazeki ngesikhathi esisodwa.
Nikeza inqubomgomo yokuphuma umnikazi oyedwa
Iklayenti le-VPN elisekelwayo selivele ligcina ukuziphatha kwalo kokuvinga kanye nokukhululwa kwalo kwamaphoyinti okugcina. Ukwengeza imithetho yesandla engaxhumanisiwe kungase kushiye lelo klayenti ngaphandle kwethaneli eliyidingayo ukuze lisethe, noma kushiye indlela yesibili ivulekile okungekho owabona.
Nquma ukuthi inqubomgomo yokuphuma ingeyabani ngaphambi kokubhala imithetho: ukuhlelwa kweklayenti ngokwalo, inqubomgomo ye-firewall ephethwe, noma uhlu lwasekhaya lokukhululwa olubhaliwe olunomnikazi. Bese uhlanganisa izendlalelo esikhundleni sokunqwabelanisa izivivinyo kuze kuxhumane okuthile. Umnikazi oshiwo futhi uyilowo obuzwa lapho izendlalelo ezimbili zingavumelani.
Gcina indlela yokubuyisela ngaphambi kokushintsha noma yini. Umshini okude okhiyiwe ngaphandle kwendlela yawo yokuphatha uyiphutha elibi kunembozo yenqubomgomo obuwuvala. Umthetho wokubuyisela kulula ukuwuthethelela lapho ubhalwe phambili, futhi kulula ukuwuthola lapho ushintsho lungahambi kahle ngehora okungekho muntu othanda lona.
Hlola imiphumela emine esikhundleni sokufunda ilebula
Inqubomgomo ilungile ngokulingana namacala eyahlukanisayo, ngakho thatha ilebula yephrofayili njengesiqalo hhayi umphumela. Imiphumela emine isho ukuthi iyasebenza yini: isicelo se-LAN esihlosiwe siyaphumelela, isicelo se-inthanethi esihlanganisiwe siyaphumelela, isicelo esiqondile esivinjelwe siyahluleka, futhi icala lokuhluleka kwethaneli liziphatha ngendlela eyakhiwe ngayo esikhundleni sokuhlehla buthule. Bhala imiphumela emine eceleni koshintsho lomthetho. Uhlelo lokuhlola olunamacala amane ashiwo lufushane ngokwanele ukuthi lusetshenziswe njalo futhi lucacile ngokwanele ukuthi luhluleke ngomsindo.
Get-NetConnectionProfile | Select-Object Name,NetworkCategory,InterfaceAlias Get-NetFirewallProfile | Select-Object Name,DefaultOutboundAction Get-NetFirewallRule -Direction Outbound -Enabled True | Where-Object Action -eq Block | Select-Object DisplayName,Profile
Umyalo wokuqala ukhombisa ukuthi inethiwekhi ngayinye exhunyiwe ihlukaniswa kanjani, okuvame ukungabi yilokho umuntu obhale umthetho ayekucabanga. Eyesibili ikhombisa isenzo esizenzakalelayo ngephrofayili ngayinye, futhi eyesithathu ibala ukuvinjwa kokuphuma okunikiwe amandla, kuhlanganise lokho okuzokhansela buthule imvume encane.
Gijima futhi amacala amane ngemuva koshintsho lwenethiwekhi, ngoba iphrofayili ingase ihlukaniswe kabusha lapho umshini ujoyina enye inethiwekhi. Ilebula yephrofayili efanayo ayibona ubufakazi bokuthi indlela ibiyileyo obuyihlosile.