Umhubhe ogcwele wabulala isikhathi sakho se-SSH: bopha indlela yokubuya

Qalisa iklayenti le-OpenVPN emshinini osebenza kuwo nge-SSH, bese phakathi nomyalo isikhathi siyaganda. Umhubhe ubika ukuthi uxhumekile, umsingathi angafinyelela i-inthanethi ngawo, futhi ukucindezela kwakho izinkinobho kusafika kuyilapho kungenzi lutho olubuyayo. Okwashintshayo akusiwo umhubhe: yindlela yokubuya yamaphakethe aqondiswe kuwe, manje ehambisana nomzila omusha ozenzakalelayo futhi engena kumhubhe umsango okude ongeke uwusebenzise ukufinyelela itafula lakho.

Okufakwa ngempela yi-redirect-gateway

Esimweni sayo se-def1, i-redirect-gateway yengeza i-0.0.0.0/1 ne-128.0.0.0/1 esikhundleni sokubhala phezu komzila ozenzakalelayo. Lezi zingxenye ezimbili zihlanganisa yonke indawo yamakheli kuyilapho zombili zihlala ziyizijobelelo ezinde kune-0.0.0.0/0, ngakho noma iyiphi indawo engakho ukufana okuqondile manje ingena kumhubhe. Yiyo le ndlela okufanele uyibambe, ngoba ukulungiswa ngakunye ngezansi kusebenza ngokufaka ukufana okuqondile.

Ikheli lakho lokuphatha lingelinye lalazo zindawo.

Iseva ye-VPN idlulisela ithrafikhi yamaklayenti ayo ngase-inthanethi. Ayinawo umzila wekheli lomphakathi oxhuma ngalo, futhi ayinasizathu sokuthatha lawo maphakethe njengokunye ngaphandle kwethrafikhi evela kuklayenti, ngakho iyawalahla. Phakathi nalokho isicelo osithumile safinyelela umsingathi, yingakho isikhathi sibonakala siphila ohlangothini olulodwa kuphela.

ip route show table main | head -n 20
ip route get 198.51.100.23

Thola ikheli lakho lomthombo nendlela yangaphambi komhubhe

Kuseva, bhala ukuxhumana kwe-SSH okusunguliwe bese uphawula ikheli lohlangothi olunge kulo. Lelo kheli yilona okufanele umzila wakho wokubuya ulihlanganise, futhi akusilo njalo elo ocabanga ukuthi lilo: umsingathi wokugxuma, isango le-NAT noma isihumushi somhlinzeki kungafaka omunye umthombo.

Bese uthola isango lomzimba kanye nesisetshenziswa esathwala ithrafikhi ngaphambi kokuba umhubhe uqale. Ekuhlelweni kwe-def1 umzila ozenzakalelayo usakhona ngaphansi kwemizila engu-half-default, ngakho ulwazi lukhona, nakuba ukufunda ithebula elide lemizila ngamehlo kuholela emaphutheni.

Bhala kokubili amanani kanye negama lesisetshenziswa ndawonye, ngoba umzila ozowengeza udinga kokuthathu. Uma umsingathi wawusebenzisa umthetho wokuhlela ngomgomo ukuze akhethe umzila wakhe ophezulu, umzila ojwayelekile kungenzeka ungabhekwa nhlobo, futhi lokho kungaguqula ukulungiswa.

Bopha umzila womsingathi odlula imizila engu-half-default

Umzila we-/32 mude kunanoma imuphi umzila ongu-half-default, ngakho izimpendulo eziya ekhelini lakho ziwuthatha esikhundleni somhubhe. Isinyathelo esilandelayo isango langaphambi komhubhe futhi idivayisi isisetshenziswa somzimba, okugcina iphakethe endleleni eyayiyisebenzisa ngaphambi kokuba umhubhe ube khona.

ip route add 198.51.100.23/32 via 203.0.113.1 dev eth0

Qinisekisa ngokusesha hhayi ngokuhlola ithebula: impendulo kufanele isho i-eth0 nesango, hhayi neze i-tun0.

I-OpenVPN isivele yengeza umzila womsingathi oya ekhelini lalo leseva ye-VPN ngesizathu esifanayo, ngakho iphethini yaziwa futhi ikheli lokuphatha liwukuhlukile nje. Ungasebenzisi i-route-nopull ukulungisa lokhu, ngoba ilahla imizila eqhutshiwe umhubhe ayidingayo, kuhlanganise inethiwekhi ekude nezinketho ze-DNS.

Yenza ikwazi ukumelana nokuxhuma kabusha

Umzila owengezwe ngesandla unyamalala lapho iklayenti lixhuma kabusha futhi lifaka eyalo, okuguqula ukulungiswa kube ukuphazamiseka okuphindaphindayo. Namathisela umyalo entweni esebenza ngemva kokufakwa kwemizila.

Isikripthi se-route-up noma ihuku le-pre-up lomphathi wenethiwekhi kokubili kuyasebenza, futhi ukuhlola okuthembekile ukuxhuma kabusha okulandelwa ukusesha okufanayo.

Ku-Windows okulingana nakho umzila ongunaphakade owengezwe nge--p, okwenza kube ngaphezu kokuqalisa kabusha kodwa kusadinga ukukhomba isango elifanele ngemva koshintsho lwenethiwekhi. Noma yiluphi ipulatifomu, bhala isizathu eceleni komzila: umphathi olandelayo udinga ukwazi ukuthi ukhona ukuvikela isikhathi sokuphatha, hhayi ngoba idizayini yenethiwekhi yayikudinga.

Lapho umzila obophiwe ungakwanele

Ukuhlunga komzila obuyayo kungalahla iphakethe elingena kwesisetshenziswa esisodwa liphume kwesinye, okuyiyo kanye into eyenziwa umzila obophiwe. Hlola inani le-rp_filter elisebenzayo ngaphambi kokucisha noma yini emhlabeni wonke, futhi ukhethe ukulungisa ukungalingani kunokucisha ukuhlola. Isilungiselelo sesiseshenziswa ngasinye yisona esisebenzayo, futhi imodi evulekile ivame ukubhala kuphela ukungalingani esikhundleni sokulahla iphakethe. Funda kokubili ngaphambi kokuphetha ngokuthi isihlungi yisona esiyinkinga.

Amsingathi anokuhlela ngomgomo adinga umthetho kanye nomzila, ngoba isisekelo semithetho sikhetha ithebula ngaphambi kokuba umzila ongaphakathi kulo ubhekwe. Umzila okuthebula eliyinhloko awubonakali kugeleza okuhambisana nomthetho okhomba kwelinye ithebula. Funda imithetho ngaphambi kokwengeza noma yini ku-main. Uma umthetho usuvele uhlanganisa ithrafikhi yokuphatha, okuhlukile kufanele kube sekuthebula lalowo mthetho.

Gcina ikhonsoli engaphandle kwebhendi ivuliwe ngesikhathi uhlola futhi uphinde uhlole ngokungena kwesibili ngaphambi kokunqamula lena oyisebenzisayo. Umzila odlulisela ithrafikhi yakho yokuphatha kumhubhe unqamula ukuxhumana okulungisa ngakho. Ukubuyela ngaleso sikhathi kusho ikhonsoli yochungechunge noma ukuqalisa komsizi, okuwukushintshana okubi ngokweqa isinyathelo esisodwa sokuqinisekisa.