I-firewall ye-hotspot yakho ivimbela i-DHCP ngaphambi kokuqashwa

Ucingo olusha lujoyina i-hotspot yakho, alukhombisi ikheli futhi alulitholi nanini. Indawo yokungena ilungile, i-DHCP daemon iyasebenza, futhi umthetho we-firewall oyibhalile ubonakala uhambisana nohlelo lwamakheli. Kodwa okwenzayo ngempela ukufuna ukuthi iklayenti isivele inekheli eliyicelayo. Iphakethe lokuqala le-DHCP alinalo ikheli nhlobo, ngakho umthetho awusebenzi nanini.

Buka iklayenti xa lijoyina

Landela ukuxhumana okukodwa ohlangothini lweklayenti. Irediyo iyaxhumana, iklayenti ithumela ukutholwa kwe-DHCP, iseva iyanikela, iklayenti iyacela, iseva iyaqinisekisa, futhi ngemva kwalokho kuphela iklayenti inekheli elingasetshenziswa kwenye into.

Konke okungaphambi kwalokho kuqinisekiswa kokugcina kwenzeka ngesikhathi iklayenti ingakwazi ukusebenzisa isango lokuthutha okujwayelekile. Yileso sikhathi umthetho we-subnet ewukhohlwayo.

Iphakethe lokuqala liqukethe ini ngempela

RFC 2131 icacisa ukuthi ukusakaza kwe-DHCP kweklayenti ngaphambi kokuthola ikheli kusebenzisa ikheli lomthombo eliyiqanda. Imilayezo esuka eklayentini iya kuseva iya ku-UDP port 67, futhi esuka kuseva iya eklayentini iya ku-UDP port 68. Ngakho ukutholwa kufika ne-0.0.0.0 njengomthombo, futhi umthetho ofuna umthombo ngaphakathi kwe-subnet yeklayenti lakho awuhambisani nakho.

Lokhu akusikho ukumiswa okungalungile ohlangothini lweklayenti. Lolu wuhlelo olusebenza ngendlela olwakhelwe ngayo, esikhathini esisodwa kuphela lapho lukwazi khona.

Iphi indlela ebhekana nalokhu ngempela

Uma indawo yokungena yona inikela ukuqashwa, lokhu kuyingxoxo yesevisi yasendaweni, futhi endleleni yasendaweni ehlungwe nge-IP kuthinta inqubomgomo yokungena nokuphuma. Ukuthutha kweklayenti okudluliswa nge-VPN kuyisinqumo esihlukile, futhi i-NAT yalokho kuthutha ihluke futhi. Ukuhlanganisa lezi zinto ezintathu yiyo indlela umbandela omncane ophenduka ube mkhulu ngayo.

Lapho iphakethe liphathwa khona kuncike ku-daemon kanye nomndeni we-firewall osetshenziswayo. Izinhlelo ze-socket eluhlaza, ukuhlelwa kwebhuloho kanye namahuku okuhlunga angaphambili kungayisusa noma kuyivimbe kwenye indawo ngokuphelele. Qinisekisa ukuboshwa kwesixhumi se-daemon kanye namahuku asebenzayo ngaphambi kokwengeza imithetho.

Iresiphi evamile yokungena nokuphuma ekopishwe kuforamu akusona ubufakazi bokuthi ukusetshenziswa kwakho kudlula kulawo maketanga ngendlela efanayo.

Impendulo ayihlali iwukusakaza

Umbundela ovumela kuphela izimpendulo zokusakaza nawo awulungile. Indawo ekuyiwa kuyo yempendulo ye-DHCP incike esimweni seklayenti kanye nezinkambu zomlayezo, futhi uhlelo lucacisa kokubili ukusakaza nokuthumela kwikheli elilodwa. Uma iseva yakho iphendula ngokuthumela kwikheli elilodwa iya ekhelini elizokwabiwa, umthetho wokusakaza kuphela uvimba isinyathelo esiqeda umsebenzi. Bhala umthetho ngokushintshana okwenziwa ngempela iseva emisiwe.

Ukuvuselelwa kokuqashwa kamuva kuphinda ukushintshana esimweni esihlukile, ngakho bafake isikhala nakho hhayi ukuxhumana kokuqala kuphela.

Lungisa ngobumnene, bese uhlola okusele

Gcina inqubomgomo ekhona, thola imvume ye-DHCP engekho futhi uyilinganisele kusixhumi esibheke eklayentini, uhlelo kanye namaphothi amabili. Fakazela ukuthi isicelo sifinyelela kusevisi, bese ufakazela ukuthi iseva iyaphendula. Lokhu kuyimibono emibili ehlukile, futhi ukumiswa kwesevisi noma kweqoqo lamakheli kusengaba kungalungile ngemuva kokuhlunga okuphelele.

Ukugeza ithebula akusona isinyathelo sokumisa i-DHCP. Ku-iptables, i-flush isusa imithetho kuketanga noma ithebula elikhethiwe, futhi ukugeza ithebula le-NAT akudali umthetho wokuhumusha. Ukubeka izinqubomgomo ze-ACCEPT ezibanzi kususa ukuvikelwa okungahlobene nokuqashwa, yingakho kokubili kungafaneleki ekulungiseni i-hotspot okungasetshenziswa kabusha.

Uma iklayenti sesinokuqashwa, hlola i-DNS, ukudluliswa kanye nokuphuma nge-VPN njengemisebenzi ehlukene. Ukuqashwa kusungula ukukhethwa kwekheli lendawo futhi akukho okunye ngale kwalokho.