ifconfig-noexec ngeke isindise isikhathi sakho se-SSH: yini eyenzayo ngempela
Icindezela ukulungiselelwa kwekheli le-interface kwe-OpenVPN uqobo. Ayigcini indlela yokuphendula ye-SSH, ayicishi zonke izinguquko zendlela futhi ayinikezi ikheli elingekho.
Kowunye umucu wekhoramu, ifconfig-noexec kunikezwa njengesixazululo esigcina isikhathi se-SSH siphila lapho kuvuka umhubhe. Lokho kucabanga kuzwakala kukholakala kuze kube yilapho uhlola ukuthi lolu khetho luthinta ini ngempela. Ivimbela OpenVPN ukuthi lungiselele ikheli le-interface yomhubhe futhi ilethe lawo manani emibhalweni; mayikhulumi lutho mayelana nokuthi izimpendulo zoxhumano lwakho lokuphatha ziya kuphi. Ukukholwa okuphambene nakho kukhiqiza umhubhe ongenakho ikheli elisebenzisekayo kanye nesikhathi se-SSH esisafa noma kunjalo.
Lolu khetho ludlulisela ini ngempela
Ngokuzenzakalela, iklayenti likhuphula idivayisi yomhubhe futhi linikeza amakheli asekhaya nasendaweni ekude iseva eyamnika wona. Uma ifconfig-noexec kubekiwe, leso sinyathelo siyadlulwa, futhi amanani okuxoxiswene ngawo akhishwa ayiswa endaweni yemibhalo ukuze enye into iwasebenzise.
Ubunikazi buyashintsha. Akukho okusungulwayo esikhundleni salo.
Ngakho umbuzo ololu khetho oluphendulayo ngowokuthi ubani ohlela i-interface, futhi umbuzo olungawuphenduli ngowokuthi amaphakethe athola kanjani indlela yokubuya kuwe. Gcina lezi zinto ezimbili zihlukene, kungenjalo uzochitha ubusuku bonke uhlela izindlela ukuze unxephezele i-interface engenakho ikheli.
Izinketho ezintathu ezifanayo ezinemisebenzi ehlukene
Kulula ukudida lo mkhaya ngoba amagama ahluka ngegama elilodwa futhi izimpawu ziyahlangana. Funda ukuthi yikuphi okucindezelwa yilowo nalowo ngaphambi kokukhetha noma yikuphi.
| Option | What stops happening |
|---|---|
ifconfig-noexec | OpenVPN's own tunnel-address configuration; values go to scripts instead |
route-noexec | Automatic route addition and removal; route details go to a script |
route-nopull | Server-pushed routes and related options such as DNS are rejected |
Lezi ziyizinye izindlela okufanele ziqondwe ngazinye, hhayi iqoqo lokunamathiswa ndawonye. Ukucindezela ukulungiselelwa kwekheli akucindezeli izinguquko zendlela, imithetho yodonga lomlilo noma izinketho eziphushelwe ezithwala i-DNS. Umbhalo ophathisiwe nawo ukhululekile ukushintsha izindlela, futhi leso yisinqumo osidluliselayo esikhundleni sokusicika.
Uma iklayenti lomhlinzeki lisonga injini, sebenzisa ukuhlanganiswa okusekelwayo esikhundleni sokuphonsa umyalo osezingeni eliphansi kuphrofayela bese uthemba ukuthi isonge sizowuhlonipha. Izonge zivame ukwenza kabusha iphrofayela lapho kuxhunyanwa, ngakho ukuhlela ngesandla kunyamalala ngaphandle kwephutha. Hlola lapho iklayenti ligcina khona izilungiselelo zalo ngaphambi kokuchitha ubusuku bonke efayeleni. Lokho kusebenza kuwo wonke umugqa kuthebula, hhayi kuphela lowo okuze ngawo.
Isikhathi se-SSH obuhlose ukusivikela
Uxhumano lwe-SSH lunekheli lomthombo, ikheli lendawo ekuyiwa kuyo kanye nendlela yokuphendula. Kuseseva esanda kufaka okokuzenzakalela komhubhe ogcwele, impendulo eya ekhelini lakho lomphakathi ihambisana nomhubhe, futhi isango le-VPN liyilahla.
Akukho lutho ekulungiseleleni amakheli e-interface yomhubhe okushintsha lokho.
Okukulungisayo indlela eqondile kakhulu yekheli lakho lokuphatha edlula esangweni elingaphambi komhubhe, noma umthetho wenqubomgomo oqondisa leyo traffic, kanye nezilungiselelo zokuhlunga ezisetshenziswa yisihambisi sakho. Lezi zinkinga ezimbili kwesinye isikhathi zivela ndawonye, futhi yileyo ndlela okuthathwa ngayo enye njengekhambi lenye. Zihlole ngokwehlukana: khuphula umhubhe ngaphandle kokhetho, bheka ikheli le-interface nendlela yokuphendula, bese unquma ukuthi yikuphi kulaba ababili okugandayekile ngempela.
Umbhalo ophathisiwe kufanele uthwale ini
Uma ngempela ufuna omunye umnikazi ahlele i-interface, bhala umsebenzi: sebenzisa ikheli lasekhaya nelasendaweni ekude, khuphula idivayisi, buyisela noma susa ukunikezwa kwamakheli lapho kuhlakazwa, futhi wenze okufanayo futhi ngemva kokuxhuma kabusha. Amanani esikhathi esisodwa esiphumelelayo akumele abhalwe ngokuqinile, ngoba iseva ingase inikeze elinye ibhangqa esikhathini esizayo.
Iziguquko zemvelo ezikhishwa yiklayenti yizona kuphela okokufaka okusekelwayo kwalowo msebenzi.
env | grep -E '^ifconfig_|^route_'Ngaphakathi kombhalo we-route-up lezo ziguquko ziyatholakala; kusuka kumsebenzi we-cron noma isheli yesandla azitholakali. Qinisekisa ukuthi yiluphi ukhonkolo lomjikelezo wokuphila olusetshenziswa yinguqulo yakho, futhi uqinisekise ukuthi ukhonkolo lusebenza ngezimvume ezanele zokushintsha i-interface, ngoba iklayenti lingase lihlehlisele kumsebenzisi ongenazimvume.
Hlola wonke umjikelezo wokuphila, hhayi isikhathi esisodwa
Khuphula umhubhe, hlola ikheli kudivayisi, bese uxhuma kabusha futhi uhlole futhi. Ukulungiselelwa okusebenza kanye bese kwehluleka emzamweni wesibili ngokuvamile kusho ukuthi isinyathelo esiphathisiwe sisebenza kuphela ekuxhumekeni kokuqala.
Bese uhlola zombili izindlela zokwamukela ndawonye: uxhumano olusha lwe-SSH ngendlela yokuphatha ehlosiwe luyasebenza, futhi uhlelo lokusebenza oluvunyelwe lusebenzisa umhubhe ngendlela efanele.
Isikhathi esidala se-SSH esihlala siphila ngesikhathi umhubhe ungenakho ikheli akusona impumelelo, futhi yiso leso simo esikhiqizwa yilolu khetho lapho kungekho othatha umsebenzi. Hlola ikheli le-interface kuqala, bese indlela yokuphendula yokuphatha, bese uhlelo lokusebenza. Uma ezimbili kwezintathu zingalungile, ukhetho lususe umsebenzi ngaphandle kokuwunika umnikazi.