I-Kerio ku-Linux: ukunikeza i-kvnet i-MAC elindelwe iseva

Izinto ezintathu kufanele zivumelane ngaphambi kokuba umhubhe we-Kerio uthwale ithrafikhi: ikheli kusixhumi esibonakalayo se-kvnet, inani elirekhodwe iklayenti, kanye nalokho okulindelwe inqubomgomo yeseva noma i-DHCP. Uma zingavumelani, umhubhe usaqinisekisa futhi usakhuphuka, futhi yikho kanye okwenza ukwehluleka kudide. Isixhumi esibonakalayo sakhiwa ngakunye ukuxhumana, ngakho ikheli elibekwe ngesandla lingelalowo mhlangano kuphela hhayi enye into. Lesi yisimo senkinga, futhi isisombululo i-hook hhayi ifayela lokuhlela. Okusele ukuthi inani lifundwa kuphi futhi lisetshenziswa kuphi.

Kungani ikheli lihlala libuyela emuva

I-kvnet iyisidluliseli esingabonakali esakhiwa iklayenti lapho ukuxhumana kuqala futhi sisuswa lapho kuphela. Ngakho i-ip link set yesandla iphila isikhathi esilingana ncamashi nomhlangano eyasetshenziswa kuwo, futhi ukuxhumana okulandelayo kuqala ngalokho okwabiwa iklayenti. Emshinini lapho iklayenti lihluleka khona ukusebenzisa ikheli elilindelekile, konke ukuxhumana kabusha kubuyisa ukungavumelani okufanayo, futhi umthetho wokuqashisa noma wokufinyelela wenqaba idivayisi futhi.

Lelo phatheni ngokwalo liwukuxilonga. Umhubhe osebenza umhlangano owodwa bese uhluleka kwesilandelayo awuyona inkinga yezifakazelo, ngoba izifakazelo azishintshi phakathi kokuxhumana.

Funda inani kuklayenti, hhayi kusixhumi esibonakalayo

Iklayenti le-Linux libhala imininingwane yezingxoxo kungobo yalo yokulungisa amaphutha, futhi ikheli elihlose ukulisebenzisa livela lapho njenge-token yokugcina emise okwekheli ngokulandelana kokuxhumana. Qhathanisa lokho nalokho okuphethwe yi-kernel ngempela, okuyireadlink eyodwa kude: cat /sys/class/net/kvnet/address.

Uma zombili zihlukile, iklayenti lalazi inani elilungile kodwa lehluleka ukulisebenzisa, futhi i-hook elisebenzisa ngemva kokuba isixhumi esibonakalayo sikhona ivala leso sikhala. Uma ingobo ingenawo ikheli nhlobo, inkinga ingeyangaphambili futhi ingeyenguqulo yeklayenti noma iphrofayela yeseva, hhayi eyeskripthi.

Lisebenzise ngemva kokuba isixhumi esibonakalayo sikhona

Abasebenzisi be-NetworkManager bangafaka iskripthi kusikhombisi sayo sokuthumela futhi basebenze kuphela lapho isixhumi se-VPN sikhuphuka. Iklayenti eliphethwe yi-systemd lidinga ukuqaphela okwengeziwe: i-drop-in egijima lapho isevisi iqala ivamise ukusebenza ngaphambi kokuba isidluliseli sibe khona, ngakho i-hook kufanele ilinde isixhumi esibonakalayo esikhundleni sokucabanga ukuthi sikhona. Beka ikheli ngaleso sikhathi, futhi uma i-kernel inqaba ngesikhathi isixhumanisi sikhuphukile, yehlisa, beka ikheli bese ukhuphula futhi. Funda i-token ekhishiwe futhi ngokusebenzisa iphatheni le-MAC ngaphambi kokulinikeza i-ip link, ukuze umugqa wengobo ongalindelekile ungabi yimpikiswano.

Noma yini egijima njenge-root isuka engobeni yeklayenti ifanele ubunikazi obuncane: ifayela eliphethwe yi-root, elingabhaliwe abanye, futhi akukho ukufakwa kwe-shell ngaphandle kwekheli eliqinisekisiwe. Gcina ukuhlolwa kwephatheni ngaphakathi kweskripthi. Ungavumeli okuqukethwe engobeni kunqume ukuthi yimuphi umyalo ogijimayo.

Qinisekisa ukuqashisa, hhayi isixhumanisi

I-ip -4 -o addr show dev kvnet kufanele ikhombise ikheli kububanzi obulindelekile, i-ip neigh show dev kvnet kufanele ikhombise isango, futhi isevisi eyodwa ngemuva kwe-VPN kufanele iphendule. Bese unqamula futhi uxhume kabusha kanye; uma ikheli libuyela emuva, i-hook isebenza kumcimbi ongafanele noma ayisebenzi nhlobo.

Isixhumi esibonakalayo esivela nekheli elifanele futhi esingalokothi sithole ukuqashisa sikhomba ohlangothini lweseva. Lokho kuwukuhlola okunye futhi ngokuvamile iqembu elinye. Qinisekisa ukuthi i-akhawunti ivunyelwe nokuthi ichibi lisenekheli ngaphambi kokuhlela i-hook futhi.

Buyekeza indlela yokugwema ngemva kokuthuthukisa

Ukukhiqizwa kweklayenti okubeka ikheli ngendlela efanele kushiya i-hook yakho isebenzisa inani eliphelelwe yisikhathi, okuwukukhonza okusha okwalethwa ukulungiswa. Futhi ungalokothi ukopishe i-MAC kusuka komunye umshini noma kusithubu sesithangami; sebenzisa inani elirekhodwa yileli klayenti kule akhawunti, futhi ubhale usuku olwaqinisekisa ngalo.

Gcina iskripthi sifushane ngokwanele ukuba sifundwe ngokuhlala okukodwa. Izindlela zokugwema ezihlaziya izingobo zingezesikhashana ngokwemvelo. Ezisala yilezo umfundi wesikhathi esizayo angaziqonda ngaphandle kochungechunge lokuqala.