I-kill switch ivimbela iphrinta yakho? Izinto ezintathu okufanele uzihlole kuqala
I-kill switch ivimbela ithrafikhi yephrinta ngamabomu. Yenza izinto ezintathu zokuhlola ukuze unqume ukuthi ukukhululwa okulinganiselwe kwe-LAN kufanelekile yini, futhi kugcine ekhelini elilodwa.
Iphrinta yakho yayisebenza ehoreni eledlule. Wabe uvula i-VPN, futhi manje imisebenzi imile emgqeni kuze kube yehluleka. Isizathu esingenzeka akusona iphrinta, kodwa i-kill switch: ilahla ithrafikhi ezophuma kumshini ngaphandle komhubhe, futhi iphrinta ye-LAN iyithrafikhi enjalo. Isinqumo sangempela akusona ukuthi ukunyathelisa kulungiswa kanjani, kodwa ukuthi le divayisi kufanele ifinyelele inethiwekhi yendawo noma cha. Izimo ezintathu zinquma lokho, futhi noma yisiphi sazo singaqeda ingxoxo kusenesikhathi.
I-kill switch ilahla ini futhi kungani
I-kill switch iwumthetho wokuhambisa onemodi yokwehluleka exhunyiwe. Lapho umhubhe usebenza, amaphakethe afanayo aphuma ngendlela efihliwe; lapho umhubhe uwa, iklayenti ivimba umzila ojwayelekile ukuze kungabikho okukhuluphala okuphumayo ngombhalo ocacile. Iphrinta ekwi-subnet efanayo ayisoze ihambisane nomzila womhubhe, ngakho ithathwa njengomzamo wokubaleka naphezu kokuthi ithrafikhi ayisoze ishiye isakhiwo.
Ukutholakala kwenza uphawu lube nzima ukuqonda. Amaphrinta amemezela nge-multicast DNS kupothi 5353, futhi umugqa oboniswa kubhokisi lokuxoxa lokwengeza iphrinta wakhiwa kulezo zimemezelo. Ngenkathi ukuvimba kusebenza, isimemezelo singase singafiki, ngakho iphrinta inyamalala ohlwini nakuba ikheli layo lisaphendula. I-IPP kupothi 631, ukuphrinta okuluhlaza kupothi 9100 ne-SMB kupothi 445 yizinkonzo ezejwayelekile ze-LAN ezingenayo indlela yomhubhe.
Qala ubonise ukuthi iphrinta iyafinyeleleka
Ngaphambi kokushintsha noma yimuphi umgomo, qinisekisa ukuthi iphrinta inempilo futhi uqinisekise ikheli ocabanga ukuthi inalo. Funda ikheli kuphaneli yephrinta noma ekhasini layo lewebhu. Umugqa wakudala ohlwini lwesistimu yokusebenza ungakhomba ekhelini i-DHCP eyanikeza enye idivayisi emasontweni adlule.
Nqamula i-VPN, bese uhlola ikheli namapothi amabili ajwayelekile okunyathelisa:
nc -vz 192.168.1.50 9100
nc -vz 192.168.1.50 631Kuma-Windows okulingana nakho yi-Test-NetConnection 192.168.1.50 -Port 9100. Xhuma futhi ku-VPN bese uphinda. Uma amapothi ephendula lapho i-VPN ivaliwe futhi isikhathi siphela lapho ivuliwe, usuyiphinda yonke into yokuvimba futhi okusele umbuzo womgomo. Uma behluleka kuzo zombili izimo, yima: iphrinta, ingxenye ye-Wi-Fi noma ukwahlukaniswa kwekliyenti yikho okunecala, futhi ukukhululwa kwe-VPN kuzongeza kuphela ukuchayeka.
Izimo ezintathu ezinquma ukuvumela noma ukuvimba
Zenze ngokulandelana. Isimo sokuqala esihlulekayo sinquma umphumela, ngakho okulandelayo akudingeki kuhlolwe.
| Condition | Allow a scoped exception | Keep the block |
|---|---|---|
| Who owns the network | Home or single-tenant office where you control the segment | Hotel, cafe or shared Wi-Fi where the printer is not yours |
| Who owns the device policy | Personal device with no enforced profile | Managed profile that enforces always-on VPN |
| What the device carries | Nothing another LAN peer must not reach | Client data that must not touch an untrusted segment |
Amanethiwekhi ezivakashi yi-‘cha’ ecace kakhulu. Engxenyeni yehhotela, ibanga lendawo yiwo wonke ezinye izivakashi, ngakho ukukhululwa okufinyelela iphrinta yakho kufinyelela nakumakhompyutha abo aphathekayo. Iphrinta engeyona eyakho ayisona isizathu sokuvula leyo ngxenye.
Amadivayisi aphethwe yi-‘cha’ yesibili. Lapho iphrofayela yomlawuli iphoqa i-VPN ehlala ivuliwe ngokukhiya, iklayenti iphinda igcizelele ukuvimba ngemva kwanoma yiluphi ushintsho lwendawo, futhi indlela yokugwema ingase yeqe umgomo oyemukele. Cela indlela esekelwayo yezinsiza zendawo esikhundleni sokuhlela izilungiselelo ezizobhalwa kabusha.
Ukukhululwa okuncane kakhulu okusekelwa iklayenti yakho
Okufunayo umthetho okhawulelwe endaweni eyodwa yekheli lephrinta eyodwa, hhayi iswishi ejwayelekile ethi ‘vumela indawo’. Iswishi ejwayelekile ivamise ukumboza lonke ibanga langasese nethrafikhi ye-link-local, okungaphezu kwalokho okudingwa umugqa owodwa wokunyathelisa, futhi yenza yonke idivayisi kuleyo ngxenye ibe umlingani oyemukele.
I-Windows inikeza ukuhlukaniswa komhubhe, futhi ezinye izakhiwo zinikeza nenketho yenethiwekhi yendawo. Lapho indlela eyodwa esekelwayo iwumugqa womsingathi, engeza ikheli elilodwa ngesango lomzimba ngemva kokuba umhubhe unyuke, isibonelo route add 192.168.1.50 mask 255.255.255.255 192.168.1.1, bese ulisusa lapho iseshini iphela. I-WireGuard isebenza ngendlela ehlukile: i-AllowedIPs inquma okungena emhubheni, ngakho iphrofayela yomhubhe ogcwele 0.0.0.0/0 ihambisa umsebenzi wokuphrinta kuze kufike endaweni yokugcina ngaphandle uma umzila othile ugxuma kuwo, futhi i-wg-quick ingafaka imithetho ye-firewall evimba konke okunye.
Ku-Android, isilungiselelo esihlala sivuliwe esivimba ukuxhumana ngaphandle kwe-VPN yi-kill switch, futhi ukutholakala kwephrinta kusuka kuhlelo lokusebenza ngaphakathi kwalokho kuvimba akunayo indlela ye-LAN. Imodeli yohlelo ngalunye nokukhululwa ibhalwe ekhasini le-Android VPN, okuyindawo okufanele ibhekwe ngaphambi kokushintsha noma yini:Umhlahlandlela wokuxhumana kwe-Android VPN. Izinguqulo zakamuva ze-macOS zicela imvume yenethiwekhi yendawo ngokuhlukile kumhubhe, futhi i-iOS yenza okufanayo ekufinyeleleni inethiwekhi yendawo, kodwa umugqa usengahluleka lapho umhubhe uvuliwe ngoba iklayenti yomthengisi ihambisa i-subnet ingene kuwo.
Noma iyiphi iklayenti oyisebenzisayo, gcina ukukhululwa ekhelini elilodwa nasemapothini amabili noma amathathu iphrinta ewasebenzisa ngempela. Bika i-DHCP lease esikhundleni sokwandisa umthetho kuyo yonke i-subnet, ngoba ikheli lingashintsha.
Qinisekisa ukukhululwa futhi wazi ukuthi uzokuhoxisa nini
Ngemva koshintsho, xhuma futhi bese uhlola izinto ezintathu ngokulandelana. Iphrinta iphendula emapothini ayo, ikhasi lokuhlola elingenabungozi liyanyatheliswa, futhi ukusesha kwekheli kusabuyisela indawo yokugcina ye-VPN esikhundleni se-ISP yakho. Uma ukuphrinta kusebenza kodwa ukusesha kukhombisa i-ISP yakho, uvule okungaphezu kwephrinta futhi kufanele ubuyisele.
Phinda ukuhlola ngemva kokuqalisa kabusha nangemva kwanoma yisiphi isibuyekezo sekhayenti noma sephrofayela, ngoba izibuyekezo zibuyisela izinto ezimisiwe ngokwanele ukuthi kube nomthelela. Ukukhululwa okuhlala kuze kufike ukuxhumana okulandelayo akusona isinqumo, kuwumgodi wesikhashana. Bhala phansi umthetho oqondile ukuze ukwazi ukuwususa ngamabomu.
Uma idivayisi yenzelwe umhubhe kuphela, ikhompyutha yohambo noma umshini ogcina idatha yeklayenti, impendulo efanele ukuqhubeka nokuvimba nokuphrinta kwenye indawo: gcina njenge-PDF bese uprinta kusuka kufoni noma komunye umshini, noma ufinyelele iseva yokuphrinta umhubhe ongayihambisa kuyo. Ukuvala i-kill switch ngomsebenzi owodwa kushintshanisa isivikelo sangempela ngokunethezeka okuncane.