Khulela isilaleli se-VPN kuma-interface obekade uwakho
Isilaleli se-wildcard nomthetho we-firewall kuyizinto zokulawula ezihlukene. Funda amasokhethi angempela nge-ss, bese uhlola umndeni wamakheli kanye ne-firewall.
Insiza ye-VPN iyafinyeleleka kusukela noma kuphi lapho isokhethi yayo iboshelwe khona futhi i-firewall yayo ivuma. Lezi yizinqumo ezimbili ezihlukene, futhi abantu bavamise ukuthatha esisodwa sazo. Ukufunda isilaleli sangempela kuthatha imizuzwana eyishumi futhi kuxazulula umbuzo okungakwazi ukuqagela ukuwuxazulula. Qala lapho, bese ushintsha into eyodwa yokulawula ngesikhathi.
Konke okungezansi kucabanga ukuthi ungagijima imiyalo kusibungu nge-root noma nge-sudo.
Funda amasokhethi ngaphambi kokushintsha noma yini
Ku-Linux, i-ss -lunp ibala izilaleli ze-UDP nekheli lazo lendawo, imbobo kanye nenqubo, futhi i-ss -ltnp yenza okufanayo ku-TCP. Thola imbobo ye-VPN bese ufunda ikholamu yekheli ngokucophelela. 0.0.0.0:51820 ne-[::]:51820 kusho yonke i-interface, kuyilapho i-10.0.0.5:51820 isho ikheli elilodwa ku-interface eyodwa. Incwadi ye-ss ibhala amakholamu uma okukhiphayo kungajwayelekile. Uma igama lenqubo lingekho, gijima umyalo ofanayo nge-sudo, ngoba ikholamu yomnikazi idinga ilungelo.
Bhala phansi ikheli. Yiqiniso lokho okuncike kulo yonke enye ingxenye yalo mhlahlandlela.
Bopha ekhelini, hhayi esifisweni
I-OpenVPN ibopha isilaleli ekhelini elithile ngesiqondiso sayo i-local, futhi leyo iyindlela esekelwayo yokulikhawulela ezingeni lenqubo. Akukho konke ukuqaliswa okunikeza okulinganayo, futhi iphrothokholi engenalo ukukhetha kokubopha ayikwazi ukuncishiswa ngale ndlela. Uma eyakho ingenakho, i-firewall iyona kuphela indlela yokulawula, futhi amanothi okuthunyelwa kufanele asho lokho ngokucacile. Kusibungu esinamakheli amaningi, bopha kwelibheke emhubheni; ukubopha ekhelini elintantayo ngokuvamile kuyiphutha.
Insiza okufanele ikwazi ukubekezelela ukushintsha kwekheli idinga uhlelo lokubopha okuphelelwe yisikhathi, hhayi umugqa wokucwangcisa kuphela.
Hlola umndeni wamakheli ngokwehlukile
I-IPv4 ne-IPv6 amasokhethi ahlukene. Inqubo eboshelwe ku-0.0.0.0 isengamukela i-IPv6 ngokusebenzisa isokhethi elinezitezi ezimbili, noma ingamukeli, kuye ngokukhethwa kwesokhethi nokuvamile kwepulatifomu. Ukufunda umugqa we-IPv4 kuphela kukhohlise ukubuyekezwa kokuthunyelwa okungaphezu kokukodwa. Bhala yomibili imindeni ngaphambi kokuphetha ngokuthi isilaleli sincane.
Uma i-IPv6 ingeyona ingxenye yomklamo, ukuyikhubaza ezingeni lesokhethi kuhlanzekile kunokuthemba ukuthi i-firewall izoyimboza. Kuyisinqumo senqubomgomo, ngakho yirekhode kanye nezinye izinqumo ze-interface.
Faka ungqimba lwe-firewall phezu kokubopha
Ukubopha okuncane akuthathi indawo yomthetho we-firewall, futhi umthetho we-firewall awunciphisi ukubopha kwe-wildcard. Sebenzisa kokubili: bopha lapho ukuqaliswa kusekela khona, bese uvumela imbobo kuphela emithonjeni okufanele ifinyelele kuyo. Amaqembu okuphepha asefu ekhompyutheni amile phambi kwe-firewall yesibungu, ngakho hlola kokubili lapho indlela yeqa umngcele we-VPC. Umthetho osebenzayo ukuhlangana kwalokhu kokubili, futhi ungqimba ngalunye lungakwazi kuphela ukususa ukufinyeleleka.
Hlola kumthombo ovunyelwe nangomthombo okhishwe ngamabomu. Ukuxhumana okuvela ku-localhost akufakazi lutho mayelana nomngcele womphakathi.
Rekhoda lokho okukhethile
Bhala ikheli eliboshiwe, i-interface elinayo, umthetho we-firewall kanye nenjongo yawo. I-NIC eshintshiwe noma ikheli lefu elabelwe kabusha kungashintsha ukuchayeka ngaphandle kokuthi kube nomuntu ohlela iphrofayela. Faka usuku kunothi, ngoba amakheli asefu ahamba phakathi kokubuyekezwa kaningi kunalokho abantu abakulindele.
Lelo nothi yilona elenza ukubuyekezwa okulandelayo kube ukuqhathanisa esikhundleni sephrojekthi yemivubukulo.