Ubani ongumnikazi wekheli, umzila, i-DNS kanye ne-firewall ku-VPN ye-Linux?

Ama-skripthi amabili alwela umzila owodwa yisimo esivamile senkinga ye-VPN ye-Linux ebhaliswa njengephutha lokuhamba. Ingxenye eyodwa idala idivaysi yethuneli, enye ingeza umzila ozenzakalelayo, eyesithathu ibhala kabusha ukulungiselelwa kwesixazululi, futhi eyesine ilayisha kabusha imithetho ye-firewall. Noma yimuphi wabo angakwazi ukuhoxisa umsebenzi womunye, futhi owinile umane ube ngowokugcina ukugijima. Umbuzo ofanele ukuphendulwa awuwona wokuthi iyiphi iphakethe okufanele ifakwe, kodwa ukuthi iyiphi ingxenye enegunya phezu kwengxenye ngayinye yesimo.

Bhala le mephu kanye, futhi ukwehluleka kokuxhuma kabusha okuningi kuyeka ukuba yimfihlakalo. Izinto ezine zibalulekile: idivaysi namakheli ayo, imizila nemithetho yenqubomgomo, ukulungiselelwa kwe-DNS kanye ne-firewall.

Idivaysi namakheli ayo

Idivaysi yethuneli idalwa noma ngumphathi owazi iphrofayela noma nge-daemon eyaqalwa othile ngesandla. Womabili amalungiselelo asebenza eyedwa; ukuwaxuba akusebenzi. Uma i-NetworkManager ingumnikazi wephrofayela, iyeke ibe ngumnikazi wedivaysi futhi, futhi ungayiqali i-OpenVPN engaphethwe ngokumelene negama elifanayo lethuneli.

Bhala ukuthi ubani osusa idivaysi lapho isikhathi seseshini siphela. Idivaysi ephila isikhathi eside kuneseshini yayo iwumthombo ovame kakhulu wamakheli amadala nokudideka okulandela.

Imizila nemithetho yenqubomgomo

Kuyimizila lapho izingxabano zobunikazi zenza umonakalo obonakalayo. Umphathi woxhumano ufaka umzila ozenzakalelayo wethuneli kanye nomzila othile kakhulu woxhumano olukude; bese kuba iskripthi esibhalwe ngesandla singleze owakho ozenzakalelayo ngomlinganiso ohlukile futhi uwine noma uhlulwe buthule kuye ngesikhathi. Nquma ukuthi yimiphi imibhalo ehlobene nokuxhumana, imiphi eyenqubomgomo ehlala njalo, futhi iyiphi ingxenye ewuvuselelayo ngemva kokuxhuma kabusha. Bese ugcina ezinye izingxenye zingaphandle kwalelo thebula.

Imithetho yenqubomgomo nayo ifanele ukucaca okufanayo, ngoba umthetho okhomba etafuleni okungekho muntu olugcwalisa wakha umgodi omnyama obukeka ngqo njengethuneli elifile. Uma umthetho ukhona ukuze uphoqe ithrafikhi iye endaweni ethile, itafula elilisebenzisayo kufanele linakekelwe ngumnikazi ofanayo.

I-DNS ihlala ingumnikazi ohlukile

I-daemon yesixazululi igijima njengenqubo yayo ngaphansi kobunikazi bayo, ngakho ayizuzi ifa lezinqumo zokuhamba zethuneli ngengozi. Lapho i-VPN icindezela amaseva e-DNS, okuthile kufanele kuhumushe lokho kube ukulungiselelwa kwesixhumanisi ngasinye okuhlonipha isixazululi, futhi okuthile kufanele kukususe ngemva kwalokho.

Inganekwane lapha ukuthi ukubhala i-name server kuphrofayela kushintsha lapho imibuzo iya khona. Kushintsha okutshelwa isixazululi, hhayi ukuthi isixazululi sisebenzisa isokhethi iphi phezulu. Hlola ngombuzo kanye nokusesha komzila esikhundleni sokuthemba ifayela.

Isimo se-firewall, nokuthi ubani osibuyisela

Imithetho ye-firewall iyinto ebhalwa phezu kwayo kaningi kakhulu kusihambi se-VPN. Umphathi angangeza imithetho ye-NAT noma yokudlulisa kuxhumano ngalunye, kuyilapho isevisi ye-firewall ngesikhathi sokuqalisa ilayisha kabusha isethi yemithetho egciniwe futhi iyisuse. Khetha igunya elilodwa lenqubomgomo futhi wenze elinye libe ngumsebenzisi walo, noma wamukele ukuthi ukuqalisa kabusha kushintsha ukuziphatha buthule. Okuhlukile okuhlobene nokuxhumana kufanele kube kufayela elilayishwa ngumnikazi ofanayo, hhayi kumyalo we-iptables othayiphiwe ngesikhathi sokuxazulula izinkinga.

Uma imithetho kufanele yeqe ukuxhuma kabusha, shono lokho ngokucacile. Uma kungenjalo, shono nalokho, ngoba unjiniyela olandelayo uzocabanga impendulo elula kakhulu.

Umjikelezo wempilo: ukuqalisa, ukuxhuma kabusha, ukuhlakaza

Nikeza umnikazi esikhathini ngasinye salezi zikhathi ezintathu. Ekuqaliseni, nquma ukuthi yini elungiselela izimo ezingaphambili nangaluphi uhlelo. Ekuqaliseni kabusha okuthambile, khumbula ukuthi idivaysi ingase iphile kuyilapho isimo seseshini singaphili, ngakho kufanele kugijime umqinisekisi hhayi umdali. Ekuhlakazeni, susa kuphela lokho okwakhiwe yilokhu kuxhumana, ngoba ukusetha kabusha yonke imizila noma ukukhipha yonke i-firewall akufani nokuhoxisa ithuneli elilodwa emsebenzini.

Ukuze kubhekwe, i-ip monitor link address route ikhombisa izinguquko ze-kernel njengoba zenzeka, kodwa ibika izehlakalo hhayi inhloso: umzila osusiwe awusho lutho mayelana nokuthi iyiphi inqubo eyuwususa. Hlanganisa nemephu yobunikazi, futhi ukuvalwa okudidayo kuzoba uhlu olufushane lwabangeneleli.

Okuhlukile nakho kunenani. Ukumaka lonke ikilasi ledivaysi njengelingaphethwe ukuze ubalekele ingxabano kunikeza leso simo kungekho muntu, futhi lokho kuyisinqumo hhayi ukulungiswa.