Ingabe izimpendulo ze-Linux VPN ziyanyamalala? Hlola i-rp_filter nomzila

Izicelo ziyashiya umshini, umlingani we-VPN uyaphendula, futhi impendulo ayifiki neze ku-socket. Umhubhe uvuliwe, amalogi omlengani akhombisa ukuthi iphakethe liyathunyelwa, futhi akukho lutho kuhlelo lokusebenza oluchaza lokhu buthule. Ku-Linux omunye wabasolwa abavamile ukuhlunga komzila wokubuyela emuva: iphakethe le-IPv4 elingenayo lingase lenqatshwe lapho ukuqinisekiswa komthombo kungahambisani nomzila i-kernel ekulindele kulo mthombo. Ukulandela lokho ngokulandelana kukutshela ukuthi yilesi sizathu noma ingozi. Kukuvikela futhi ekucimeni isilawuli sokuphepha ukuze ulungise umzila ongekho.

Ukuqinisekiswa komthombo kunquma ini

I-kernel ihlola ukuthi ikheli lomthombo lephakethe liyavumelana yini ne-interface ephakethe elingene ngayo, ngokubheka ithebula lomzila ukuthola umzila obuyela kulo mthombo. Uma umzila wokubuyela emuva ukhomba kwenye indawo, iphakethe lingase lilahleke ngaphambi kokuba noma yimuphi umthetho we-firewall noma i-socket yohlelo ulibone. Lokho kuhlola kukhona ukuze kwenze amaphethini athile okukhohlisa abe nzima kakhulu, futhi yingakho izakhiwo ezingalingani nezihamba ngomzila wenqubomgomo zihlangana nakho kuyilapho iklayenti elivamile ngalinye kuleyo nethiwekhi lisebenza kahle. Amaklayenti avamile anokuhamba komzila okulinganayo, futhi yilokho kanye okucatshangelwa ukuhlola.

Igama elibalulekile ukuthi kuyavumelana. Iphakethe lingase libe semthethweni ngokuphelele futhi lingaphumeleli ekuhlolweni, ngoba akusikho ukuba semthethweni okuhlolwayo.

Funda imodi esebenzayo, hhayi inkambu eyodwa

Kunemodi ezintathu: evaliwe, eqinile futhi exegayo. Eqinile ibeka ukulindela komzila okwehlukile kunexegayo, futhi isilungiselelo sisonke sihlangana nesilungiselelo se-interface ngayinye, ngakho ukufunda ifayela elilodwa kungase kuchaze kabi lokho okuyikho ngempela okusebenzayo. Funda kokubili, futhi ukufunde ku-interface ethola impendulo, hhayi ku-interface yomzila ozenzakalelayo.

sysctl net.ipv4.conf.all.rp_filter
sysctl net.ipv4.conf.<iface>.rp_filter
ip route get <source-of-the-reply>

Ukusesha komzila kulelo layini lesithathu yingxenye abantu abayeqayo. Kukutshela ukuthi i-kernel icabanga ini ngomthombo, futhi yilokho kanye okokufaka kokuhlola.

Thola ukungahambisani ngaphambi kokushintsha ukuhlola

Thola ukuthi kungani impendulo ifika kuleyo interface kanye nokuthi umzila wayo wokubuyela emuva kufanele wehluke yini. Umthetho wenqubomgomo othumela izicelo ngomzila owodwa ngenkathi izimpendulo zibuya ngomunye uwumklamo osemthethweni, futhi yiwona kanye umklamo owenqatshwa ukuqinisekiswa okuqinile. Izimpawu ezisetshenziswa ekuhambeni ngomzila wenqubomgomo zingabaluleka nalapha, ngoba zishintsha lokho ukusesha kokubuyela emuva okukubuyisayo.

Uma umzila wokubuyela emuva umane ungekho, ukungeza kwawo kulungisa imbangela esikhundleni sokucima ukuhlola. Umzila ongekho, ukunqatshwa yi-firewall kanye nesikhethi sethrafikhi esingalungile konke kukhiqiza uphawu olufanayo olubonakalayo, futhi kukodwa kuphela okumayelana nokuqinisekiswa komthombo.

Ungacimi ukuhlola komthombo ngokuphelele njengempendulo yokuqala. Lokho kushintshanisa ukuxilongwa okuqondile nokushintsha kokuziphatha okubanzi okuzodingeka ukukhumbule kamuva.

Ukulungisa okukhethiwe ongakuvikela

Uma ukulungisa okuncane kudingeka ngempela, kukhawulele ku-interface okukudingayo, bhala ukuthi kungani, futhi kufake kusilungiselelo esiphethe leyo interface ukuze kuhlale ngemva kokuqalisa kabusha. Bese uphinda uhlole wona kanye umgudu owahluleka, kusukela kumthombo ofanayo kuya endaweni efanayo, esikhundleni se-ping entweni elula.

Faka icala okufanele lisaliwe noma ngabe yini. Uma lelo cala seliphumelela manje, ukulungisa kwenza buthaka okungaphezu komzila owodwa obufuna ukuwulungisa.

Hlukanisa i-IPv4 ne-IPv6

I-sysctl ebukeka ijwayelekile ayiyona inqubomgomo yazo zonke izinhlobo zamakheli. I-IPv6 inokuziphatha kwayo nezilungiselelo zayo, futhi umshini ungaba nokuthi uqinile kwenye inhlobo futhi uxegayo kwenye ngaphandle kokuthi othile akubone kuze kuhluleke indawo ethile. Hlola kokubili uma umthwalo womsebenzi usebenzisa kokubili.

Bhala imodi, i-interface, umphumela wokusesha komzila kanye nesizathu soshintsho endaweni eyodwa. Umuntu olandelayo uzothola isilungiselelo ngaphandle kwencazelo, futhi uzosusa noma akopishe endaweni okungafanele ibe khona.