I-OpenVPN iqalile kodwa ayiphrinti lutho: hlola i-log-append kuqala

Uqala i-OpenVPN kusuka ku-shell ngefayela lokucushwa, futhi itheminali ihleli lapho ingenakho noma yikuphi okuphumayo. Akukho banner, akukho phutha, akukho phrompthi. Ingqondo ithi ukuqala kuhlulekile, ngakho uqala elinye ikhophi, bese elinye, futhi umshini ugcina unamakhophi ambalwa acushwe ngokwengxenye. Ngaphambi kwakho konke lokho, hlola iphrofayela ukuthi akukho yini umyalo osewuhambise i-log kwenye indawo. Ukuthula kuyisici sekhonsoli, hhayi sencikezo.

Ukuthula kunezincazelo ezimbili ezihluke kakhulu

Eyaqala ukuthi inqubo isebenza kahle futhi ibhala efayeleni ongalibheki. Eyesibili ukuthi yaphuma ngokushesha nephutha elilotshwe kulo lifayela elifanayo.

Womabili ashia itheminali elingenalutho, futhi umbuzo owodwa uyawahlukanisa: ngabe ikhona inqubo manje, futhi yini esefayeleni eyayitshelwe ukuba ibhale kulo. Phendula lokho ngaphambi kokuphinda uthinte ukucushwa. Ukuqala kabusha ukuze uthole okukhishwayo yikho okwenza amakhophi amabili aqale ukulwa ngedivayisi eyodwa ye-tunnel kanye ne-port efanayo, okukhiqiza amaphutha angahlangene nanoma yini nenkinga yakuqala.

Thola umyalo, bese uthola inqubo.

ps -o pid,args= -C openvpn
grep -nE '^\s*(log|log-append|cd|daemon|verb)\b' /etc/openvpn/server/server.conf

Thola indawo ekuyiwa kuyo esetshenziswa inqubo esebenzayo

Funda iphrofayela inqubo eyaqalwa nayo ngempela, hhayi leyo oyihlophile. Ikhophi ephethwe yisevisi ngokuvamile ilayisha indlela ehlukile futhi isebenza kudayirekhithori ehlukile yomsebenzi, ngakho igama lefayela elihlobene lixazululwa endaweni obungalilindele.

Umyalo cd ocacile wenza lowo mehluko ube mkhulu nakakhulu, ngoba indlela ehlobene ihamba nokushintsha kwedayirekhithori. Uma wathola lokhu kucushwa njengefa, ifayela lingase libe endaweni manje ongenakho umuntu ongayifuna.

Qhathanisa isikhathi sokushintshwa kwefayela nomzuzu owuqalile. I-log yeviki eledlule iwubufakazi mayelana neviki eledlule. Bese ufunda imigqa yokugcina yefayela elishintshile, futhi uthatha noma yini elapho njengomlayezo wokuqala owawulahlekelwe yiwo.

log uma kuqhathaniswa ne-log-append: ubufakazi nokususwa

log-append yengeza kulokho osekuvele kusefayeleni. log ivula ifayela ukuze ibhale futhi ilinciphise, ngakho ukushintsha phakathi kwazo kungase kususe ukusebenza obewuzokufunda.

Uma othile washintsha umyalo ngesikhathi elungisa amaphutha, ubufakazi bangaphambili sebufile futhi usayizi wefayela uzobonakala umncane ngendlela esolisayo. Kufanele ukwazi lokho ngaphambi kokughathanisa ukusebenza okubili bese uphetha ngokuthi kukhona okushintshile. Susa i-log ngenhloso noma uyigcine, kodwa yazi ukuthi wenze okukuphi. Ubufakazi obususile ngenhloso kulula ukucabanga ngabo kunobufakazi obulahlekelwe ngengozi.

Akukho kwezinketho okwakha amadayirekhithori angamazisi angekho, futhi akukho okunikeza ukufinyelela ngemvume yesistimu yamafayela noma ngesandbox yesevisi. Indlela ebonakala ilungile ekucushweni isengase ingabhaleleki yikhasi okusebenza kulo i-daemon, futhi lapho i-daemon ingase ihluleke ngaphambi kokubika noma yini. Hlola ukuthi idayirekhithori likhona yini nokuthi ungubani umnikazi walo ngaphambi kokucabanga ukuthi igama lefayela iyinkinga.

Lapho isisonga sesevisi sibamba okukhishwayo

Ngaphansi kwe-systemd, okukhishwayo okujwayelekile namaphutha kungena ku-journal ngaphandle uma umyalo wefayela ocacile unokubaluleka okuphezulu, futhi isisonga somphakeli singakubamba kwenye indawo ngokuphelele.

Yingakho iphrofayela efanayo iziphatha ngendlela ehlukile isuka ku-shell futhi isuka ku-unit. Imvelo ye-unit, idayirekhithori yayo yomsebenzi kanye nemifudlana yayo ejwayelekile konke kwehlukile ku-shell yakho esebenzisanayo. Indlela ehlobene ingaxazululeka esimweni esisodwa futhi ingafinyeleli ndawo kwesinye. Lapho lezi ezimbili zingavumelani, funda incazelo ye-unit, hhayi iphrofayela.

Qhathanisa izinhlelo ezimbili zokuqala esikhundleni sokuphetha ngokuthi enye yazo yephukile. Funda umugqa womyalo we-unit kanye nemvelo yayo, bese ufunda i-journal yesikhathi esifanayo. Uma isisonga sihambisa okukhishwayo efayeleni laso, lelo fayela manje yi-log yakho, futhi imiyalo ye-OpenVPN ayisasebenzi mayelana nokuthi imiyalezo iyephi.

Khulisa izinga lemininingwane kuphela uma usukwazi ukuyifunda

Ukukhulisa izinga lemininingwane ngaphambi kokuthola indawo ekuyiwa kuyo kukhiqiza umbhalo owengeziwe endaweni ongayibheki.

Uma usukwazi ukuthi okukhishwayo kwehlela kuphi, izinga eliphakathi nendawo likhombisa iphrofayela ihlaziywa futhi ukuxhumana kuzanywa. Ezimbili noma ezintathu zanele enkingeni yokuqala. Amazinga aphezulu afaneleka lapho ukwehluleka kuwumininingwane wokuxoxisana, futhi futhi enza ifayela likhule ngokushesha.

Bese ufunda iphutha langempela. Itheminali ethulile ayifakazeli lutho mayelana nokuthi i-tunnel yenyuka yini, futhi ukwehluleka okulotshwe efayeleni yikho okufanele kulungiswe.