Kungani ukufinyelela kude kwe-Plex kwehluleka ngemuva kwe-VPN nokuthi ungakulungisa kanjani

Ukufinyelela kude kuphenduka kungatholakali ngesikhathi i-VPN ithatha umzila ozenzakalelayo, kuyilapho iseva efanayo iqhubeka nokusakaza ku-LAN ngaphandle kwesikhalo. Akukho lutho kumalogi e-Plex oluchaza lolu shintsho, ngoba i-Plex akuyona ingxenye eyaphuka: ishicilela ikheli okungasafiki kulo umgudu. Umhlinzeki ohlukanisa ikheli elilodwa lomphakathi phakathi kwamakhasimende udlulisela iphothi ekhelini lakho lomhubhe, futhi okuthile emshinini wakho uqobo kusafanele kuhambise leyophothi kusilaleli se-Plex. Zonke izixhumanisi ezintathu kufanele zivumelane ngephothi elilodwa langaphandle ngaphambi kokuba ukuhlolwa kokufinyeleleka kube luhlaza.

Uchungechunge lunezixhumanisi ezintathu, futhi i-Plex ibona kuphela eyokugcina

Umhlinzeki unekheli lomphakathi futhi uhlanganisa elinye lamaphothi akhe nekheli lakho lomhubhe. Umshini wakho uthatha konke okufika kuleyophothi bese ukuhambisa kusilaleli se-Plex, esivame ukuhlala kuphothi le-loopback engu-32400. I-Plex ibese itshelwa inombolo yephothi langaphandle ukuze ukuhlola kwayo kuhambisane nalokho okuvulwa umhlaba wangaphandle.

Nqamula noma iyiphi isixhumanisi esisodwa futhi isikhombimsebenzisi sewebhu sibika ukufinyelela kude njengokungatholakali, ngaphandle kwanoma yimuphi umkhondo wokuthi iyiphi isixhumanisi ehlulekile. Lokho kuthula yikho okwenza abantu baqale kabusha iseva, bafake kabusha uhlelo lokusebenza futhi bashintshe isilungiselelo kaninginingi ngaphandle kokuhambisa inaliti. Izixhumanisi ezintathu zehluleka ngokuzimela: ukudluliswa okuqondiswe ekhelini lomhubhe oluphelelwe yisikhathi, ukuqondiswa kabusha okuhlanganisa kuphela isixhumi esibonakalayo se-Ethernet, kanye nenkambu ye-Plex esagcina u-32400 konke kukhiqiza umbhalo obomvu ofanayo. Sebenza usuka kusilaleli uye ngaphandle esikhundleni sokuqagela, futhi isixhumanisi esingasebenzi ngokuvamile sizibiza ngokwaso phakathi komzuzu.

Isixhumanisi sokuqala: dlulisela iphothi kumhlinzeki we-VPN

Vula ikhasi lokudlulisa amaphothi lomhlinzeki bese wengeza ukuhlela. Iningi lokuqalisa likunika iphothi langaphandle elingahleliwe futhi likuvumela ukuthi ukhethe elangaphakathi, ngakho yamukela ukwabiwa bese ukubhekisa ekhelini lomhubhe iklayenti lakho enalo manje. Bhala leyonomboro, ngoba zonke izinyathelo ezilandelayo ziyiphinda ngokunembile.

Abahlinzeki abashintsha ukuhlela lapho bexhuma kabusha yisizathu esijwayelekile sokuthi lesi silungiselelo sihlale ubusuku bese sifa. Abanye bakuvumela ukuthi ucele iphothi elizinzile, abanye babela elisha njalo lapho kuxhawulwa, ngakho funda ikhasi lokuhlela lamanje ngaphambi kokuthinta enye into.

Isixhumanisi sesibili: qondisa kabusha iphothi nge-anchor ye-pf

Ku-macOS ukuqondiswa kabusha kungaphansi kwe-anchor ye-pf, umthetho owodwa kusixhumi esibonakalayo ngasinye esingathwala iphakethe. Bhala umthetho womhubhe kuqala bese umthetho we-Ethernet ngemuva, kunephothi elifanayo langaphandle kukho kokubili, ngaphandle kwalokho umgudu ofika nge-Wi-Fi ngesikhathi sokushintshwa kokusebenza awuhlali ndawo.

# /etc/pf.anchors/plex.forward
rdr pass on tun0 inet proto tcp from any to any port 41893 -> 127.0.0.1 port 32400
rdr pass on en0 inet proto tcp from any to any port 41893 -> 127.0.0.1 port 32400

Ifayela le-anchor ngokwalo akwenzi lutho; ukucushwa okuyisisekelo kufanele kubhekise kulo futhi kulayishe. Faka lezi zindatshana ezimbili ku- /etc/pf.conf ngaphambi kwanoma yimiphi imithetho ekhona yokuqondisa kabusha, bese uphinda ulayishe futhi ufunde ukuthi ingqondo yomshini yamukele ini ngempela.

rdr-anchor "plex"
load anchor "plex" from "/etc/pf.anchors/plex.forward"

sudo pfctl -vnf /etc/pf.anchors/plex.forward
sudo pfctl -f /etc/pf.conf
sudo pfctl -s nat

Isikhalo sohlelo lokusebenza mayelana nephothi engaziwa sisho ukuthi isibambeli sendawo sasinda ekuhleleni kwakho. Ithebula le-nat elingenalutho lisho ukuthi i-anchor ayizange ilayishwe, futhi njengoba i-pf ingavuliwe ngokuzenzakalelayo ku-macOS yamanje, sudo pfctl -E kuyingxenye yokulungisa hhayi yezengezo ozikhethelayo. Phinda ulayishe i-anchor ngemuva kokugaywa kabusha ngakunye nangemuva kokushintshwa kokuhlela ngakunye. Gcina ifayela le-anchor ngaphansi kokulawulwa kwezinguqulo ukuze ukushintsha kwephothi kumhlinzeki kube ukuhlela komugqa owodwa hhayi ukuthola kabusha.

Isixhumanisi sesithathu: hlanganisa iphothi elifanayo ngaphakathi kwe-Plex

Ku-Plex vula Izilungiselelo, bese Isiphathi, bese Ukufinyelela Kude, futhi uphawule ibhokisi elikuvumela ukuthi ucacise iphothi ngesandla. Faka iphothi langaphandle lomhlinzeki esikhundleni sika-32400, bese uvumela ukuhlolwa kokufinyeleleka ukuthi kugijime. Izakhiwo ezintsha zisusa lesi silawuli kukhasi elidala le-Connect, ngakho bheka ngaphansi kokufinyelela kude uma inkambu ingekho lapho umhlahlandlela uthi ikhona.

Ukuhlola okuvela ku-LAN akufakazi lutho. I-laptop ekwi-Wi-Fi efanayo ifinyelela iseva ngqo, ngakho ukuhlola kuyaphumelela ngisho lapho indlela yomphakathi isifile. Sebenzisa ifoni enedatha yeselula, nanoma iyiphi indawo engaphandle kwenethiwekhi yakho, bese ushayela ikheli lomphakathi nephothi langaphandle ukusuka lapho.

Qinisekisa isixhumanisi ngasinye ngaphambi kokusola i-Plex

Qala kusilaleli bese usebenza uye ngaphandle. Uma i-Plex iboshelwe ekhelini le-LAN kuphela izoziba ukuqondiswa kabusha okuqondiswe ku-loopback, ngakho umyalo wokuqala yiwo oqinisekisa lapho ilalela khona.

sudo lsof -nP -iTCP:32400 -sTCP:LISTEN

Okulandelayo, qinisekisa ukuthi ukuqondiswa kabusha kukhona futhi kuyahambisana nephothi olinike umhlinzeki. Ithebula le-nat kufanele likhombise iphothi elifanayo langaphandle kuzo zombili izixhumi ezibonakalayo.

sudo pfctl -s nat | grep 41893
nc -vz 203.0.113.42 41893

Gijimisa lowo myalo wokugcina usuka ngaphandle kwenethiwekhi, hhayi usuka ku-Mac. Uma ukuxhumana kwe-TCP kuqedwa kusuka kudatha yeselula kuyilapho i-Plex isabonisa ukungatholakali, iphothi liyafinyelela kusilaleli futhi umsolwa osele yinombolo efakwe enkambini ye-Plex. Uma kungenalutho oluphendulayo nhlobo, ukuphuka kungaphezulu: ukuhlelwa komhlinzeki, ikheli lomhubhe, noma i-pf engavuliwe.