I-Snort emaphethelweni e-VPN: lapho amaphakethe abonakala khona

Landela isicelo esisodwa esivela kukhompyutha ephathwayo ekude futhi siwela imikhawulo eminingana ngaphambi kokuba noma yini ikwazi ukusicwaninga. Umhubhe wangaphandle uphela kunqubo ye-VPN, iphakethe langaphakathi livela kusixhumi esibonakalayo, futhi iseshini ye-HTTPS yangaphakathi iqhubeka kuze kufike kuhlelo lokusebenza. Ithuluzi lokuhlola libona kuphela okubonakala endaweni lapho amaphakethe efika khona. Faka elilodwa ngaphandle kokunquma leyondawo, futhi amarekhodi azochaza isendlalelo esingalungile.

Iphakethe elilodwa liwela imikhawulo eminingana

Ngaphambi kokuqedwa kwe-VPN umbonisi ubona ukuxhumana okukodwa kwangaphandle, ngokuvamile okubheke embobeni ye-VPN, namakheli nosayizi kodwa ngaphandle kwesakhiwo sangaphakathi. Ngemva kokuqedwa, amakheli, izimbobo nemithetho yangaphakathi iyatholakala endaweni yokucubungula eletha yona. I-TLS yohlelo lokusebenza iqhubeka ishicilelwe ngaphandle uma umklamo ohlukile uyiqeda. Lawa ngamazinga amathathu okubonakala, futhi igama lephakethe alikutsheli ukuthi yiliphi olithengile.

Dweba indlela enemikhawulo emakiwe, bese ubeka inzwa kulayini lapho umbuzo ungaphendulwa khona, ngoba indawo iyingxenye yempendulo. Umkhawulo ongakwazi ukuwusho umkhawulo ongakwazi ukuwuhlola.

Bona okufundekayo endaweni ngayinye

Hlola isixhumi esibonakalayo kanye nokuthwebula okufushane ngaphambi kokuthemba noma yisiphi isincazelo sesakhiwo.

ip -br link
tcpdump -ni tun0 -c 10 'tcp port 443'

Uhlu lwezixhumanisi lubonisa imihubhe nezixhumi zomzimba ezikhona, futhi ukuthwebula kubonisa ngqo lokho inzwa exhunywe lapho ebingakuthola. Uma kubonisa amakheli angaphakathi kodwa kungabonisi imigqa yezicelo ze-HTTP, usemva kokuqedwa kwe-VPN futhi usangaphandle kwe-TLS yohlelo lokusebenza. Leyo yindawo evamile yokutholwa kwenethiwekhi kanye nendawo engalungile yokuhlola okuqukethwe. Phinda ukuthwebula kusixhumi sangaphandle ukuze uqhathanise lokho umkhawulo omunye okudalulayo.

Ukutholwa okungasebenzi akukwazi ukuvimba ngokwako

Imibhalo yokuhlola ye-Snort ihlukanisa ukubuka okungasebenzi nokusebenza emgqeni. Imodi engasebenzi ingaxwayisa ngethrafikhi ngaphandle kokuyimisa kuleyo ndlela.

snort -T -c /etc/snort/snort.lua

Imodi yokuhlola iqinisekisa ukulungiselelwa ngaphandle kokusebenzisa inzwa, okuyisinyathelo sokuqala esifanele ngaphambi kwanoma yikuphi ukusetshenziswa. Ukusebenza emgqeni kudinga ukuhlelwa kokuthathwa kwamaphakethe okuhambisanayo kanye nokulungiselelwa kokuphoqelela okufanayo, hhayi nje ifulegi elengeziwe. Ngakho-ke umbhalo werekhodi awubona ubufakazi bokuthi isicelo savinjelwa, futhi inqubo eqalwe ngokukhetha okubonakala kungokwemgqeni ayibonisi ukuthi ukugeleza kwangempela okudlulisiwe kudlula kuyo. Qinisekisa lapho ukusetshenziswa kunikeza khona amaphakethe ngempela.

Khetha imodi yokuphoqelela ngaphambi kokusebenzisa

Nquma ukuthi imfuneko ingukubonakala noma ukuvimbela, ngoba zombili zinezenzo ezihlukene zokwehluleka. Inzwa engasebenzi efa ishiya ithrafikhi ihamba futhi idale igebe lokuqapha; idivayisi yasemgqeni efa ingavumela ithrafikhi ukuba idlule noma iyimise, futhi lokho kukhetha kufanele kube ngamabomu. Vumelanani ngokugeleza okukodwa okuvunyelwe, ukugeleza okukodwa okufanele kunqatshwe, kanye nokuziphatha okufunayo lapho inzwa ihluleka. Gcina ukubuyiselwa kokuphatha kuhlukile endleleni ehloliwe, ukuze iphutha enzweni lingasusi nokufinyelela kwakho.

Bese urekhoda ithrafikhi ebonakalayo, indawo yokucubungula kanye nokuziphatha kokuphoqelela. Lawa maqiniso amathathu, hhayi iphakethe elifakiwe, achaza okwenziwa ukusetshenziswa ngempela.