Kungani umthetho wephothi lomthombo wephula enye yezindlela zakho ze-SSH

Izindawo zokungena ezimbili zokuphatha kusibungu esisodwa, iphothi lesevisi elilodwa, kanye nomthetho wenqubomgomo obekufanele usize zombili. Umthetho ufanisa nephothi lomthombo 22, uthumela ukusesha ethebuleni elazi kuphela okungokwe-WAN, futhi indawo yokungena ye-VPN iyeka ukuphendula ukungena okusha ngenkathi indawo yokungena eqondile iqhubeka isebenza. Akukho lutho kulezi okungaqondakali uma isikhethi sifundwa kahle. Iphothi lomthombo likhomba isevisi, hhayi indlela uxhumano olwafika ngayo.

Izindawo zokungena ezimbili, iphothi lesevisi elilodwa

Isibungu sinakho ikheli ohlangothini lwe-LAN kanye nekheli le-VPN, futhi i-sshd ilalela kuzo zombili. Ngakho-ke iseshini eqondile nesehini yomhubhe zabelana ngephothi lesevisi futhi zihluka kuphela ekutheni iyiphi ikheli lendawo elamukela uxhumano.

Umehluko lowo wanele ukukhetha indlela yempendulo, futhi uyiwona kanye umehluko umthetho osuselwe kuphothi owulahayo. Zombili izeshini zikhiqiza izimpendulo ezinophothi lomthombo elingu-22, ngakho-ke umthetho ofanisa nalelo phothi awukwazi ukuzihlukanisa. Uthumela ukusesha kokubili ethebuleni elilodwa, futhi okunye kwako kuthola impendulo engafanelanga. Isixazululo siwukufanisa isici esihluke ngempela.

Ukunikeza indawo ngayinye yokungena iphothi layo kungasebenza futhi, futhi ukukuthatha njengemfuneko kuwukuzikhethela komklamo, hhayi isici se-SSH.

Funda umthetho, bese uthebula

Umthetho wenqubomgomo uyisikhethi esihleliwe, futhi owokuqala obuyisela impendulo esebenzisekayo uqeda ukusesha. Funda uhlu ngokulandelana futhi uqaphele ukuthi yimuphi umthetho ongawina.

Bese ufunda ithebula umthetho owukhombayo, ngoba umthetho oxazululwa ngempumelelo awuwona umthetho oxazululwa ngendlela ewusizo. Ithebula eliqukethe kuphela umzila wokuzenzakalela lithumela impendulo evela ku-VPN ngaphandle ngesixhumi se-WAN. Umzila oqondile kakhulu ethebuleni elilandelayo awukaze ubhekwe, futhi yingakho ukwengeza ithebula lesibili ngokuvamile akushintshi lutho. Ithebula elikhethiwe yilona okufanele lihlolwe.

ip -4 rule show
ip route show table 100
ip route show table main

Le miphumela emibili ndawonye ichaza umphumela; ngayinye iyodwa imema isiphetho esingalungile.

Hlela umthetho kugeleza okuqondile

Isici esihlukanisa izindawo zokungena ezimbili ikheli lomthombo lendawo. Umthetho ofanisa nalelo kheli uthumela kuphela izeshini zomhubhe ethebuleni eliyimfihlo futhi ushiya izeshini eziqondile ethebuleni eliyinhloko.

Lowo mthetho kufanele uhlanganiswe nethebula eliqukethe umzila oyimfihlo kanye nomzila wokubuya walezo zixhumi ezingaphansi. Hlela kokubili kuthrafikhi yokuphatha esikhundleni sasevisi ngayinye kusibungu. Umthetho obamba wonke umsebenzi ovela kulelo kheli uzophinde uqondise noma yini enye isibungu esiyithumela kusuka lapho. Okuncane kunqoba okuhlakaniphile lapha, ngoba umuntu olandelayo kufanele akufunde.

sudo ip rule add from 10.90.0.1 lookup 100 priority 100
sudo ip route add 10.90.0.0/24 dev wg0 table 100
ip route get 10.90.5.20 from 10.90.0.1

Uma izindawo zokungena zombili zihunyushelwa ekhelini lendawo elilodwa, lowo mehluko uyanyamalala futhi umklamo udinga isimo esazi uxhumano esikhundleni salokho.

Gcina umlaleli, imvume kanye nokukhethwa kwempendulo kuhlukene

Izinto ezintathu ezihlukene kufanele zibe yiqiniso ngaphambi kokuba iseshini isebenze: ikheli likhona, isevisi iyalalela kulo, futhi impendulo ithola indlela yokubuya. Ukushintsha komzila kulungisa okwesithathu kuphela.

Ukucushwa komlaleli yifayela lako kanye nokulayisha kabusha kwako, futhi amakheli amaningi okulalela ajwayelekile. Ukuqinisekisa ubunikazi kuyisinqumo sesithathu futhi, futhi ukuhlukile komzila akunikezi muntu ukufinyelela. Gcina ukuqinisekiswa kokhiye wesibungu, ukuqinisekiswa kwe-akhawunti kanye nemikhawulo yomthombo kuzo zombili izindawo zokungena, futhi umelane nesifiso sokwenza buthaka ezinye izilawuli zomhubhe ukuze indlela eyodwa yokuphatha isebenze.

Gcina umzila wokubuyisela ongancikile emzileni owushintshayo, ngoba iphutha lapha livalelela ngaphandle ukulungiswa uqobo.

Kufakazele ngeseshini entsha, hhayi endala

Ithemini esivele isunguliwe ayifakazeli lutho, ngoba yamukelwa ngaphambi koshintsho. Vula iseshini entsha ngendawo ngayinye yokungena ehlosiwe.

ss -ltnp | grep ':22'
sudo sshd -T | grep -i listenaddress
ssh -v [email protected] true
sudo journalctl -u ssh -n 30

Bese uphinda ukuxhumana kabusha kwe-VPN futhi uzame futhi, ngoba umzila ophila ukuxhumana kabusha awufani nowengezwe ethebuleni elisuswa ukuxhumana kabusha. Qaphela imithombo enqatshiweyo ngokuhlukile kuleyo evunyelwe, ukuze umzamo ovimbile ungacashi ngemuva kweseshini esebenzayo. Gcina ikheli lendawo, umthetho kanye nethebula eduze komphumela. Uma uhlukanisa amaphothi esikhundleni salokho, kubhale njengesinqumo sokusebenza hhayi umkhawulo we-SSH.