I-SSH endleleni yesibili eyimfihlo ngenkathi i-VPN isasebenza

Umshini owodwa ufinyelela omunye nge-VPN, futhi manje othile ufuna i-shell efanayo kunethiwekhi eyimfihlo yomhlinzeki. Indlela ikhona, i-ping iyaphumelela, kodwa i-SSH isenqaba. Isizathu esivamile ukuthi i-daemon ayikaze ilalele ekhelini elisha, ngakho akukho okokuxhuma kukho. Le nkinga yokubopha ikheli ngaphambi kokuba ibe inkinga ye-firewall.

Kungani indlela entsha ingadali isilaleli esisha

I-socket elalelayo idalwa inqubo ebiza amakheli ezowamukela. Indlela itshela amaphakethe kuphela ukuthi ayo kuphi; ayidali isilaleli endaweni ekuyiwa kuyo. Uma i-sshd ilungiswe nge-ListenAddress eyodwa, ukuxhumana namanye amakheli endawo kuyanqatshwa ngisho noma isixhumi sisebenza. Kuyafana nokwengxenye ye-socket ephethe imbobo, yingakho ukuhlola kokuqala kuhlale kuyilokho okulalele ngempela.

Qhathanisa izindlela ezimbili ngekheli lendawo okuyiwa kuyo, hhayi ngegama lesixhumi. Iklayenti lixhuma ekhelini, futhi lelo kheli kufanele liboshwe ngaphambi kokuba noma yimuphi umthetho we-firewall ube nokubaluleka.

Bhala amakheli nezilaleli

Ngaphambi kokuhlela noma yini, rekhoda amakheli kusibungu namasokhethi akhona manje.

ip -br addr
ss -ltnp | grep ':22'

Uhlu lwamakheli lubonisa ukuthi yiliphi ikheli eliyimfihlo langempela nokuthi likusixhumi esiphi, kuyilapho uhlu lwamasokhethi lubonisa ukuthi kukhona okuboshelwe kulo yini. Isilaleli esiku- 0.0.0.0:22 sesivele samukela wonke amakheli, ngakho ukubopha okusha akwengezi lutho. Isilaleli ekhelini elilodwa elithile sichaza ukwenqaba ngokushesha. Uma imbobo ingeyengxenye ye-socket hhayi eyedayimoni, ukulungiswa kwedayimoni akusiyo yonke indaba.

Engeza ukubopha futhi ugcine okudala

I-OpenSSH yamukela amarekhodi amaningi e-ListenAddress, ngakho indlela ye-VPN ingahlala ngesikhathi kungezwa eyimfihlo. Hlola ifayela ngaphambi kokulilayisha kabusha.

sshd -t
systemctl reload sshd

Ukuhlolwa kokulungiswa okuhlulekile kushiya idayimoni esebenzayo ingathintwanga, futhi yilokho kanye okukufunayo ngesikhathi uxhunywe ngendlela oyihlelayo. Gcina irekhodi elikhona, engeza ikheli lendawo elisha, futhi uqinisekise ukuthi insiza ilayishwa kabusha ngaphandle kokunqamula iseshini yamanje. Ekufakweni okwenziwa kusebenze nge-socket, engeza ikheli engxenyeni ye-socket esikhundleni salokho futhi ulayishe kabusha leyo ngxenye. Bese ufunda kabusha uhlu lwezilaleli, ngoba ukubopha okungakaze kuvele kusho ukuthi kuhlelwe ingxenye engeyona.

Qinisekisa iseshini entsha ngaphambi kokuvala endala

Xhuma ekhelini elisha ngesikhathi iseshini yokuqala isavuliwe, usebenzisa okukhiphayo okuningiliziwe ukubona ukuthi yiliphi ikheli nokhiye osetshenzisiwe. Gcina iseshini yokuqala ivuliwe kuze kube ukuhlolwa kuphumelela kabili.

ssh -v [email protected]

Funda imigqa yokulungisa amaphutha yekheli lendawo okuyiwa kuyo nokhiye wosibungu owethuliwe. Qinisekisa isigxivizo somunwe sokhiye wosibungu ngokulinganiswa nenani oseluthemba, esikhundleni sokwamukela ukhiye ongaziwa ngenxa yokuthi inethiwekhi ichazwa njengeyimfihlo. Indawo entsha idinga irekhodi layo le-known_hosts, futhi lokho kulindelekile. Iseshini endala yokuphatha kufanele ivalwe kuphela uma indlela eyimfihlo isisebenza.

I-SSH ivikela ukuthuthwa, kodwa iyodwa ayenzi amanethiwekhi amabili alingane. Nquma ukuthi ukwethembeka kokudlula okuyimfihlo kuyahambisana nedatha ngaphambi kokuncika kukho.