Amakheli omhubhe angashintshi ku-pfSense: ukukhetha noma ukubhuka?
Ukushintshwa kwekliyenti kunikeza ikheli elikhethwayo, hhayi elibhukiwe. Qhathanisa neseva evaliwe engaguquki kuphela nasekufanele kwenzeke ngaphambi kokuthi imithetho iyiethembe.
Imiklamo emibili ibukeka ifana ephepheni futhi iziphatha ngendlela ehluke kakhulu lapho umthetho uncike kuyo. Enye ifaka ikheli kukushintshwa kwekliyenti futhi ithemba ikheli njengobunikazi. Enye ivale ngokuphelele ukwamukelwa okuguqukayo, ngakho indawo yokugcina iyaba nesabelo esiyingqayizivele noma ayixhumi. Eyesibili kuphela eyenza ikheli libe yifakelo lenqubomgomo ongayivikela, futhi umehluko ufanele uqondwe ngaphambi kokubhala ngisho umthetho owodwa we-firewall.
Ikheli lokushintsha lithembisa ini ngempela
Ukushintshwa okuqondene nekliyenti kuthwala izinketho zekliyenti ngayinye, kuhlanganise nekheli lomhubhe elikhethwayo. I-Netgate ichaza lelo kheli njengokukhetha hhayi ukubhuka, okusho ukuthi iqoqo eliguqukayo aliyeki ikheli kumuntu omunye.
Lokho kuvame ukulunga. Ukungqubuzana kuyivelakancane, futhi ikliyenti livame ukuthola lokho elikucelile, okwanele ukunethezeka futhi akwanele ukugunyazwa. Ukunethezeka nokugunyazwa kuyizimfuno ezihlukene, futhi kuyodwa kuphela okuphuma kuqhubeka kungqubuzana.
Ngetopology yesubnet, inkambu ithatha ikheli lekliyenti kanye nemaski yenethiwekhi yeseva, ngakho ikheli elingaphakathi komhubhe 10.90.0.0/24 libhalwa njenge-10.90.0.10/24.
Akukho kulokho okubhuka inombolo. Ikliyenti okungahambisani nokushintshwa kwalo, noma isikhathi esiphindwe kabili, singagcina kwenye indawo eqoqweni, futhi umthetho osekelwe ekhelini ube usuchaza umuntu ongekho lapho.
Vala indlela eguqukayo nge-default enomkhawulo
Enye indlela iseva engaguquki kuphela: indawo ngayinye yokugcina eyamukelwe inobunikazi bayo nekheli layo eliyingqayizivele, futhi akukho okunye okungena.
Ukuyisebenzisa kusho ukushintshwa kwe-DEFAULT okukhawulelwe kuleso seva esisodwa ngokuvinjwa kokuxhumana okuvuliwe. Ikliyenti elingenakho ukushintshwa okuhambisanayo alikwazi ukubuyela ekwamukelweni okuvamile okuguqukayo. Yilowo mugqa owodwa owenza ukukhetha kube yiqoqo elivaliwe.
Ububanzi bubalulekile. Ukushintshwa okuzenzakalelayo okusetshenziswa kuyo yonke i-VPN instance kudivayisi kuzovala imihubhe engahlobene, futhi lokho kwehluleka kubukeka njengesevisi ephukile hhayi isinqumo senqubomgomo. Kuxhumanise neseva eyodwa oshintsha imodeli yayo yokwamukela. Bese ubhala ububanzi kurekhodi yezinguquko, ngoba umuntu olandelayo ngeke akhumbule ukuthi ingeyamuphi umhubhe.
Ngemuva kwalokho hlola lonke iqoqo elivunyelwe. Ukuvinjwa okuzenzakalelayo akulungisi ukushintshwa okunegama okushiywe ngaphandle kwekheli, futhi leyondawo yokugcina izovele yehluleke ukuxhuma ngaphandle kwenkomba ecacile yokuthi kungani.
Hambisana nobunikazi iseva esisebenzisa ngempela
Ukushintshwa kuhambisana nokuthile. Kuseva ehlanganisa amagama ajwayelekile ezitifiketi, igama lokushintshwa kufanele kube yilelo gama elijwayelekile, hhayi igama lokubonisa lomuntu. Likopishe kusitifiketi hhayi kuhlu lwama-akhawunti.
Iseva elungiselelwe ukusebenzisa igama lomsebenzisi njengegama elijwayelekile ihlanganisa ngokhiye ohluke ngokuphelele, futhi ukushintshwa okuqanjwe ngesitifiketi ngeke kusebenze neze. Funda isilungiselelo esikhundleni sokusiqagela kulokho okuboniswa uhlu lwama-akhawunti.
Gcina izici ezengeziwe zokuqinisekisa ezidingwa ukusatshalaliswa. Imodeli yamakheli evaliwe ishintsha ukuthi ubani angaxhuma nokuthi yiliphi ikheli alitholayo; ayithathi indawo yokuhlolwa kwesitifiketi noma yesici sesibili.
Bhala imithetho yokufinyelela uma imephu isilungile
Lapho imephu isuka kubunikazi iya ekhelini ivaliwe, imithetho ingabhekisela kumakheli ngaphandle kokuzenza abantu. Isiteketiso esiqoqa izindawo zokugcina zomuntu oyedwa singafinyelela isevisi ethile kuyilapho esinye isiteketiso sifinyelela okunye. Isiteketiso siba into ebuyekezwayo, futhi ikheli liba imininingwane yokusebenzisa ngaphakathi kwaso.
Gcina izindawo zokuyisa namachweba zicacile. Ukuvumela yonke inethiwekhi yasendaweni kusuka kulo lonke iqoqo lemihubhe yilokho kanye ukuklama obekufanele kukushintshe lokhu kuzilolonga.
Funda imithetho eflotayo, yeqembu neyokuxhumana ngokulandelana kwayo kwangempela kokuhlola, ngoba ukudlula okubanzi kwangaphambilini kubhubhisa okuncane okulandelayo. Ukucisha ukudluliswa kwangaphakathi phakathi kwamakliyenti kugcina ithrafikhi yontanga emngceleni lapho leyo mithetho ihlolwa khona. Umthetho okhona ephepheni kuphela awuwona ukuphoqelelwa.
Hlola izimo ezingezinhle
Zama ukuxhumana okune okusha: indawo yokugcina enegama, eyodwa engenakho ukushintshwa nhlobo, isevisi okufanele ifinyeleleke kanye naleyo okungafanele. Indawo yokugcina engabalwe yiyo isimo esibalulekile, ngoba iyona imiklamo ekhona ukuze iyimise. Uma ixhuma, ukuvinjwa okuzenzakalelayo akwenzi umsebenzi waso.
Hlola i-IPv6 ngokwahlukile, ngoba inqubomgomo yamakheli e-IPv4 ayisho lutho ngesitaki sesibili. Bese uqinisekisa ukuthi uhlelo lokusebenza lusagunyaza umsebenzisi, ngoba ikheli lomhubhe liyiqiniso lenethiwekhi hhayi ubufakazi bokuthi ubani usekhibhodini. Zombili izivivinyo ziyingxenye yenothi lokwamukela.
Ekugcineni, hlela ukufuduka. Ukushintshwa okusha nemithetho emincane akushintshi izikhathi ezisungulwe kakade ngemuva, ngakho izimo ezikhona kufanele ziphele noma zisulwe ngamabomu.