I-Ubuntu ayinayo i-inthanethi ngemva kokususa uhlelo lwe-VPN

Ukususa iklayenti le-VPN, ukuqalisa kabusha bese uthola ukuthi isiphequluli asikwazi ukulayisha lutho kuwukulandelana okuvamile ku-Ubuntu. Umhubhe awusekho, kodwa inqubomgomo eyayiqondisa ithrafikhi kuwo isekhona, futhi ku-Ubuntu lezi zinsalela zivame ukuhlala ku-NetworkManager hhayi kuphakethe. Iphrofayili yoxhumano nesixhumi esibonakalayo esingamanga esidalwe ngesikhathi sokusebenza akusikho esephakethe, ngakho ukususa iphakethe akuzisusi.

Umhubhe awusekho, inqubomgomo isekhona

Isicishi sokubulala sisebenza ngokwenza inethiwekhi ingasebenziseki ngaphandle komhubhe. Uma iklayenti lisuswa ngesikhathi leso simo sisebenza, akukho okusele kokusicisha. Umphumela ubonakala ufana ngqo ne-adaptha yenethiwekhi ephukile futhi ngokuvamile iyiphrofayili ebambe umzila.

Yingakho ukufaka kabusha kwesinye isikhathi kubuyisela uxhumano: kwakha kabusha inqubo eyazi ukuhoxisa inqubomgomo yayo. Iklayenti elisuswe ngesikhathi isicishi saso sisebenza lashiya isimo okungekho muntu osele ukusihlanza.

Funda izinto iphakethe elingakaze libe nazo

Funda isimo ngaphambi kokusishintsha. Bhala amadivayisi, ukuxhumana okusebenzayo kanye namathebula womibili omzila, bese ufuna idivayisi yamanga ezibika ukuthi ixhunyiwe noma umzila ozenzakalelayo okhomba kuyo. I-IPv4 ne-IPv6 yehluleka ngokwehlukana, ngakho i-ping esebenzayo ekhelini elinokuxazululwa kwamagama okuphukile ikhomba entweni ehlukile kunomzila ofile. Idivayisi yamanga ebambe umzila ozenzakalelayo ichaza konke ukunqamuka iyodwa.

nmcli device status
nmcli connection show --active
ip -4 route
ip -6 route

Bhala lokho okutholayo, ngoba ukulungisa ukususa into eyodwa ethile hhayi ukusetha kabusha konke. Noma yini ebanzi kunalokho ibeka engcupheni ukunqamuka kwesibili. Lowo umehluko phakathi kokulungisa nokuqagela.

Ithebula lomzila elingenalutho elinedivayisi exhunyiwe kungenye iphutha, futhi likhomba ku-DHCP hhayi kuphrofayili esele. Funda isivumelwano sokuqasha ngaphambi kokuhlela noma yini.

Susa iphrofayili, hhayi ifayela lokhiye

Susa iphrofayili nge-NetworkManager esikhundleni sokususa ifayela lokhiye. Ukususa ifayela kushiya iphrofayili isememorini isebenza kuze kube ukuqalisa kabusha okulandelayo, okwenza ukulungisa okulungile kubonakale kungathembekile. Bese uqalisa kabusha insizakalo futhi ufunde uhlu lwamadivayisi futhi. Ukuqalisa kabusha yikho okwenza ukususa kube kwangempela.

sudo nmcli connection delete pvpn-killswitch
sudo systemctl restart NetworkManager

Uma isixhumanisi samanga sisekhona, susa naso leso sixhumanisi, bese uhlola ikheli negama ngokwehlukana. Umzila ohlanzekile onegama elihlulekile ukhomba ku-DNS, kuyilapho ikheli elihlulekile likhomba emzileni noma ku-firewall.

Hlola ihuku lesikhathi sokuqalisa ngaphambi kokuba liphinde

Ezinye izinsalela ziyazifaka kabusha njalo lapho kuqalwa. Iyunithi ebhalwe ngesandla noma iskripthi se-if-up esengeza imithetho ye-firewall siyaqhubeka nokwenza lokho ngemva kokuba iphakethe lihambile, ngakho ukunqamuka kuyabuya futhi ukulungisa kwangaphambilini kubonakala kuyinhlanhla. Sesha kumafayela eyunithi nakumahuku enethiwekhi ngaphambi kokuqalisa kabusha futhi. Igama leyunithi ngokuvamile liyisikhombisi.

systemctl list-unit-files | grep -i vpn
grep -rl -i vpn /etc/systemd/system /etc/network/if-up.d

Susa noma fihla ifayela elithile, bese uqalisa kabusha kanye futhi uqinisekise ukuthi isimo esingenawo umhubhe yisona osifunayo. Lokho kuqalisa kabusha kokugcina kuwukuhlolwa, ngoba ukulungisa okuhlala kuze kube ukuqalisa okulandelayo akusikho ukulungisa. Ngemva kwalokho gcina inothi kanye nomshini. Isithenjwa se-nmcli sihlanganisa imiyalo yedivayisi noxhumano esetshenziswe ngenhla.