Iphrofayela yohlelo lwe-UFW ayikho? Ichaza amachweba, hhayi izinsizakalo

I-UFW ithi ayikutholi iphrofayela ehambisana ne-OpenSSH, futhi ukufuna imbangela kuqonda ngqo kuseva ye-SSH. Lelo yisu elingalungile: umyalezo umayelana nencazelo yefayela lomlilo enegama futhi awusho lutho mayelana nokuthi i-sshd ifakiwe, iyasebenza noma ilalele. Iphrofayela yohlelo lwe-UFW iwuhlu lwamachweba namaphrothokholi olunelebuli. Ukufunda incazelo kuthatha umyalo owodwa futhi ngokuvamile kuqeda uphenyo.

Isinyathelo 1: bhala amagama i-UFW ewazi ngempela

Buza ifayela lomlilo ukuthi anamagama api ngaphambi kokucela ukuthi livume elilodwa. Uhlu luvela kumaphrofayela afakwe kulo mshini, ngakho igama elingekho liyiqiniso ngalolu hlelo, hhayi ngesofthiwe obuzama ukuyivikela. Uma igama likhona, iphutha livela ekubhaleni okungalungile noma egameni elidala emlandweni we-shell sakho.

ufw app list
ufw app info OpenSSH

Uhlu lufushane ekufakweni okuzenzakalelayo, futhi amagama awawona amagama amaphakethe. Iphrofayela ebizwa nge-OpenSSH ingase ingabikho kuyilapho iphakethe le-openssh-server lifakiwe, futhi okuphambene nakho kungenzeka. Sebenzisa igama eliqondile eliphrintwa uhlu; igama lephrofayela ye-VPN noma isiqalisi sedeskithophu elinokupela okufanayo akulona iphrofayela yohlelo lwe-UFW. Uma igama olifunayo lingekho, yilokho okutholakele, futhi isinyathelo esilandelayo ukubheka ukuthi yini okufanele ikunikeze.

Isinyathelo 2: funda incazelo, hhayi ilebuli

Iphrofayela iyifayela lesitayela se-INI ngaphansi kwe-/etc/ufw/applications.d, elinegama, isihloko, incazelo kanye nensimu yamachweba. Insimu yamachweba ingabala amachweba amaningi nokuthuthwa, ngakho ilebuli ikutshela okuncane kunencazelo. Incwadi ye-UFW ibhala lezi zinsimu kanye nomsebenzi wokubuyekeza izinhlelo. Funda ifayela esikhundleni sokucabanga ukuthi igama lisho ichweba elilodwa elijwayelekile.

cat /etc/ufw/applications.d/openssh-server
ufw app info OpenSSH

Incazelo equkethe i-22/tcp ichaza ichweba le-TCP 22 futhi akukho okunye. Ayifakazi ukuthi idemon kulo mshini ilalele lapho, futhi ayihlanganisi ichweba lesibili owengeze kamuva. Uma idemon isebenza kwenye indawo, iphrofayela iyimvume engalungile ngisho noma igama layo lihambisana nomkhiqizo. Qhathanisa umlaleli nencazelo ngaphambi kokuvumela noma yimuphi kubo.

ss -ltnp 'sport = :22'

Yima uma incazelo nomlaleli bengavumelani. Ukuvumela iphrofayela esho ichweba okungekho muntu olalele kulo kwakha umthetho obonakala njengenqubekela phambili futhi ongavikeli lutho.

Isinyathelo 3: hlukanisa iphrofayela nensizakalo esebenzayo

Ukuvumela iphrofayela enegama akukufaki, akukuqalisi futhi akukulungisi insizakalo, futhi insizakalo esebenzayo ayidingi iphrofayela epakishiwe ukuze ifinyeleleke. Lezi zinqumo ezihlukene eziphethwe amathuluzi ahlukene: umphathi wamaphakethe, umphathi wezinsizakalo kanye nefayela lomlilo. Ukuzithatha njengento eyodwa yiyo indlela abantu abafaka ngayo iseva abangayifuni ukuze igama elingokomfanekiso livele.

Kuseva ye-VPN ukuhlukanisa kuyaqhubeka ngemuva kokuvunyelwa komlaleli wangaphandle. Imvume yechweba lokuthutha okubethelwe ayivuli ukudluliswa ku-kernel, ayingezi umthetho we-NAT futhi ayiniki abasebenzisi bomhubhe ukufinyelela ku-LAN. Ngayinye yalezi iinqubomgomo ehlukile enokubuyekezwa kwayo. Iphrofayela eqanjwe ngomkhiqizo we-VPN ichaza kuphela amachweba ewabhalayo, futhi ingxenye esele yokulungiselelwa kweseva kusemsebenzini wakho ukuyibhala.

Uma iphrofayela ingekho futhi udinga eyodwa, umthetho wechweba ocacile obuyekeziwe noma iphrofayela yasendaweni ngaphansi kwe-applications.d kokubili kuvumelekile. Ukufaka iphakethe obungayifuni akukona.

Isinyathelo 4: gcina indlela yokubuya ngaphambi kokulayisha kabusha ifayela lomlilo

Ngaphambi kwanoma yiluphi ushintsho lomthetho, qinisekisa ukuthi unendlela yesibili yokungena emshinini: ikhonsoli, ikheli elingaphandle kwebhendi noma ukubuyiselwa okuhleliwe. Bese ufunda isethi yemithetho kanye nenqubomgomo ezenzakalelayo, ngoba ukwenqaba okuzenzakalelayo ngaphandle komthetho we-SSH kuyindlela yakudala yokuzivalela ngaphandle ngesikhathi sokuhlola. Shintsha umthetho owodwa ngesikhathi futhi ufunda isiqinisekiso esiphrintwa yi-UFW. Umthetho ogciniwe, umthetho osebenzayo kanye nensizakalo efinyelelekayo kuyimibono emithathu ehlukene.

ufw status verbose
ufw allow 22/tcp
ufw app update OpenSSH

Ngemuva koshintsho, hlola ukuxhumana okuvunyelwe kanye nendlela eyodwa okufanele isala inqatshiwe. Ukuhlolwa kokwenqaba kubaluleke njengokuhlolwa kokuvuma, ngoba umthetho obanzi kunalokho obekuhlosiwe udlula ukuhlolwa kokuqala futhi wehluleke kwesibili. Bhala igama lephrofayela, amachweba ebiwakuwo kanye nomlaleli oqinisekise ngawo.

Uhlu lokuhlola luphela lapho igama likhona noma lishintshwe ngamabomu, incazelo ihambisana nomlaleli wangempela, insizakalo iphethwe ngokwehlukana, futhi uhlole kokubili indlela evunyelwe nendlela enqatshiwe unendlela yokubuyisela esandleni. Igama elisohlwini akulona nelilodwa lalokhu.