Ikhaya nehhovisi zombili zisebenzisa 192.168.1.x: manje kwenzenjani?

Hamba ngezihlolo ezine: igama lixazululeka kuyiphi ikheli, inethiwekhi yendawo isebenzisa isiqalo sini, i-kernel ikhetha umzila upi wale ndawo, futhi yini ephendula ekupheleni okude. Ukungena kwe-VPN akusikho kokunye kwalokho, ngoba kuqedwa kungakhathalise ukuthi iyiphi inethiwekhi enqobayo. Yenza izihlolo ngokulandelana, bese ukugqagqana kuyabonakala esigabeni sesibili hhayi sesine.

Ukungena okuphumelelayo kusho ukuthi umhubhe uvuliwe; akusho lutho mayelana nokuthi ikheli elithile likhomba kuphi.

Ikheli elilodwa, imishini emibili

Umsekeli ukhetha indlela etafuleni lakhe lomzila nemithetho yenqubomgomo, esebenzisa ikheli lendawo. Akukho okumtshela ukuthi isicelo esiya ku-hop engu-192.168.1.20 senzelwe iseva yehhovisi hhayi idivayisi esekamelweni eliseduze. Lapho zombili izinethiwekhi zisendaweni eyimfihlo efanayo, umzila ocacile kakhulu uyanqoba futhi konke okunye kuncike ekutheni yiluphi uhlu olufakwe ngokungazelelwe ukuxhuma kabusha. Akukho lutho ekheli ngokwalo oluthwala lo mehluko.

ip route get 192.168.1.20

Lokho kusesha kusho i-interface ne-hop elandelayo ekhethwe i-kernel, okuyisihlolo sesibili ohlwini. Qhathanisa iziqalo zasendaweni nezakude ngaphambi kokwenza enye into. Uma i-LAN yendawo ingu-192.168.1.0/24 nesizinda esikude nayo ingu-192.168.1.0/24, ukugqagqana kuyilokho okutholakele, futhi akukho ukukhetha komthengi okukulungisayo.

Phinda unombolo uhlangothi olulawulayo

I-router yomuntu siqu ngokuvamile ihlangothi okulula ukulihambisa. Khetha ibanga elingashayisani nezixhumanisi ezikude ozisebenzisayo ngempela, futhi qaphela ukuthi i-10.x.x.x nayo ayikhululekile ngokuzenzakalela, ngoba izindawo eziningi ziyisebenzisa. Hlela ushintsho: izivumelwano ze-DHCP, amakheli agciniwe, imigqa yokuphrinta nakho konke okunekheli eligxilile kudinga ukunakwa. Yenza ukunombolo kabusha ngesikhathi ongakwazi ukubuyisela i-router ngaphandle kwe-VPN.

Hlola uhlu lweziqalo ezikude kuqala, hhayi kamuva. Ukukhetha ibanga elisha elishayisana nesinye isizinda sehhovisi kuletha inkinga efanayo ngomsebenzi omningi.

Lapho kungekho uhlangothi olungashintsha

Uma kungekho nexhumanisi elilodwa elinganombolwa kabusha, izinketho ezisele zihlala kuseva. Igesi ingahumusha ixhumanisi elikude libe kwesinye isixhumanisi esincane sabathengi be-VPN, isebenzisa i-NAT esekelwe kunqubomgomo noma uhlobo olubili, ukuze umthengi abone ikheli eliyingqayizivele. Lokho kuwumklamo wegesi hhayi iswishi enikezwa yibo bonke abathengi bedeskithophu, futhi kushintsha ukuthi abasebenzisi bathayipha liphi ikheli namaphi amagama okumele afane. Umzila okopishwe kufeksi awukwazi ukwehlukanisa izindawo ezimbili ezifanayo.

Amabanga amakheli ayimfihlo ahlala eyimfihlo; inkinga ukuphinda kusetshenziswe, hhayi amabanga ngokwawo.

Fakazisa ukuthi iyiphi imishini ephendulile

openssl s_client -connect 192.168.1.20:443 -servername office.example 2>/dev/null | openssl x509 -noout -subject

Ngemva kwanoma yiluphi ushintsho, hlola insiza yehhovisi namadivayisi endawo ndawonye. Uma idivayisi yasekhaya eyaziwayo iphendula lapho iseva yehhovisi okufanele ibe khona, noma isitifiketi se-TLS sisho umphathi ongalungile, misa futhi ukhombe indawo ngaphambi kokuqhubeka. Ukuthola impendulo kulelo kheli akufakazi ukuthi iyiphi imishini eyithumelile. Ukuhlola isihloko sesitifiketi kungenye yezimpawu ezimbalwa ezithembekile ezitholakalayo ngaleso sikhathi.

Ungashintshi amakheli ayimfihlo ehhovisi ngamakheli omphakathi angalawuleki. Lokho kushintsha ukugqagqana kube yinkinga yomzila nobunikazi embi futhi enzima ukuyichaza.

Bhala phansi isiqalo sasendaweni, isiqalo esikude noshintsho oluyixazululile. Ukugqagqana okulandelayo kuzobonakala kuhlukile kodwa kulandele iphethini elifanayo.