Ufake ikheli le-VPN ohlwini oluvunyelwe kodwa lisavinjiwe? Landelela

Ukufaka ohlwini oluvunyelwe ikheli eliboniswa uhlelo lwe-VPN akuvamile ukulungisa imbobo evinjiwe, futhi iphakethe lichaza ukuthi kungani. Isihlangu somlilo asiwushayi indiva umthetho wakho; sihlola ikheli lomthombo okungekho lutho esikrinini sekhasimende olubonisayo. Kuze kubike indawo okuyiwa kuyo lelo nani, yonke inguquko yomthetho iwukuqagela.

Qala ngesicelo esifika kusevisi. Ikheli lethunge, ikheli lokuphuma kanye nanoma yikuphi ukuhunyushwa phakathi kwazo kuhlala kuyizinto ezicatshangelwayo kuze kuqinisekise indawo okuyiwa kuyo enye yazo.

Ikheli elisohlelweni akulona elifikayo

Uxhumano lwe-VPN luthwala okungenani amakheli amane okufanele abizwe ngokwehlukana: indawo yokugcina yeseva, ikheli langaphakathi lethunge elinikezwe ikhasimende lakho, ikheli lendawo ye-Wi-Fi noma i-Ethernet, kanye nekheli lomphakathi elibonwa iwebhusayithi ngemva kokuba ithrafikhi isiphumile kumhlinzeki. Iwindi lekhasimende lingase libonise elesibili kuphela. Bika wonke amane ngaphambi kokubiza umthetho. Ngethunge elihlukene, izicelo eziya endaweni yomphakathi zingase zidlule ngokuphelele ithunge, ngakho isikhathi esihlulekayo akusona leso umsebenzisi acabanga ukuthi usiqalile.

Nquma ukuthi imuphi kula mane umthetho okufanele uwuvumele, bese uqinisekisa kusukela kolunye uhlangothi. Uma isidingo ngempela siyikheli lehhovisi, umbandela uwumzila kanye nokuhlelwa kokuphuma kwaleso sayithi, futhi uxhumano olunophawu lwe-Office VPN aluhlinzeki noma yikuphi kwalokhu kokubili lodwa.

Landelela isicelo esisodwa kuze kufike emngceleni waso wokuhlunga

Qinisekisa ikheli lendawo okuyiwa kuyo kanye nembobo esetshenziswa yikhasimende, bese uhlola ukuthi le ndawo ilandela umzila oyicabangayo. Imbobo yekhontheyna eshicilelwe, i-proxy ephambene noma ukudluliswa kwembobo kungase kudlulisele isinqumo kusibungu ongakaze usihlele. Ngakunye kwalokhu kugxuma kungase kuthwale inqubomgomo yayo. Ukuthola umzila kuqala kukusindisa ekulungiseni umthetho okungekho phakethe eliwufinyelelayo.

Kusibungu se-Linux esigunyaziwe, funda imithetho esebenzayo ngokulandelana ngaphambi kokuyiguqula. Izinsizakalo ezidluliselwe nezikhonteyna zivame ukugxuma zingene kuchungechunge lwazo, ngakho hlola umgomo wokugxuma kanye nesinqumo sokugcina.

iptables -vnL INPUT --line-numbers
iptables -S INPUT | head -n 40
ss -ltnp | grep -E ':(443|9443)\b'

Shono inombolo yomthetho ehambisanayo kuthikithi. Ngaphandle kwayo umfundi olandelayo akakwazi ukwazi ukuthi yikuphi ukuhlela okushintshe umphumela. Inombolo yomthetho engenasigxivizo sesikhathi isengaqondakali.

Qinisekisa umzila ngokubamba okukodwa okulinganiselwe

Isicelo esisodwa esingenabungozi kanye nokubamba okuncane okukodwa kunquma umbuzo ophindaphinda ukubuya. Hlunga ngembobo yendawo okuyiwa kuyo kanye nesibungu esiphenywayo, khawulela inani lamaphakethe, futhi umise ukubamba ngokushesha lapho isicelo sesiphelile.

tcpdump -ni any 'tcp dst port 9443' -c 20

Qhathanisa amanani amathathu eceleni: umthombo osesithombeni sokubamba, umthombo oshiwombeni umthetho ohambisanayo, kanye nokwenqatshwa okurekhodwe uhlelo. Konke kungase kwehluke, futhi owokuqala kuphela ochaza ukwehla okunqunywe umthetho we-IP. Isihloko se-HTTP esidlulisiwe singeseluleko se-proxy, ngakho irekhodi elicaphuna leso sihloko alichazi umthombo ohlolwe isihlangu somlilo.

Funda ukulandelana kochungechunge, hhayi umthetho kuphela

Incwadi yereferensi ye-iptables ibhala ukunqamula okuhleliwe, ngakho imvume ebekwe ngaphansi kokwenqatshwa kokugcina okuhambisanayo ayilokoti iphakethe. Uxhumano olwamukelwe ngaphambili lungase luziphathe ngendlela ehlukile kunolusha, ngakho impumelelo endala ayisho lutho ngomthetho omusha. Thola ukwenqatshwa noma ukwehla ngaphezu kwemvume yakho ngaphambi kokucabanga ukuthi imvume ayilungile. Izibali zomthetho ngamunye zikutshela nokuthi yimuphi umthetho obone iphakethe.

Ukususa umthetho ukuze ubone okuzokwenzeka inguquko, hhayi ukubuka. Funda izibali, qopha inombolo yomthetho, futhi gcina inqubomgomo yokuqala kurekhodi lezinguquko. Uma ukuhlolwa kungenakugwenywa, kusebenzise ekopini yochungechunge.

Shintsha umthetho olawulwa umnikazi wawo

Buyekeza kuphela inqubomgomo yomthombo nesevisi ehlosiwe, ngosizo walowo onayo. Ukuphuma okuhunyushiwe okwabiwe kungase kumelele abasebenzisi abaningi ngesikhathi esisodwa, ngakho ukuvumela lelo kheli akufakazeli muntu, futhi izimvume zohlelo ezingemva kwayo zihlala lapho zikhona.

Lapho ikheli liqhubeka nokuhamba, impendulo ehlala isikhathi isikuphuma okuzinzile noma isiteshi esiqinisekisiwe, hhayi uhlu olude lwezikhathi ezingafakwanga. Qopha umthombo obonwe, imbobo yendawo okuyiwa kuyo kanye nenombolo yomthetho.