Iseva yewebhu iyanyamalala lapho iklayenti le-VPN lixhuma

Isevisi enyamalalayo ngomzuzu lapho iklayenti le-VPN lixhuma ngokuvamile ayivinjiwe, iphendula ngengxenye engalungile. Isicelo sifika kukhadi lenethiwekhi elibonakalayo, i-daemon ibhala impendulo, futhi ithebula lemigudu inikela leyo mpendulo kumhubhe, ngoba umhubhe uthathe umzila ozenzakalelayo. Iklayenti elikude aliyiboni impendulo yoxhumano eliluvulile, ngakho liyalinda bese libika ukuphela kwesikhathi. Awekho umthetho we-firewall ohilelekile noma kuphi kulolo chungechunge.

Uphawu: izicelo zingena, izimpendulo ziphuma ngomnyango ongalungile

Uphawu wukuxhumana okungena okwehlulayo kuyilapho konke okunye kukhompuyutha kusebenza. Olunye uphawu yikhompuyutha efinyeleleka isuka ku-LAN kodwa hhayi isuka ku-inthanethi, noma leyo esebenza kuze kuxhume umhubhe futhi bese ima. Kuzo zonke izimo ukuya phambili kwakuhamba kahle futhi ukubuya kwakungenjalo, lokho okubonisa ukungalingani kwemigudu hhayi umgomo.

Qinisekisa lokho ngokubuka ukuthi impendulo iya kuphi, hhayi ngokubuka ukuthi isicelo siza kanjani.

Thwebula ngasikhathi sinye engxenyeni ebonakalayo nasedivayisini yomhubhe. Uma isicelo sibonakala engxenyeni ebonakalayo futhi impendulo ibonakala kumhubhe, ukuxilongwa kuphelile. Impendulo engabonakali ndawo isho ukuthi isevisi ayikaze yamukele uxhumano, okuwuphenyo oluhlukile olunesizathu esihlukile.

Imigudu emibili ezenzakalelayo kanye nesinqumo esisodwa sokuhlela imigudu

Iklayenti elifaka umzila ozenzakalelayo lengeza ingeno yesibili enesilinganiso esingcono kunezango le-LAN. Amanye amaklayenti afaka esikhundleni salokho imigudu emibili yengxenye, ehlanganisa isikhala esifanayo ngokucacile futhi inqoba ukusesha ngendlela efanayo. Zombili izindlela zishiya amaphakethe aphumayo ajwayelekile ekhatheni ukukhetha ingxenye yomhubhe.

Lokho kukhetha kwenziwa ngedestinishini kuphela. I-kerneli ayibuzi ukuthi iphakethe lavelaphi ngaphandle uma umthetho womgomo uyiyala. Ngakho impendulo eya ekhelini lomphakathi leklayenti inikelwa kumhubhe, ohlangothini lwalo olukude luthola iphakethe elinekhasi lomthombo okungewona owalo futhi liyalilahla noma liyidlulisele endaweni engenamsebenzi. Ku-Linux ukuhlunga okuqinile komzila obuyayo nakho kungalahla isicelo sokuqala ngaphambi kokuthi isevisi yakho isibone, lokho okubonakala kufana ncamashi ngaphandle. Zombili izimpawu zivela ekuxhumaneni okufanayo okungekho phakathi kokugeleza okungena nempendulo yako.

Umhubhe uziphethe kahle isikhathi sonke. Watshelwa ukuthi uthwale umzila ozenzakalelayo futhi wenza lokho ngqo.

Lungisa indlela yokubuya ngaphandle kokwephula umhubhe

Kunezindlela ezintathu eziqinile zokulungisa, futhi ukukhetha kuncike ekutheni kungakanani ukugcwala kwakhona kukhompuyutha okufanele kuhlale ngaphakathi kumhubhe. Ukukhipha idestinishini noma imbobo yesevisi ushintsho oluncane. Ukuhlelwa kwemigudu ngomgomo ngokomthombo noma uphawu ngokunemba kakhulu. Ukuhumusha komthombo kukhulu kakhulu futhi kulula ukuchaza emva kweminyaka emibili.

Khetha ngokusho kwalokho okudingeka kwenziwe yikhompuyutha, hhayi ngalokho okuthathe khona wathola kuqala.

Ukukhipha idestinishini kufaneleka kusevisi enekheli lomphakathi elizinzile, futhi ukubopha i-daemon ekhelini elibonakalayo esikhundleni sakho konke ikheli kwenza lokho kukhipha kuphephe kakhudlwana. Umthetho womgomo okhetha ithebula ngokomthombo ugcina ukuxhumana kwakhona kukhompuyutha ngaphakathi kumhubhe kuyilapho ubuyisela izimpendulo zesevisi ngokusebenzisa izango le-WAN. Ukufihla izimpendulo engxenyeni ye-WAN kufinyelela umzila ofanayo ngenani lokufihla ikheli leklayenti emibhalweni yesevisi. Ukushintsha komzila ozenzakalelayo ngokuzenzakalela wukuxilonga hhayi ukumiswa, ngoba iklayenti ibhala kabusha imigudu njalo lapho ixhuma.

ip rule show
ip route get 203.0.113.9 from 192.0.2.44

Lapho ikhompuyutha ihlela imigudu yayo i-LAN engemuva kwayo

Igxathu elilodwa ngaphezulu, ukungalingani okufanayo kubuya nezicucu ezinyakazayo eziningi. Ukugcwala kufika kumgwaqo ovela ku-inthanethi, kudluliselwa kudivaysi yangaphakathi, futhi indlela yokubuya yiyodwa yaleyo divaysi ingumhubhe, ngakho impendulo ifika eklayenti lokuqala isuka ekhelini lomhlinzeki uqobo. I-connection tracking ibe isihlangabezana nempendulo yokugeleza engakubonanga ukuqala kwayo, futhi iyilahle. Iklayenti phakathi nalokho aliboni lutho.

Izinguquko ezimbili ziyilungisa: ukuhumusha kwedestinishini ukuze ukuxhumana okungena kufinyelele kudivaysi yangaphakathi, nokuhumusha komthombo ukuze impendulo yaleyo divaysi ibonakale isuka kumgwaqo uqobo.

Ku-firmware yomgwaqo, isisho esijwayelekile wumthetho womgomo obopha ukudluliswa kwembobo kuhlangothi lwe-WAN kuyilapho ukugcwala komgwaqo uqobo kuhamba ngomhubhe. Ngaphandle kokuhumusha komthombo leyo mpendulo iqondiswe eklayentini langaphandle futhi idivaysi yangaphakathi ayinawo umzila wokuya lapho. Hlola izinto ezintathu ngokwehlukana, ngoba zehluleka ngezizathu ezihlukile: ukuxhumana okuvela ngaphandle, lokho okuthathwa yikhompuyutha uqobo, nokusesha kwegama.