Kungani i-DNS iyeka ukusebenza ngemva kokuxhuma kwe-OpenVPN ku-Windows

Iphothi 53 ayifinyeleli ndawo kuyilapho isixazululi sisaphendula ku-ping. Hlola ukuthi i-block-outside-dns iyahlunga yini, bese unikeza isixazululi umhubhe ongafinyelela kuso.

I-ping eya kusixazululi sehhovisi isaphendulwa ngemva kokuxhuma kwe-"OpenVPN", kodwa konke ukusesha igama kuyehluleka. Ikheli liyafinyeleleka kuyilapho iphothi ingafinyeleleki, inhlanganisela enengqondo uma wazi ukuthi i-Windows ingahlunga i-DNS ngokwe-adaptha. Uma i-block-outside-dns ikhona kuphrofayela, leso sihlungi siyisisolwa sokuqala, futhi ithebula lemizila iyindawo engalungile okufanele ibhekwe. Izivivinyo ezimbili ngezansi zihlukanisa izigaba ngemizuzwana.

Ikheli elifinyelelekayo, iphothi elifile

I-ping ephumelelayo ifakazela ukuthi umsingathi uyasebenza nokuthi indlela ikhona. Ayisho lutho mayelana nemvume yokufinyelela iphothi 53, ngoba isihlungi okukhulunywa ngaso sisebenza kwesinye isigaba futhi sincike ku-adaptha. Yingakho umshini ofanayo ungaphendula ku-ICMP futhi wenqabe yonke imibuzo ethunyelwa kulelo kheli. Qalisa zombili izivivinyo kuseshini eyodwa ngaphambi kokushintsha noma yikuphi ukucushwa.

ping <resolver-ip>
nslookup <name> <resolver-ip>

Leyo mbhangqwana iwukuxilonga. Ukuhamba okuvamile okuya kunethiwekhi encane kuyaqhubeka kuyilapho ukuxazululwa kwamagama kufa, futhi abantu baphetha ngokuthi iseva yephukile noma i-DNS ayikaze ithunyelwe. Zombili izincazelo zibiza ukuzilandela, futhi ubufakazi bukhomba endaweni encane. Qinisekisa umbhangqwana ngaphambi kokuthinta noma yisiphi isilungiselelo.

Le nketho ingumthetho wengxenye yokuhlunga

Incwadi ye-OpenVPN ichaza i-block-outside-dns njengomkhawulo we-Windows Filtering Platform ovimbela izinhlelo ukuba zifinyelele i-DNS kuma-adaptha angaphandle komhubhe. Ihlanganisa i-TCP ne-UDP iphothi 53. Njengoba isihlungi sihlala ku-WFP hhayi ohlwini oluvamile lwemithetho yothango lomlilo, ukwengeza umthetho wemvume kwenye indawo akuguquli umphumela ngempela. Yingakho iseluleko esivamile sokuvumela i-DNS siqhubeka sihluleka.

Isilungiselelo singavela kuphrofayela engenisiwe noma kuseva, futhi ifayela owalihlela ekugcineni "alubufakazi balokho okulayishwe iklayenti". Funda ukucushwa okusebenzayo kanye nelogi yokuxhumana ndawonye. Le nketho iphinde ibe ngeka-Windows kuphela, futhi ukuyiphatha njengento ethathelwayo kuveza izeluleko ezingasebenzi.

Funa ingxenye yeklayenti engumnikazi walo mkhawulo esikhundleni sokwengeza eminye imithetho. Umnikazi uyinto engawususa ngempela.

Isihlungi akusona isixazululi

Ukuvimbela ukuhamba ngaphandle komhubhe akufaki isixazululi esisebenzayo ngaphakathi kuwo. Le nketho isusa indlela futhi ishiye ukucushwa kwe-DNS yomhubhe kulowo owakha iphrofayela. Iphrofayela engakaze ithumele isixazululi manje ayinayo nolulodwa.

Yenza izivivinyo ezintathu ngokulandelana. Okokuqala, isiphi isixazululi esisetshenziswa ngempela uhlelo olwehlulekayo. Okwesibili, ingabe iklayenti lisebenzise izilungiselelo ze-DNS ze-VPN. Okwesithathu, yisiphi isixhumanisi esithwala ukuhamba kuya kuleso sixazululi.

  1. Isixazululi esisetshenziswayo: qhathanisa Resolve-DnsName -Server <resolver-ip> <name> namaseva e-DNS akhishwe ngu-ipconfig /all.
  2. I-DNS ye-VPN isetshenzisiwe: hlola amangeno e-DNS we-adaptha yomhubhe kulo lokho kuphuma kwe-ipconfig /all.
  3. Isixhumanisi esisetshenzisiwe: i-Find-NetRoute -RemoteIPAddress <resolver-ip> isho isixhumanisi sokuphuma saleyo ndawo.

Isixazululi se-LAN siba singafinyeleleki ngokomklamo ngaphansi kwale nqubomgomo, ngisho noma okunye ukuhamba kwe-LAN kusebenza. Yilokho okuyinketho eyenza umsebenzi wayo. Uma umklamo udinga i-DNS nge-VPN, lungisa ukubhaliswa kwesixazululi kanye nendlela yomhubhe; uma kudingeka i-split DNS enezihlukiso zendawo, umnikazi wokucushwa kufanele aveze lezo zihlukiso ngendlela esekwayo.

Lokho inketho engakuhlanganisi

Iphothi 53 akuyona yonke inqubo yokuxazulula amagama. I-DNS over HTTPS ne-DNS over TLS zisebenzisa ezinye izindlela zokuthutha, futhi ezinye izinhlelo ziqhuba umqondo wazo wesixazululi kungakhathalekile izilungiselelo zohlelo. Ngakho isiphequluli singaxazulula amagama kuyilapho umugqa womyalo ungakwazi.

Thatha lowo mehluko njengokuxilonga hhayi njengokuphikisana. Qhathanisa kokubili ngaphambi kokunquma ukuthi isixazululi sohlelo siphukile.

Gcina isiphetho sincane uma usibhala. Le nketho ikhawulela ukuthutha okukodwa engxenyeni eyodwa, futhi ingxenye esele yendlela yokuxazulula iwumbuzo womklamo ohlukile onomnikazi wawo.

Hlola isimo ngaphambi nangemva kokunqamuka

Qalisa ukusesha okufanayo ngesikhathi sokuxhumana futhi futhi ngemva kokuba iklayenti elingumnikazi linqamuka. Okokuqala kufanele kwehluleke kusixazululi sangaphandle ngenkathi umhubhe uphakeme, futhi okwesibili kufanele kuphumelele uma isihlungi sisusiwe. Uma kusahluleka ngemva kokunqamuka, isihlungi asizange sihlanzwe.

ipconfig /displaydns
nslookup <name> <resolver-ip>

Ukuqalisa kabusha isevisi yeklayenti noma umshini kuvamise ukuhlanza isihlungi esidala. Lokho kuqinisekisa ukuxilonga ngaphandle kokuqinisekisa ukulungiswa okuhlala njalo. Bhala phansi lokho okubonile, ngoba isihlungi esidlula ukunqamuka sizokuphinda, futhi umbhalo yiwona othethesisa umbiko wesiphambeko.

Kuphela ngemva kwalezo zivivinyo kunengqondo ukushintsha isixazululi noma ukwakha kabusha inqubomgomo yothango lomlilo. Kokubili izinguquko ezinkulu kunalokho ubufakazi obukusekelayo.

Izihloko ezihlobene