I-kill switch ku-Windows ngaphandle kwesoftware eyengeziwe: amaphrofayela noma imizila?

Amaphrofayela e-firewall alandela isigaba senethiwekhi, imizila ilandela i-adaptha. Qhathanisa kokubili, bese uhlola isimo sokuphahlazeka lapho ithuneli ingekho futhi isithonjana siqamba amanga.

Iklayenti liyafa phakathi nokulandwa futhi isithonjana sethreyi siyanyamalala. Ukudluliswa kuqhubeka ngoxhumano lwasekhaya. Leyo ukulandelana kwayo iyisizathu sokuthi i-kill switch ikhona, futhi i-Windows ingasondela kwayo ngaphandle komkhiqizo wesibili.

Izindlela ezimbili kufanele zaziwe. Ziyahluleka ezindaweni ezahlukene, futhi azikho impendulo ephelele.

Indlela yokuqala: vumela uhlelo kuphela kuphrofayela eyodwa

I-firewall ye-Windows ikhawulela imithetho kumaphrofayela e-Domain, Private ne-Public. Icebo ukunikeza i-adaptha yethuneli isigaba esisodwa kanye ne-adaptha yomzimba esinye isigaba. Bese ubhala umthetho wokuphuma ovumela uhlelo oluvikelwe kuphrofayela yethuneli futhi uluvimbe kuyo yonke enye indawo. I-firewall ifunda isigaba, hhayi igama le-adaptha.

Qala ngokusetha uxhumano lwe-VPN ku-Private kanye nenethiwekhi yomzimba ku-Public. Bese wengeza umthetho wokuvimba wohlelo osebenza kumaphrofayela ongawafuni. Ngemva kwalokho qinisekisa ukwabiwa nge-Get-NetConnectionProfile, ngoba umthetho ulandela lokho kwabiwa.

Get-NetConnectionProfile | Select-Object Name, InterfaceAlias, NetworkCategory

New-NetFirewallRule -DisplayName 'Block browser off VPN' -Direction Outbound `
  -Program 'C:\Program Files\Mozilla Firefox\firefox.exe' -Action Block -Profile Public

New-NetFirewallRule -DisplayName 'Allow browser on VPN' -Direction Outbound `
  -Program 'C:\Program Files\Mozilla Firefox\firefox.exe' -Action Allow -Profile Private

Ubuthakathaka buyisakhiwo. Umthetho wephrofayela ulandela isigaba, ngakho lapho i-Windows ihlukanisa kabusha inethiwekhi yehhotela ukuvimba kungase kuyeke ukusebenza. Akukho okushintshayo ohlwini lwemithetho lapho lokho kwenzeka.

Indlela yesibili: susa umzila ozenzakalelayo womzimba

Indlela yemizila inamandla futhi ilula kakhulu ukuyihlola. Bhala phansi isango lomzimba, vumela i-VPN ifake umzila wayo ozenzakalelayo ngomethrikhi ophansi, bese ususa lowo womzimba ozenzakalelayo. Akukho okunye okungase kuthwale ithrafikhi ngemva kwalokho.

route print -4
route delete 0.0.0.0 mask 0.0.0.0 192.168.50.1
route print -4 | findstr /c:"0.0.0.0"

Lapho iklayenti lifa, umzila we-VPN uhamba ne-adaptha yawo. Umshini uya ngaphandle kwe-inthanethi esikhundleni sokuvuza, futhi yilokho okufanele kukhiqizwe yi-kill switch.

Imininingwane emibili inquma ukuthi uzohlala isonto. I-DHCP ibuyisela isango njalo lapho isixhumanisi sinyakaza. I-adaptha yomzimba enekheli elingaguquki igwema leso simanga. Ikheli leseva ye-VPN ngokwayo kufanele futhi lihlale lifinyeleleka. Ngaphandle kwalowo mzila we-host iklayenti ngeke lilokothe lixhume futhi ngemva kokuphuka okwaqala ukuvimba.

Indlela yesithathu: akukho sango, umzila we-host owodwa ohlala njalo

Inketho yesithathu iqala ngokusula isango kusukela kuzilungiselelo ze-adaptha. Bese umzila owodwa ohlala njalo oya ekupheleni kwe-VPN uthatha indawo yawo. Ngemva kwalokho umshini ungasikhuluma nesiseva futhi ungakhulumi nelunye into kuze kube ithuneli liphakama.

route -p add 198.51.100.44 mask 255.255.255.255 192.168.50.1 metric 1
route print -4 | findstr 198.51.100.44

Ukubuyisela isango kubuyisela i-inthanethi evamile, okukwenza kube yiswishi ehlanzekile yokuvula nokuvala. Akunciki kusikripthi esigada izehlakalo zesixhumi. Futhi akunandaba nokuthi inethiwekhi ihlukaniswa kanjani.

Intengo iwukuzihlukanisa ngokuphelele ngesikhathi ithuneli liphansi. Izibuyekezo ziyama, futhi nokulandwa ngokwako okwaqala lo msebenzi kuyama. Kumakhompyutha ephathekayo omsebenzi lokho kuvame ukulunga, kuyilapho kumsakhiwo womuntu siqu kuyisinqumo okufanele sithathwe ngamabomu.

Kungani isithonjana somhlaba singafakazi lutho

I-Windows ibika ukufinyeleleka ngokuhlola ngokumelene nendawo yokuphela ye-Microsoft. Lokho kuhlola akusho lutho ngethuneli lakho. Ithuneli elixhunyiwe lingahlala ngemva komhlaba obika ukuthi akukho inthanethi, futhi elingasekho lingabonisa uxhumano olunempilo.

Hlola ngokubulala inqubo yeklayenti bese uzama ukufinyelela ikheli lomphakathi ngenombolo. Umbuzo wegama ungaphendulwa kusuka kusitoreji, ngakho nesithonjana noma impendulo ye-DNS akubona ubufakazi.

Yini okufanele ibhalwe ngemva kokuphuka kwangempela

Qhuba ukuhlola njengokulandelana hhayi njengokuhlola okukodwa. Bulala inqubo esikhundleni sokunqamula uxhumano, bese uzama ikheli lenombolo kuyo yomibili imindeni. Ngemva kwalokho buyisela iklayenti futhi uqinisekise ukuthi lisafinyelela iseva yalo ngomzila oyigcinile.

taskkill /IM openvpn-gui.exe /F
ping -4 198.51.100.44
ping -6 2606:4700:4700::1111
route print -4 | findstr /c:"0.0.0.0"

Phinda ukulandelana ngemva kokulala, ngemva koshintsho lwe-Wi-Fi nangemva kokusuka kukhebula ukuya kokungenantambo. Kulezo zinguquko yilapho kokubili indlela yephrofayela nokuziphatha kwe-DHCP kuhluleka khona. Umthetho ohlala edeskini awuhlali ngempela ehhotela.

Bhala isinyathelo sokuhlehlisa eceleni komthetho nomzila ngamunye. I-Microsoft ibhala ukwakhiwa kwemithetho yokuphuma ku-incwadi yokubhekisa yemithetho ye-firewall ye-Windows, futhi lokho kuwumthombo ongcono kunomhlahlandlela wezithombe zesikrini kuphela.

Izihloko ezihlobene