Ukulawula ukuthi yiziphi izinhlelo ezixhumeka kwi-inthanethi kungenye yemisebenzi abasebenzisi abaningi abayishaya indiva... kuze kube yilapho kukhona okungahambi kahle. Izibuyekezo ezizenzakalelayo eziphula izici, izinhlelo zokusebenza ezinezikhangiso ezicasulayo, imidlalo evumela izingane zakho ukuthi zikhulume nabantu ezingabazi, noma isofthiwe ethumela idatha ye-akhawunti eningi kunokudingekile. Lezi yizibonelo ezimbalwa nje zokuthi kungani kubalulekile ukwazi imithetho ye-firewall yokuvimba izinhlelo zokusebenza.
Izindaba ezinhle ukuthi, kokubili ku-Windows (isibonelo, ungafunda ukwenza Izinhlelo zokuvimba ku-Windows 11) njengaku-macOS ngisho naku-Linux, unezindlela eziningana zokwenza gunyaza noma uvimbele ithrafikhi yenethiwekhi yohlelo lokusebenza ngalunyeKungakhathaliseki ukuthi kusetshenziswa ama-firewall akhelwe ngaphakathi ohlelweni, izixazululo zokuphepha zenkampani yangaphandle (njenge-ESET), ama-firewall esicelo sewebhu (ama-WAF), noma ngokulawula ama-iptables ezinhlelweni ze-GNU/Linux, sizokuhlola lokhu ngokucophelela nangokuningiliziwe, sisebenzisa ulimi olucacile nolusebenzayo.
Kungani ukuvimba izinhlelo zokusebenza ku-firewall yakho kungakusindisa enkingeni enkulu
I-firewall isebenza njengesihlungi esinquma ukuthi iyiphi ithrafikhi engenayo nokuthi iyiphi ithrafikhi ephumayo yethimba lakho noma inethiwekhi, ngokulandela isethi yemithetho wena noma uhlelo ngokwalo oluyichazile. Ukuqhathanisa okuvamile yilokho kokulawulwa kwemingcele: konke okungenayo nokuphumayo kuyahlolwa, futhi noma yini engahlangabezani nezindinganiso ishiywa ngaphandle.
Ngokuvimba izinhlelo zokusebenza ezithile nge-firewall, ungakwazi ukuvimbela ukuxhumana okungagunyaziwe, ukunciphisa ingozi ye-malware, kanye nokunciphisa ukuthunyelwa kolwazi ukuthi awunasithakazelo sokwabelana. Ngaphezu kwalokho, uvimbela izinhlelo ezithile ukuthi zingaceli idatha kumaseva angaphandle noma ukulanda okuqukethwe okungase kungabi wusizo noma kube yingozi.
Empilweni yansuku zonke, lokhu kuhumusha kube izinto eziqondile kakhulu: Misa izibuyekezo ezizenzakalelayo ezingase ziphule ukuhambisana, bese ususa izikhangiso ezifakwe kwezinye izinhlelo zokusebenza zamahhala. noma ukuvimbela uhlelo ukuthi luxhumeke uma usenethiwekhi yomphakathi ye-Wi-Fi enokuphepha okungabazekayo. Inqwaba yezinkinga nezingozi ongazibhekana nazo ngemithetho embalwa echazwe kahle.
Uma unezingane ekhaya, i-firewall nayo iwumsizi onamandla: Ungavimba ithrafikhi eku-inthanethi kusuka kumapulatifomu athile emidlalo noma ezokuxhumana. ukuvimbela ukuthi bangaxhumani nabantu abangabazi ngaphandle kokugadwa. Akuyona ikhambi eliphelele lokulawula abazali, kodwa kuyinsika ebalulekile yalolo sivikelo.
Ezindaweni zobungcweti nezemfundo, ukulawula izinhlelo zokusebenza nge-firewall kusiza vimbela ukuvuza kwedatha, nciphisa indawo yokuhlasela, futhi unciphise ukusetshenziswa kwamathuluzi angagunyaziweIsihluthulelo ukuthola ibhalansi: akukhona ukuvimba konke, kodwa ukuvumela kuphela lokho okudingayo ngempela.
Vimba izinhlelo zokusebenza ku-Windows 10 kanye ne-11 nge-Windows Firewall
Ku-Windows, indlela eqondile kakhulu yokulawula ukuthi yiziphi izinhlelo ezifinyelela ku-inthanethi ukusebenzisa IWindows Defender Firewall enokuphepha okuthuthukileAkuyona i-interface elula ukuyisebenzisa emhlabeni, kodwa ivumela ukulawula okuhle kakhulu ngemithetho engenayo (engenayo) nephumayo (ephumayo).
para vimba ukufinyelela kwe-inthanethi kohlelo oluthile Ku-Windows 10 noma 11, inqubo evamile ihilela ukudala umthetho ophumayo ohlotshaniswa nefayela elisebenzisekayo lohlelo lokusebenza. Ngale ndlela, noma ngabe uhlelo lokusebenza luzama ukuxhuma, i-firewall izovimba ithrafikhi ngaphambi kokuba iphume kukhompyutha.
Kujwayelekile ukusebenza ngendlela ephelele yefayela le-.exe. Amafayela asebenzisekayo ngokuvamile atholakala ku-“C:\Program Files” noma ku-“C:\Program Files (x86)”kulandelwe igama lefolda yohlelo lokusebenza kanye ne-executable eyinhloko. Ukwazi le ndlela noma ukuyithola nge-file explorer kubalulekile ekudaleni umthetho ngendlela efanele.
Uma usuthole uhlelo lokusebenza, ungachaza umthetho othi Vimba uxhumano kuwo wonke amaphrofayili enethiwekhi: Isizinda, Esangasese, kanye NesesidlangalaleniLokhu kuqinisekisa ukuthi uhlelo lokusebenza ngeke luxhumeke kusuka ku-Wi-Fi yakho yasekhaya, kunethiwekhi yomsebenzi, noma endaweni yomphakathi, ngaphandle kokuthi ushintshe leso silungiselelo.
Ungawudala kanjani umthetho wokuphuma ku-Windows ukuze uvimbele uhlelo lokusebenza
Indlela yokusebenza yakudala yokuvimba uhlelo lokusebenza ngomthetho ophumayo ku-Windows Firewall Isekelwe kukhonsoli ethi "Advanced Security", lapho ungakha, uhlele, futhi ususe khona imithetho yangokwezifiso. Nakuba kungase kubonakale kudida, uma usukwenzile izikhathi ezimbalwa, kuba okuzenzakalelayo kakhulu.
Kule khonsoli, "Imithetho ephumayo" ilawula lokho ikhompyutha yakho ezama ukukuthumela kunethiwekhiUma uvimba uhlelo lokusebenza lapha, yonke ithrafikhi ephumayo evela kulo izovinjwa. Ungabe usubuyekeza lolu hlu ukuze ukhumbule lokho okuvimbile bese uluvula nganoma yisiphi isikhathi.
Uma uhlela umthetho, uzobona izinketho zokukhetha uhlobo lomthetho (kulokhu, "Uhlelo"), indlela eya ku-executable, isenzo okufanele sisenziwe, kanye namaphrofayili enethiwekhi lapho kusebenza khona. Isenzo esiyinhloko “Vimba uxhumano”okuyikho okuqinisekisa ukuthi ukuxhumana akusebenzi.
Isinyathelo sokugcina ukunikeza umthetho igama elibonakalayo. Ukusebenzisa amagama acacile nahambisanayo kuzokusindisa ezinhlungwini lapho, ngemva kwesikhathi esithile, udinga ukuthola ukuthi yimuphi umthetho othinta uhlelo lokusebenza oluthile ukuze uluvumele futhi.
Ukuvimba izinhlelo okwesikhashana nge-Windows Firewall
Kunezikhathi lapho ungafuni khona vimba unomphela ukufinyelela kwe-inthanethi kohlelo lokusebenzakodwa okwesikhashana nje kuphela: ngenkathi wenza isivivinyo, ngenkathi usebenzisa inethiwekhi ethile, noma ngenkathi usekilasini nabafundi, isibonelo.
I-firewall ye-Windows ayinayo inkinobho ethi "misa okwesikhashana" yezinhlelo zokusebenza, kodwa ikuvumela ukuthi sebenzisa futhi uvale imithetho ngayinye ngokuchofoza kwesokudlaEmpeleni, lokhu kusebenza njengokushintsha kwalolo hlelo lokusebenza: uma umthetho uvuliwe, uxhumano luyanqanyulwa; uma uluvala, uhlelo luphinde lufinyelele kunethiwekhi.
Le ndlela inenzuzo yokuthi Akudingeki ukuthi ususe umthetho noma uwudale kabusha kusukela ekuqaleni. Uma ufuna ukuqhubeka nokuvimba, vele ushintshe phakathi kokuthi "Vuselela umthetho" nokuthi "Susa umthetho" kuye ngezidingo zakho.
Uma usebenza nezinhlelo zokusebenza nezinqubomgomo eziningana ezahlukene, kuwumqondo omuhle ukugcina okuncane Imibhalo yangaphakathi yokuthi yimiphi imithetho eyesikhashana nokuthi yimiphi ehlala njaloukuze ungagcini une-firewall egcwele imithetho ekhohliwe ongasazi ukuthi isanengqondo yini.
Dala "uhlu olumhlophe" lwezinhlelo zokusebenza ezivunyelwe ku-Windows
Ngaphezu kokuvimba, i-Windows firewall ikuvumela ukuthi chaza ukuthi yiziphi izinhlelo ezinemvume ecacile yokudlula ku-firewallLokhu kuvame ukubizwa ngokuthi "uhlu olumhlophe" futhi kuyindlela efanelekile yokwengeza indlela yokuvimbela amacala ngamanye.
Esikrinini esithi "Vumela uhlelo lokusebenza noma isici nge-Windows Defender Firewall", uzobona uhlu lwezinhlelo namasevisi. Ngokumaka noma ukususa ukumaka ebhokisini elithi "Elangasese" kanye nelithi "Elomphakathi", unquma ukuthi hlobo luni lwenethiwekhi abangaxhumana ngalo.Ukususa ngokuphelele ukumaka uhlelo lokusebenza kungasebenza njengendlela yokuvimba ngokushesha.
Uma uhlelo oluthandayo lungekho kulolo hlu, ungasebenzisa inketho ukuze "Vumela olunye uhlelo lokusebenza" ukuze lwengeze ngesandla i-executable yaloNakuba igama lisikisela ukuthi uzoyivumela, uma isisohlwini, akukho okukuvimbela ukuthi ungayikhethi ukuze uyivimbele. Kuphambene ngandlela thile, kodwa yileyo ndlela i-interface eklanywe ngayo.
Uyacelwa ukuthi uqaphele lokho Ukunika amandla uhlelo lokusebenza kumanethiwekhi omphakathi kusho ukulubeka endaweni engaba nobuthanjenge-Wi-Fi esitolo sekhofi noma ehhotela. Ngezinsizakalo ezisingatha idatha ebucayi, kungcono kakhulu ukunamathela kumanethiwekhi azimele athembekile.
Ezinye izindlela zokuvala ukufinyelela i-inthanethi ku-Windows
Uma okufunayo kuwukunqamuka ngokuphelele kokuxhumana, ngaphandle kwezici eziningi kangaka, Imodi yendiza ihlala iyisinqamuleli esinamandla kakhulu nesishesha kakhuluUyenza isebenze kusukela ku-Action Center bese konke ukuxhumana (i-Wi-Fi, idatha yeselula, njll.) kunqanyulwa ngesikhathi esisodwa, ngakho-ke alukho uhlelo lokusebenza oluzokwazi ukuxhumana nomhlaba wangaphandle.
Ezimweni lapho i-Windows firewall ihluleka khona, kunesistimu ebanzi kakhulu ye- ama-firewall enkampani yangaphandle ye-WindowsEziningi zazo zimahhala. Lawa mathuluzi ngokuvamile anikeza izixhumi ezisebenziseka kalula, imithetho esekelwe ku-wizard, kanye nezici ezengeziwe njengokuqapha uxhumano ngesikhathi sangempela noma amaphrofayili alungiselelwe kusengaphambili.
Kuhle ukukhumbula ukuthi ukucushwa okubi okuthuthukisiwe kungaba kubi kakhulu kunokungathinti lutho: Ukudala, ukuguqula, noma ukususa imithetho ngaphandle kokuqonda ngokugcwele umphumela wayo kungashiya izimbobo zokuphepha noma kuphule izinhlelo zokusebenza ezibalulekile.Kungcono njalo ukuqhubeka kancane, uhlole izinto, futhi, uma kungenzeka, ugcine ikhophi egciniwe yezilungiselelo zakho.
Okokugcina, uma kwenzeka izinto ziba nzima noma uqala ukuqaphela ukuziphatha okungajwayelekile, ungahlala usebenzisa inketho ethi buyisela i-firewall esimweni sayo esizenzakalelayoKuyinkinobho ethi "ukusetha kabusha kwasefekthri" ye-firewall, ewusizo kakhulu uma ungazi ukuthi yiluphi ushintsho oluphule ini.
Imithetho ye-firewall emikhiqizweni ye-ESET ye-Windows (Ekhaya kanye neHhovisi Elincane)
Uma usebenzisa i-security suite efana neyakwa- I-ESET ku-Windows, unayo a i-firewall ehlanganisiwe yomkhiqizo Lokhu kukuvumela ukuthi udale imithetho ethile yokuvumela noma ukuvimba ukuxhumana kohlelo lokusebenza. Lolu ngqimba lokuhlunga lugcwalisa noma luthatha indawo yomlilo we-Windows wendabuko, kuye ngokucushwa.
Kusukela efasiteleni eliyinhloko lohlelo, ungafinyelela ku- Izilungiselelo ezithuthukisiwe ngokucindezela inkinobho ye-F5Ngaphakathi, ingxenye efanele ithi "Ukuvikelwa kokufinyelela kwenethiwekhi", lapho kuboniswa khona ingxenye ethi "I-Firewall" kanye nenkinobho ethi "Hlela" eduze kwethi "Imithetho".
Lapho uzothola uhlu lwemithetho ekhona kanye nenketho yokwenza kanjalo “Engeza” ukuze udale umthetho omushaNgokwenza kanjalo, uchaza igama elichazayo, ukhetha isenzo (vumela, vimba, cela, njll.), ukhombisa uhlelo lokusebenza oluthintekile, kanye nesiqondiso sethrafikhi.
Ngokwandisa insimu ethi “Uhlelo Lokusebenza” uzokwazi Zulazula ohlelweni uze uthole uhlelo lokusebenza ofuna ukululawula.Ku-"Direction" unquma ukuthi umthetho usebenza yini ekuxhumaneni okungenayo, ekuxhumaneni okuphumayo, noma kokubili, okunikeza ukuguquguquka okukhulu kuye ngenhloso yakho.
Uma la mapharamitha eselungisiwe, qinisekisa ngokuthi “Kulungile” bese usebenzisa izinkinobho ezihlukile ezithi “Yamukela”. Londoloza izinguquko bese usebenzisa umthetho.Kusukela ngaleso sikhathi kuqhubeke, i-firewall ye-ESET izosebenzisa inqubomgomo ekhethiwe kuyo yonke ithrafikhi ekhiqizwe yilolo hlelo lokusebenza, ihlanganiswe nayo yonke ingxenye (ukutholwa kwezinsongo, ukuqopha, njll.).
I-Windows Firewall: Amaphrofayili Enethiwekhi, Izilungiselelo Ezengeziwe, kanye Nokuphepha
Ngaphezu kwemithetho yohlelo ngalunye, i-Windows firewall ikuvumela ukuthi ulungise indlela eziphatha ngayo kuye ngohlobo lwenethiwekhi oxhumeke kuyo: isizinda (ngokuvamile izindawo zezinkampani), eziyimfihlo (ikhaya lakho, ihhovisi lakho elincane) noma zomphakathi (amanethiwekhi avulekile noma angathembekile).
Umehluko omkhulu phakathi kokumaka inethiwekhi njengeyimfihlo noma yomphakathi yizinga lokudalulwa okwamukelayo: Kumanethiwekhi azimele uvame ukuvumela amanye amadivayisi ukuthi akubone futhi axhumane nawe., kuyilapho kumanethiwekhi omphakathi ukhetha ukungabonwa ngangokunokwenzeka.
Kuphrofayela ngayinye, ungavumela noma ukhubaze i-firewall bese ulungisa izinketho ezifana nokuthi "Vimba konke ukuxhumana okungenayo, kufaka phakathi lokho okuvela ohlwini lwezinhlelo zokusebenza ezivunyelwe"Leli bhokisi liphendula iphrofayili ibe yimodi evimbela kakhulu: noma yini ezama ukungena iyenqatshwa, noma ngabe uhlelo lokusebenza luphawulwe njengoluvunyelwe.
Kukhona nezinqamuleli zemisebenzi efana nokuthi Vumela izinhlelo zokusebenza ezithile nge-firewall, sebenzisa isixazululi sezinkinga senethiwekhi, lungiselela izaziso zokuvimba, noma faka "Izilungiselelo Ezithuthukisiwe" ukuze ulungise imithetho yokungena, yokuphuma, kanye neyokuphepha kokuxhumana.
Uma ukusetha kuba nzima noma usola ukuthi kukhona okushintshile ngaphandle kwemvume yakho, uhlelo ngokwalo lunikeza inketho yokwenza kanjalo. setha kabusha ama-firewall abe amanani awo azenzakalelayoLokhu kusula imithetho yangokwezifiso bese kubuyela kuzilungiselelo zasefekthri noma izinqubomgomo ezishiwo yinhlangano yakho, uma usesimweni esiphethwe.
Imithetho ku-WAF (i-Web Application Firewall) kanye nendima yayo ekuvikeleni izinsizakalo eziku-inthanethi
Uma sikhuluma ngezinhlelo zokusebenza ezisebenza ku-inthanethi (amakhasi ewebhu, ama-API, izinsizakalo ze-SaaS…), enye into ebalulekile iyavela: I-WAF noma i-Web Application FirewallNgokungafani ne-firewall yesistimu, i-WAF igxila ekuhloleni izicelo ze-HTTP/HTTPS eziqondiswe kuhlelo lokusebenza lwewebhu bese inquma ukuthi izokwenzenjani ngazo.
Imithetho ye-WAF ichaza Yini okufanele uhlelo luyibheke esicelweni ngasinye (ama-header, amapharamitha, umzimba, ikheli le-IP, umzila, njll.), yiziphi izimo okufanele zisebenze, futhi yisiphi isinyathelo okufanele sithathwe? uma leyo nhlanganisela ihlangatshezwa. Imithetho eminingana, ehleliwe futhi ebekwe phambili, yakha lokho okubizwa ngokuthi “inqubomgomo yokuphepha”.
Ngoba izinhlelo zokusebenza zewebhu zihlala zishintsha futhi Izinsongo ezintsha zivela nsuku zonkeIzinqubomgomo ze-WAF azikwazi ukuguquguquka. Kuyadingeka ukuvuselela nokulungisa njalo le mithetho ukuze kuhlanganiswe imizila emisha, amapharamitha, izinsizakalo, kanye nama-vector okuhlasela.
Abahlinzeki be-WAF bavame ukufaka amasethi emithetho “elungele ukusetshenziswa” achazwe ngaphambiliniNgokusekelwe ezisayinweni zokuhlaselwa okwaziwayo, uhlu lwe-IP olunonya, amaphethini okujova, njll. Uma le sethi yokuqala iphelele futhi isesikhathini, izinga lokuvikelwa elinikezwa umkhiqizo wokuqala liba ngcono.
Ezixazululweni ezithuthukisiwe, le mithetho inikezwa yi ubuhlakani bezinsongo zomhlaba wonke (ama-IP feed anonya, ama-honeypot, amanethiwekhi okukhohlisa, ukufunda komshini) ethola ukuziphatha okusolisayo ngesikhathi sangempela futhi ilungise ngokuzenzakalelayo inqubomgomo yokuphepha ukuze ihambisane nabahlaseli.
I-metadata, izimo, izenzo, kanye nokubalulekile emithethweni ye-WAF
Umklamo womthetho we-WAF uvame ukufaka amabhlogo amaningana: imethadatha, izimo kanye nesenzoUkuqonda lolu hlelo kusiza ekwakheni imithetho ehlanzekile nelula ukuyigcina.
Ku-metadata uchaza i- igama elicacile, incazelo, kanye nesimo somthetho (owenziwe wasebenza noma ongasebenzi)Lolu lwazi luqoshwa nasemicimbini yezokuphepha ukuze uma kukhona okubangela ukuqhuma, wazi ngokushesha ukuthi yimuphi umthetho osetshenzisiwe nokuthi kungani.
Izimo zimelela "uma lokhu kwenzeka ...". Izimo eziningi zingalungiselelwa ngokomthetho ngamunyeIsibonelo: uma indlela ingu-/login, indlela ingu-POST, ipharamitha ethi “user” iqukethe izinhlamvu ezisolisayo, futhi ikheli le-IP lingaphakathi kobubanzi obuthile. Kuphela uma zonke lezi zimo sezifeziwe lapho umthetho uqala ukusebenza.
Isenzo sithi "yenza lokhu okunye". Kuye ngohlobo lomthetho, ungakwazi vimba isicelo, sivumele, usiqondise kabusha, shintsha izihloko, unciphise izinga lomgwaqo, ubale imizamo, noma usebenzise izilawuli ezengeziweUmndeni ngamunye wezenzo uvame ukuhlukaniswa ngezinhlobo ezahlukene zemithetho (ukuqondisa kabusha, ukuphepha, ukubhala kabusha, ukukhawulela amazinga, njll.).
Ezingeni lokwenziwa, ama-WAF ngokuvamile asungula ukulandelana kokubaluleka phakathi kwezinhlobo zomthethoIsibonelo, kuqala imithetho yokuqondisa kabusha inqubo, bese kuba imithetho yokuphepha, bese kubhalwa kabusha imithetho… futhi ngaphakathi kweqembu ngalinye, nikeza imithetho into eza kuqala. Ngale ndlela, ulawula ukuthi yimiphi imithetho eza kuqala lapho eminingi ingasebenza esicelweni esifanayo.
Imithetho echazwe kusengaphambili, imithetho yangokwezifiso, kanye namamodeli okuphepha amahle/amabi
Abathengisi abanjengoRadware bahlela izinqubomgomo zabo ze-WAF ngokuhlanganisa imithetho echazwe kusengaphambili (egcinwa ngokuzenzakalelayo ngumenzi) ngemithetho eyenziwe ngokwezifiso (echazwe yikhasimende), ukuze kulungiswe ukuziphatha ezindaweni ezithile kakhulu.
Imithetho echazwe kusengaphambili ingadalwa kusukela ama-algorithm okufunda komshini, ukuhlaziywa okukhulu kwedatha yethrafikhi, kanye nokuphakelwa okuvela kubahlaseli abasebenzayoLokhu kuvumela ukuvikelwa ukuthi kulungiswe ukuze kuhambisane nobuthakathaka obusha kanye namaphethini okuhlasela ngaphandle kokuthi umphathi achithe usuku lonke elungisa ukucushwa.
Ngakolunye uhlangothi, imithetho eyenziwe ngokwezifiso yileyo ozenzela yona lungisa i-WAF ibe nomqondo othize wesicelo sakho: vikela imizila ethile, sebenzisa izilinganiso kuma-endpoints e-API, vimba amazwe athile, lawula ukulethwa kwempendulo, phatha ama-bot, njll.
Inqubomgomo enhle ye-WAF ihlanganisa imodeli yokuphepha engemihle (echaza ukuthi yini evinjelwe) kanye nemodeli yokuphepha enhle (echaza ukuthi yini evunyelwe)Ngendlela engemihle, uthembele ohlwini lwezimpawu namaphethini owaziyo ukuthi anonya. Ngendlela engemihle, uchaza ukuthi hlobo luni lokufaka olusebenzayo kupharamitha ngayinye bese uvimba noma yini ewela ngaphandle kwalawo mabanga, okubalulekile ekumiseni ukuhlaselwa kwezinsuku ezingenalutho.
Ukusebenza ngemithetho emihle noma emibi kuphela kungaba yindleko enkulu futhi kube namaphutha uma kwenziwa ngesandla. Yingakho ama-WAF anamuhla ehlanganisa ukukhiqizwa kwezinqubomgomo ezenzakalelayo kanye nokuzenzakalelayo, eziqaphela ukuthengiselana okusemthethweni, zibonise ithrafikhi evamile futhi ziphakamise imithetho "yemvume" ngokusekelwe kulokho kuziphatha.
Ukukhiqizwa okuzenzakalelayo kanye nokwenza ngcono okuqhubekayo kwezinqubomgomo ze-WAF
Ukuze kuncishiswe umsebenzi wezandla kanye nengozi yokudala izikhala zokuphepha, ama-WAF amaningi ayasebenza izindlela zokukhiqiza inqubomgomo ngokuzenzakalelayo kusetshenziswa ukufunda komshiniUhlelo lubheka indlela ithrafikhi esemthethweni eziphatha ngayo, ukuthi yiziphi izindinganiso ezivame ukuba nazo, ukuthi yimiphi imizila esetshenziswayo nokuthi kanjani, bese luqala imithetho echaza lelo phethini njengeyamukelekayo.
Le ndlela ivumela lungisa amaphrofayili okuphepha amahle ngaphandle kokuthembela kakhulu esweni lomuntuukunciphisa amaphutha okucushwa angashiya uhlelo lokusebenza luveziwe noma, ngokuphambene nalokho, avimbele abasebenzisi abahle ngokweqile.
Ngesikhathi esifanayo, kubalulekile ukuthi i-WAF yenze ukubuyekezwa njalo. amalogi emisebenzi futhi akhiqize iziphakamiso zokwenza ngcono okuqhubekayoUmqondo uwukugcina izinga eliphezulu lokuphepha ngenkathi kunciphisa imiphumela engamanga ukuze ukuvikelwa kungaphazamisi ithrafikhi evamile.
Inhlanganisela yokufunda komshini, ukubuyekezwa kwamalogi, kanye nobuhlakani bezinsongo zangaphandle kuvumela i-WAF ithuthuka ngokuhambisana nohlelo lwakho lokusebenza kanye nohlelo lokuhlaselwa oluzungezile.ngaphandle kokukuphoqa ukuthi uphinde wenze inqubomgomo kusukela ekuqaleni njalo ezinyangeni ezimbalwa.
Ukuvimba izinhlelo zokusebenza ku-Linux: ama-iptable, amaqembu abasebenzisi, kanye nezihlungi zendawo
Kuzinhlelo ze-Linux, indlela ihlukile: Ayikho iphaneli yezithombe ebanzi, kodwa kukhona uhlelo olunamandla lokuhlunga amaphakethe olusekelwe kuma-iptables noma ama-nftables.Kuye ngokusatshalaliswa kanye nenguqulo, ungavimba ithrafikhi emhlabeni jikelele, ngomsebenzisi, ngeqembu, noma ngekheli lendawo oya kuyo.
Umqondo wokuqala wokuvimba uhlelo oluthile ungaba vala ukufinyelela kumakheli noma izizinda ozisebenzisayoUkuze uthole lezi zindawo unezinketho eziningana: sebenzisa i-netstat (noma i-ss) ngenkathi uhlelo lokusebenza luxhuma, noma uqaphe izicelo ze-DNS ngezinsizakalo ezifana ne-dnsmasq run in verbose mode.
Uma izizinda sezitholiwe, ungaziqondisa kabusha emshinini wakho ngokungeza okufakiwe kohlobo “127.0.0.1 domain_to_block” ku-/etc/hostsNgakho-ke, noma yimuphi umzamo wokuxazulula leso sizinda uzohlala ungowasendaweni futhi uhlelo lokusebenza ngeke lukwazi ukuxhumana neseva yangempela.
Uma ukhetha ukusebenza ngqo nama-IP, ungakha futhi imithetho ye-iptables efana “ama-iptables -I OUTPUT -s ip_a_block -j Drop”Le mithetho ilahla yonke ithrafikhi ephumayo eya kulelo kheli. Ukuqinisekisa ukuthi iyasinda ekuqaliseni kabusha, kuyinto evamile ukuyifaka kuma-boot scripts afana ne-/etc/rc.local (ngaphambi komugqa "wokuphuma ku-0"), noma ukusebenzisa izinhlelo zokonga/zokubuyisela imithetho.
Ububi bale ndlela ukuthi Ukuvaleka kuthinta lonke uhleloNoma yiluphi uhlelo lokusebenza olufuna ukuxhumana nalezo zizinda noma ama-IP luzothinteka, hhayi nje lelo olithandayo. Ngaphezu kwalokho, lawo makheli angaba ngawamasevisi ahlanganyelwe owadingayo kwezinye izimo.
Ukuhlunga ngeqembu labasebenzisi ku-Linux ukuze kuvinjelwe izinhlelo zokusebenza ezithile kuphela
Enye indlela engcono ukuncika kuyo izimvume zomsebenzisi we-Linux kanye nesistimu yamaqembuUmqondo uwukudala iqembu elikhethekile lezinqubo "ezihlungiwe" bese utshela ama-iptables ukuthi avimbele yonke ithrafikhi evela ezinqubweni ezisebenza nalelo qembu.
Ukugeleza okuvamile kungaba yinto efana nale: okokuqala Udala iqembu elisha (isibonelo, “elihlungiwe”) nge-groupaddBese ufaka abasebenzisi ofuna ukubalawula (isibonelo, "umfundi") eqenjini eline-adduser, ukuze labo basebenzisi nabo babe ngamalungu alelo qembu.
Okulandelayo, uchaza umthetho we-iptables, isibonelo “ama-iptables -A OUTPUT -m umnikazi –umnikazi we-gid ohlungiwe -j UKUNQATSHWA”Lokhu kutshela uhlelo ukuthi noma yiliphi iphakethe lokukhipha elikhiqizwe yinqubo iqembu layo elisebenzayo "elihlungiwe" kufanele lenqatshwe.
Ukuze uqalise uhlelo ngaphansi kwalelo qembu elithile, ungasebenzisa umyalo “i-sg ehlungiwe «igama lohlelo»”Lokhu kushintsha iqembu eliyinhloko lenqubo libe "elihlungiwe" ngesikhathi sokwenziwa. Kusukela ngaleso sikhathi kuqhubeke, imikhawulo ye-iptables isebenza kuphela kulezo zinqubo, ngaphandle kokuthinta lonke uhlelo.
Le ndlela ivumela klama amaqembu ahlukene anamazinga ahlukene okufinyelelaLokhu kuvumela ezinye izinhlelo zokusebenza ukuthi zithumele ithrafikhi ezindaweni ezithile noma kumaphrothokholi, kuyilapho ezinye zivinjelwe ngokuphelele. Lokhu kuwusizo ikakhulukazi ezindaweni zemfundo noma ezabiwe, lapho abasebenzisi abaningi babelana ngomshini futhi udinga ukukhawulela ithrafikhi kumathuluzi athile kuphela.
Uma uhlanganisa le ndlela nokuhlunga kwesizinda kanye ne-port, Ungakha izinqubomgomo ezinembile kakhulu zomongo ngamunye wokusetshenziswa, nakuba kubiza izindleko zobunzima obukhulu bokuphatha kanye nesidingo sokuhlola ngokuphelele ushintsho ngalunye.
