Abu ne gama gari, musamman a kamfanoni, cewa akwai wasu rukunin yanar gizo waɗanda aka ƙuntata damar shiga don wasu takamaiman dalili (wani lokacin wauta ne, wani lokacin kuma ba), kamar gidajen yanar gizo, sakonnin yanar gizo da sauransu.
Gabaɗaya, ana yin waɗannan ƙuntatawa ta hanyar toshe yankin rukunin yanar gizon da ake magana, tare da ƙara ƙuntatawa ga wasu tashoshin jiragen ruwa.Mene za mu yi to idan muna buƙatar samun wasu bayanai nan da nan?
Yawancin lokaci masu amfani da Windows yi amfani da shirye-shirye kamar Putty (wanda kuma ake samu akan GNU / Linux)ko 'Yancin ku, amma akwai wata hanyar kuma da ta fi aminci don samun damar shiga shafukan da muka ƙi, ta amfani da su SSH y Sok5.
Ga wannan misalin, Ina dogaro da cewa muna da bude tashoshi 80, 3128 (wanda aka saba amfani dashi don kewayawa) da kuma 9122, kuma za mu ga ainihin lamura guda biyu. Ba shine burina ba tare da wannan labarin inyi cikakken bayani akan menene SSH, Sok5 kuma yadda suke aiki, zamu bar hakan zuwa wani lokaci. Za mu ga misalai biyu:
- Haɗawa zuwa wata PC ta SSH ta amfani da adreshin IP.
- Haɗa zuwa wani PC ta SSH ta amfani da yanki (ta hanyar DNS).
Me muke bukata?
- Kwamfuta mai samun damar Intanet wanda zamu iya samun damar ta SSH.
- An saka SSH ba shakka.
- Kayan kwalliya (idan har muna bayan wakili).
Mun bude tashar mota mun saka (game da Debian):
$ sudo aptitude install ssh corkscrew
Yayi .. Na riga na girka Yaya zan haɗa?
Abu ne mai sauki. Mun bude tashar mota mun saka ssh -p 443 mai amfani @ internet_computer_ip:
ssh -p 9122 -D 1080 elav@192.168.1.1
Sigogi -p Kamar yadda yake mai ma'ana, ana amfani dashi don kafa ta wacce tashar da zamu haɗo. Wannan mai sauki Yanzu, muna buɗe zaɓin mai bincike (a wurina Firefox) kuma a cikin Zaɓuɓɓukan hanyar sadarwa, kawai muna alama zaɓi don amfani Sabar Sabuwa kuma mun sanya:
127.0.0.1:1080
Wannan ya isa kewayawa.
Mene ne idan muna bayan wakilin?
Yana iya zama lamarin cewa muna bayan uwar garken wakili mai matukar takurawa ko kuma kawai kawai ISP baya bamu damar haɗawa ta hanyar adireshin IP, don haka dole ne muyi hakan DNS. Wannan shi ne inda ya shigo don yin wasa Corkscrew. Don amfani da wannan aikace-aikacen, duk abin da zamu yi shine ƙirƙirar fayil a cikin babban fayil ɗin tare da editan da muke so .ssh a cikin namu / gidada ake kira saiti:
$ vim ~/.ssh/config
kuma a ciki mun sanya wani abu kamar haka:
host dominio.net
user tu_usuario
hostname dominio.net
port 9122
proxycommand corkscrew IP_Proxy 3128 %h %p
DynamicForward 1080
Compression yes
LocalForward 8888 localhost:8888
Bayyana wannan kadan. A cikin ma'aunin rundunar mun sanya URL ɗin sabar da za mu haɗu da ita (wanda dole ne a sami SSH ta 9122, kamar yadda muka gani a wannan sakon. A cikin siga umarni bayan kwandishan mun sanya IP na wakilinmu ko FQDN, alal misali: wakili.domain.net da tashar jirgin ruwa da ake amfani da ita don kewaya.
Yanzu yakamata mu bude tashar mota mu sanya:
ssh usuario@dominio.net
Yanzu, bayani na karshe. Yana iya zama dole don gyara siga a cikin daidaitawar Firefox idan ba mu da haɗi. Mun bude shafin kuma buga game da: saiti. Mun yi alƙawarin cewa ba za mu sanya hannayenmu a cikin saitunan ba kuma muna neman:
network.dns.disablePrefetch
Kuma idan yana ciki arya mun sanya shi a ciki gaskiya.
Madalla, Ina so ne kawai in sami sabar da zan iya yin ta ta hanyar aiki ba wai kawai aikin tsakanin kwamfutoci 2 a cikin cibiyar sadarwar ku ba:)…
Tambaya ɗaya: Ba za ku iya kewaya zuwa ba desdelinux.net daga https?
Nope, yanzun nan bazaka iya ba. Dole ne mu sayi takardar shaidar SSL, kuma tana cin kusan $ 60 a wata ko shekara, kuɗin da bamu da 🙁 ... yi haƙuri aboki.
Kuma me yasa ba takaddar takaddar hannu ba?
Ban san da yawa game da shi ba, amma idan muka samar da satifiket da kanmu, to burauzarku za ta gaya muku cewa ba a amince da shafin ba kuma cewa ... 🙁
Idan na tuna daidai, a ganina ban taɓa ganin takaddun shaida iyakance zuwa kusan 15 USD a kowace shekara ba, tabbas wannan ya dogara da mai ba da sabis ɗin talla. Amma a bayyane, don shafi (na jama'a ta ɗabi'a) Ban ga buƙatar yin binciken HTTPS ba sai dai watakila don tabbatar da cewa bayanin da muke gani da gaske asali ne kuma ba ɓangare na harin kai tsaye ba (ko Hakanan sha'awar na iya zama alama ce cewa muna samun ɗan izgili) 😉
a kan sabar sock, kuna ɓatar da ɗigo a 127.0.0.1:1080
Na gode. A yanzu haka na gyara shi.
Da kyau in faɗi, SSH yana da ban sha'awa sosai ...
hehehe haka ne, baku san abubuwan al'ajabi da za a iya yi ba sai tare da haɗin SSH 😀
Yana iya yuwuwa cire kwandon murfi daga lissafin, aƙalla don Firefox.
A cikin "game da: jituwa", saita shigarwar network.proxy.socks_remote_dns gaskiya ne, wanda a batun socks v5 wakili yana haifar da buƙatun DNS da wakili na socks suma za su yi.
Layin haɗin yanar gizo na ba shi da manyan ƙuntatawa, don haka ban san ko wannan zai yi aiki ba. Gwada da rahoto. 😉
Wani shawarar da na gani a can shine don amfani -4D maimakon -D don ƙirƙirar wakili kawai akan adireshin ipv4. Wannan a bayyane yake inganta haɗin haɗin kaɗan.
A ƙarshe: idan ba kwa son aiwatar da duk wani umarni mai nisa, kuna iya amfani da ma'auni a ƙarshen -N (don haka muke kaucewa sanya hular kwano), kuma don cire haɗin kawai zamu bada Ctrl + C.
Na gode da shawarar Hugo, Dole ne a gwada. Af, tare da duk wannan haɗin kuma ina amfani da allo 😀
Ina kuma amfani da shi, kodayake ta hanyar byobu. A hakikanin gaskiya, akwai wasu lokuta da na kirkiro babbar matsala saboda na sami damar karbar bakuncin wadanda na samu damar zuwa wasu rundunonin da ni ma na samu damar ganawa da wasu, da dai sauransu. Na dan lokaci na gama komai saboda ya yi mini wuya in san daga inda nake shiga inda, hehehe.
Hugo game da yanayin, ka kira ni daga gidanka a wayata in sake kiranka back
Baya ga -4D (don inganta haɗin) da -N (don gaya wa SSH cewa za mu tura tashar jiragen ruwa kawai) za mu iya ƙara amintattun maɓallan ga ɓangarorin biyu na haɗin da kuma & a ƙarshen layin kiran SSH zuwa fara rami ta hanyar atomatik
Da alama muna da fayilolin da aka saita daidai:
~ / .ssh /
izini_keys2
id_rsa
id_rsa.pub
akan injunan da ke cikin haɗin, umarnin ƙarshe zai kasance:
$ssh -p 9122 -4D 1080 -N zama @ 192.168.1.1 &
Kuna iya ƙara shi zuwa mu /etc/rc.local don tabbatar da cewa haɗin haɗin yana kafa ta atomatik duk lokacin da tsarin ya fara.
Bugu da ƙari, ta amfani da pm-suspend da eth-tool za mu iya saita /etc/rc.local don ya farfaɗo da injin da zai yi aiki a matsayin wakili ta hanyar intanet kuma ya haɗa kai tsaye da shi sannan ya sake barin shi a jiran aiki kuma- by lokacin da muka rufe tsarin mu ...
Abin farin ciki ding
Kyakkyawan gudummawa .. Na gode 😀