Girkawa da Sanyawa na dnscrypt-wakili + dnsmasq a cikin Archlinux

Gabatarwa: 
  

Menene dnscrypt-wakili?
- DNSCrypt ɓoye da kuma tabbatar da zirga-zirgar DNS tsakanin mai amfani da mai warware DNS, yana hana ɓoyayyen gida na tambayoyin DNS, tabbatar da cewa an aika da martani ta hanyar uwar garken da aka zaɓa. (wiki)

Menene dnsmasq?
- dnsmasq yana ba da sabis kamar cache na DNS da uwar garken DHCP. A matsayin uwar garken sunan yanki (DNS), zai iya ɓoye tambayoyin DNS don haɓaka saurin haɗi zuwa shafukan da aka ziyarta a baya, kuma, a matsayin uwar garken DHCP, ana iya amfani da dnsmasq don samar da adiresoshin IP na ciki da hanyoyi zuwa kwakwalwa akan LAN. Oraya ko duka waɗannan ayyukan ana iya aiwatarwa. dnsmasq yana dauke da nauyi da sauƙin daidaitawa; An tsara shi don amfani a kan komputa na sirri ko don amfani a kan hanyar sadarwar da ke ƙasa da kwamfutoci 50. Hakanan yana zuwa tare da sabar PXE. (wiki)

Me nayi amfani da shi?
- Don shirya fayilolin sanyi da na yi amfani da su Nano.
- A kowane lokaci nayi shi da asusun ajiya na, amma idan sun kaga sudo, za su iya amfani da shi a hankali.
- Don bincika ma'ajiyar tare da umarnin haƙa, ana samun sa a cikin kayan aikin ɗaure
a cikin wuraren aikin hukuma, pacman -S kayan aiki 🙂

Shigarwa:

  • Kamar tushe ko amfani da sudo a tashar mu ko tty mun sanya dnscrypt-wakili da dnsmasq fakitoci kamar haka:
  • Sakon gargadi saboda na riga na girka su, dole kawai ku tabbatar ta latsa Shigar da:

Kafa:

1 - Bari mu kunna dnscrypt-wakili (tuna azaman tushe ko amfani da sudo):


2 - Yanzu muna shirya fayil ɗin /etc/resolv.conf kuma a cikin sunan mai suna mun share abin da ke wurin kuma muka sanya 127.0.0.1 (idan kuna so za ku iya yin ajiyar fayil ɗin) kuma ya kamata ya zama kamar haka:

  • La'akari da cewa NetworkManager yana rubuta fayil din resolv.conf, abin da zamu yi shine kare shi daga rubutu tare da umarni mai zuwa:


    3 - Yanzu abin da za mu yi shi ne neman sabar da ke kusa da inda muke, amma zaka iya amfani da wanda ya zo ta hanyar tsoho wanda shine dnscrypt.eu-nl, ana iya buɗe jerin tare da localc yana nan: / usr / share / dnscrypt-wakili / dnscrypt-resolvers.csv kamar haka:

  • Idan muna so mu gyara sabar da ke warware tsoho DNS za mu iya gyara kamar haka:
  • A ƙarshen fayil ɗin a cikin [Sabis] muna gyara abin da aka zaɓa a launin toka kuma mun sanya sabar da muka zaɓa a cikin jerin:


    4 - Ta hanyar tsoho dnscrypt-wakili yana amfani da tashar jiragen ruwa 53, tunda dnsmasq ma yayi, don haka abin da zamu yi shine canza shi ta sake amfani da:
    systemctl edit dnscrypt-proxy.service –full kuma a bangaren [Socket] mun barshi kamar haka:

Muna adana canje-canje kuma muna rufewa.

5 - Yanzu muna daidaita dnsmasq, zamu shirya fayil ɗin /etc/dnsmasq.conf kuma ƙara waɗannan layi uku a ƙarshen:

ba a warware ba
saba = 127.0.0.1 # 40
adireshin saurara = 127.0.0.1

Muna adana canje-canje kuma muna rufewa.

6 - Yanzu zamuyi haka:
- Mun sake kunnawa dnscrypt-wakili:
systemctl sake kunnawa dnscrypt-wakili
- Muna kunna dnsmasq:
systemctl kunna dnsmasq
- Muna aiwatar da dnsmasq:
systemctl fara dnsmasq
- Mun sake kunna haɗin intanet ɗinmu:
systemctl sake farawa NetworkManager

7 - Yanzu muna gwada idan da gaske yana aiki tare da ping misali zuwa google.com.ar:

8 - Muna bincika idan cn ɗin dns yayi aiki tare da umarnin tona:

- Anan zamuyi laakari da cewa tono na farko dana fara akwai jinkiri na 349 msec kuma idan na sake yin tambaya tare da tono, menene ya faru? 0 msec, don haka yana ɓoye daidai.

9 - Shirye dnscrypt-wakili da dnsmasq saitattu kuma suna aiki yadda yakamata!

Note: Ina so in fayyace bayan bincike a wurare da yawa bai yi min aiki ba ta kowace hanya da suka nuna a cikin wiki, fassarar Sifaniyanci ba ta da kyau (zai zama tambaya idan wani ya fassara da kyau ko zan yi shi a wani lokaci) don haka na yi amfani da sigar a Turanci. Don haka na dogara sosai akan wiki, duk yabo a gare su. A wannan yanayin, waɗannan matakan da na yi amfani da su kuma sun yi aiki don NI.
Duk wata tambaya ko matsala da suka sanar dani kuma zamuyi magana akan ta har sai tayi aiki!

Gudun burin! 😀


Bar tsokaci

Your email address ba za a buga. Bukata filayen suna alama da *

*

*

  1. Wanda ke da alhakin bayanan: Miguel Ángel Gatón
  2. Manufar bayanan: Sarrafa SPAM, sarrafa sharhi.
  3. Halacci: Yarda da yarda
  4. Sadarwar bayanan: Ba za a sanar da wasu bayanan ga wasu kamfanoni ba sai ta hanyar wajibcin doka.
  5. Ajiye bayanai: Bayanin yanar gizo wanda Occentus Networks (EU) suka dauki nauyi
  6. Hakkoki: A kowane lokaci zaka iyakance, dawo da share bayanan ka.

  1.   mara suna m

    Ban lura da wani bambanci ba tare da dnsmasq, wataƙila tare da ƙarin masu amfani da cache ɗin zai yi aiki, aƙalla da kwamfutata kawai ban ga canje-canje a cikin saurin ba.

    tono sau tare da kuma ba tare dnsmasq ya kasance ba, wataƙila wani ya san game da wata hanyar kuma ya raba ta.
    gaisuwa

    1.    Kankara m

      kamar yadda aka gani akan allon, zaku iya ganin ofAN bambanci, ina tsammanin zai dogara ne akan bandwidth ɗin ma ... 🙂

  2.   mara suna m

    Hoton da aka haɗe:
    imgur .com / 9RQ7yhF.png

  3.   DanielSc3 m

    Har yaushe adireshin dns yake a cikin ma'ajiya tare da dnsmasq? Na tuna na gwada shi wani lokaci da suka wuce kuma bayan fewan mintoci, 10 ko 5, dnsmasq ya manta komai

    1.    Kankara m

      Ban sami ganin wannan ba ... ma'ana mai kyau. Za'a shawarce shi, wataƙila wani masanin ya sani kuma zai amsa mana 🙂

  4.   hikima m

    Barka dai lokacin da na bada a matsayin tushen "systemctl fara dnsmasq" Na samu kuskure, lokacin bada umarni "systemctl status dnsmasq.service" wannan shine abinda na samu:

    Ns dnsmasq.service - DHCP mai nauyi da caching uwar garken DNS
    Loaded: ɗora Kwatancen (/usr/lib/systemd/system/dnsmasq.service; kunna; saiti mai saiti: naƙasasshe)
    Mai aiki: bai yi nasara ba (Sakamakon: lambar fita) tun Litinin 2016-03-07 11:41:41 ART; 18s da suka wuce
    Docs: mutum: dnsmasq (8)
    Tsarin aiki: 7747 ExecStart = / usr / bin / dnsmasq -k –enable-dbus –user = dnsmasq –pid-file (lambar = ta fita, status = 2)
    Tsarin aiki: 7742 ExecStartPre = / usr / bin / dnsmasq –test (lamba = an fita, status = 0 / SUCCESS)
    Babban PID: 7747 (lambar = an fita, matsayi = 2)

    Talata 07 11:41:41 Hikimar tsari [1]: Farawa DHCP mai nauyi da caching uwar garken DNS…
    Tue 07 11:41:41 Hikimar dnsmasq [7742]: dnsmasq: tsarin daidaita kalma Ya yi kyau.
    Tue 07 11:41:41 Hikimar dnsmasq [7747]: dnsmasq: an kasa samar da kwandon sauraro na tashar jiragen ruwa 53: Adireshin da ake amfani da shi
    Tue 07 11: 41: 41 Tsarin hikima [1]: dnsmasq.service: Babban tsari ya fita, lambar = ta fita, status = 2 / INVALIDARGUMENT
    Tue 07 11:41:41 Hikimar tsarin [1]: Ba a yi nasarar fara DHCP mai nauyi da caching uwar garken DNS ba.
    Tue 07 11:41:41 Hikimar tsarin [1]: dnsmasq.service: Naúrar ta shiga halin gazawa.
    Tue 07 11:41:41 Hikimar tsarin [1]: dnsmasq.service: Ba a yi nasarar sakamako ba 'lambar fita'

    Me zan yi? Na gode.

    1.    Kankara m

      Na bi matakan zuwa wasiƙar, bincika asalin koyawa akan shafin yanar gizo na. Na bar bidiyo ma.

  5.   gonza m

    @ice kankara, kwatanta wannan post ɗin da bidiyon da kukayi akan sa zan iya ganin cewa akwai kuskure a lamba mai lamba 4 da aka rubuta anan. Kuma kuskuren shi ne cewa fayil ɗin da za a shirya ba "systemctl edit dnscrypt-proxy.service –full" ba, amma dole ne a gyara "systemctl edit dnscrypt-proxy.socket –full". (Lura cewa maimakon .sabis dole ne ka rubuta .socket).

    Wannan shine dalilin da yasa @wisse wisse ya sami wannan kuskuren lokacin da ake son fara aikin dnsmasq (tunda abu daya ya faru dani ma).

    Na gode!