Yadda ake ɓoye zirga-zirgar DNS a cikin Linux tare da DNSCrypt?

syeda

Yau kariyar bayananku, haka kuma haɗin yanar gizonku da na'urorinku ba wani abu bane yanzu cewa kawai dole ne mutanen da ke da cikakken ilimi ko kamfanoni su yi.

A wannan lokaci bari mu ga yadda ake kara sirrinmu a cikin Linux, abin da za mu yi shi ne karɓar ikon wanda zai iya ganin bayanan binciken mu na DNS.

Kodayake ba zai ɓoye dukkan hanyoyin IP ba, zai hana kai hare-hare ɓoyayyen DNS, yana tabbatar da tsaro sosai.

A kan Linux, hanya mafi kyau don ɓoye zirga-zirgar DNS shine amfani da DNSCrypt.

DNSCrypt yarjejeniya ce ta hanyar sadarwa wacce aka tsara don gaskata zirga-zirgar DNS (Sunan Tsarin Yanayi) tsakanin mai amfani da kwamfutar da kuma sunayen maimaita sabobin.

DNSCrypt ya kunshi zirga-zirgar DNS da ba a canza ba tsakanin abokin ciniki da mai warware DNS a cikin aikin ƙira don gano ɓoye. Kodayake ba ta samar da tsaro daga karshe zuwa karshen ba, amma tana taimakawa wajen kare cibiyar sadarwar cikin gida da kai hare-hare a tsakanin-mutum.

Hakanan yana rage hare-haren fadada UDP na tushen UDP ta hanyar buƙatar tambaya ta zama ta fi girma kamar amsar da ta dace. Sabili da haka, DNSCrypt yana taimakawa hana ɓarkewar DNS.

Hakanan ana iya amfani da DNSCrypt don ikon samun dama.

Yadda ake girka DNSCrypt akan Linux?

Domin girka wannan kayan masarufi akan tsarin mu, dole ne mu bi matakan da muka raba a ƙasa gwargwadon rarraba Linux da suke amfani da shi.

Ya kamata ku sani cewa an haɗa mai amfani na DNSCrypt a kusan kusan yawancin rumbunan rarraba Linux.

A datsar shigar da DNSCrypt akan Debian, Ubuntu, Linux Mint da rarrabawar da aka samo daga waɗannan, dole ne su bude tasha kuma su aiwatar da wannan umarnin a ciki:

sudo apt install dnscrypt-proxy

Ga yanayin da wadanda suke masu amfani da Arch Linux da abubuwanda suka samo asali:

sudo pacman -S dnscrypt-proxy

Wadanda suke amfani Fedora da Kalam:

sudo dnf install dnscrypt-proxy -y

A ƙarshe, don masu amfani da kowane nau'ikan OpenSUSE:

sudo zypper shigar dnscrypt-wakili

Yadda zaka daidaita DNSCrypt akan Linux?

Da zarar an shigar da mai amfani akan tsarin, ya zama dole mu saita shi tunda duk da an girka shi, baya aiki har yanzu.

Don wannan dole ne muyi amfani da sabis na DNS, wanda akwai zaɓuɓɓuka da yawa daga kyauta zuwa zaɓuɓɓukan biya.

Yana da mahimmanci a tafi tare da madadin DNS, maimakon tsayawa tare da wanda ISP dinka ke basu, idan kana son karin tsaro.

Zasu iya zabar wanda yafi dacewa dasu, muna da zabin budeDNS, CloudFlare da sauransu,

Yanzu Dole ne mu danna kan gunkin hanyar sadarwa kuma mu gyara haɗin da aka saba.

naní Zamu sanya kanmu a cikin zaɓin IPv4, kuma mu nemi "Sabar DNS". A cikin akwatin rubutu na "DNS Servers", liƙa adireshin mai zuwa:

Kawai ƙara adireshin DNS ɗin nan pDon IPv4:

1.0.0.1

Duk da yake don Don IPv6:

2606:4700:4700::1111,2606:4700:4700::1001

Bayan daidaitawa da software na DNSCrypt, yana da matukar mahimmanci a sake farawa manajan cibiyar sadarwa tare da umarnin mai zuwa.

solo kawai rubuta:

sudo systemctl restart NetworkManager.service

Saitunan asali waɗanda ke ba da izinin kayan aikin DNSCrypt suna cikin wuri. Abu na karshe da za ayi shine aiwatar da bayanan DNS akan layin umarni.

sudo dnscrypt-proxy -R cloudflare-dns.com

Kuma voila, tuni suna amfani da wannan babban sabis ɗin a cikin tsarin su. Idan kana son tsayar da aikin DNSCrypt, kawai ka rubuta wannan umurnin

sudo systemctl stop dnscrypt-proxy.service

Y don kashe shi kwata-kwata, kuma hana shi gudana a farawa, kawai buga:

sudo systemctl disable dnscrypt-proxy.service

Kuna iya samun bayanai da yawa akan gidan yanar gizo, kan yadda ake saita DNSCrypt, da kuma sabis ɗin DNS daban-daban waɗanda za'a iya amfani dasu a ciki, kawai bincika Wutar DNSCript. Idan kana son karin bayani game da shi, zaka iya tuntuba wannan haɗin kuma wannan wannan.


Bar tsokaci

Your email address ba za a buga. Bukata filayen suna alama da *

*

*

  1. Wanda ke da alhakin bayanan: Miguel Ángel Gatón
  2. Manufar bayanan: Sarrafa SPAM, sarrafa sharhi.
  3. Halacci: Yarda da yarda
  4. Sadarwar bayanan: Ba za a sanar da wasu bayanan ga wasu kamfanoni ba sai ta hanyar wajibcin doka.
  5. Ajiye bayanai: Bayanin yanar gizo wanda Occentus Networks (EU) suka dauki nauyi
  6. Hakkoki: A kowane lokaci zaka iyakance, dawo da share bayanan ka.

  1.   AlamarVR m

    Barka dai. Babban labarin. Kuma yana da ban sha'awa azaman rigakafin harin MitM. Amma na sami kuskuren mai zuwa "[ERROR] Ba warware matsalar suna [Cloudflare-dns.com] da aka samo a cikin [/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv] list" lokacin shigar da umarnin sudo dnscrypt-proxy - R cloudflare-dns.com.
    Bincika fayil din dnscrypt-resolvers.csv kuma ba a jera DNS CloudFlare ba.
    Shin zai yiwu cewa ba a sabunta shi ba ko kuma saboda wasu dalilai ba a sanya shi ba?

    Gode.

  2.   Gregory m

    Ina tsammanin "Cloudflare-dns.com" yana nufin sabar DNS ɗin da zaku yi amfani da shi maimakon IPS DNS