Maitiro ekugadzirisa iyo firewall muUbuntu

Kufanana neese Linux distros, Ubuntu inotouya ne firewall yakaiswa. Iyi firewall, muchokwadi, inouya yakadzika mukati meiyo kernel. MuUbuntu, iyo firewall yekuraira mutsara interface yakatsiviwa neimwe yakati nyore kushandisa script. Nekudaro, ufw (Uncomplicated FireWall) zvakare ine graphical interface iyo iri nyore kushandisa. Mune ino posvo, isu tichapa nhanho-nhanho-diki-gwara rekuti ungashandise sei gufw, iyo graphical interface yeufw, kugadzirisa yedu firewall.

Usati waisa gufw, haisi zano rakaipa kutarisa mamiriro eufw. Kuti ndiite izvi, ndakavhura terminal ndokunyora kuti:

sudo ufw chimiro

Zvinobuda zvinofanirwa kutaura chimwe chakadai: "Mamiriro: haashande". Iyo ndiyo mamiriro ekupedzisira eiyo firewall muUbuntu: inouya yakaiswa asi yakaremara.

Kuisa gufw, ndakavhura Ubuntu Software Center ndokuitsvaga kubva ipapo.

Iwe unogona zvakare kuiisa kubva kune iyo terminal nekutaipa:

sudo apt-tora kuisa gufw

Kugadzira gufw

Kamwe yaiswa, unogona kuiwana kubva kuSystem> Administration> Firewall marongero.

Sezvauri kuona mune iyo skrini, ufw inoshanda nekutadza kubvuma zvese zvinobuda zvinongedzo uye kuramba zvese zvinouya zvinongedzo (kunze kweizvo zvine hukama neinobuda iwo). Izvi zvinoreva kuti chero chishandiso chaunoshandisa chinokwanisa kubatana nevekunze (ingave iyo Internet kana chikamu cheIntranet yako) pasina matambudziko, asi kana mumwe munhu achibva kune mumwe muchina achida kuwana yako, ivo havazokwanise.

Mitemo yese yekubatanidza yakachengetwa mufaira  / etc / default / ufw. Zvinoshamisa, ufw inovhara IPv6 traffic nekutadza. Kuti ikwanise, gadzirisa iyo faira / etc / default / ufw uye zvakashanduka IPV6 = kwete kubudikidza IPV6 = hongu.

Kugadzira tsika tsika

Dzvanya bhatani rekuwedzera muhwindo guru gufw. Pane matatu matatu ekugadzira tsika tsika: Yakagadziriswa, yakapusa, uye Yepamberi.

Kubva Preconfigured iwe unogona kugadzira akateedzana emitemo kune imwe nhamba yemasevhisi uye kunyorera. Iwo anowanikwa masevhisi ndeaya: FTP, HTTP, IMAP, NFS, POP3, Samba, SMTP, ssh, VNC uye Zeroconf. Izvo zvinoshandiswa zviripo ndezvi: Amule, Mafashama, KTorrent, Nicotine, qBittorrent, uye Transmission.

Kubva Rakareruka, iwe unogona kugadzira mitemo yeiyo default port. Izvi zvinokutendera iwe kuti ugadzire mitemo yemasevhisi uye kunyorera izvo zvisingawanikwe muPreconfigured. Kugadzirisa huwandu hwezviteshi, unogona kuzvimisikidza uchishandisa syntax inotevera: PORT1: PORT2.

Kubva kuAdvanced, unogona kugadzira yakanyanya yakatemwa mitemo uchishandisa sosi uye yekuenda IP kero uye madoko Pane sarudzo ina dziripo kutsanangura mutemo: tendera, ramba, ramba uye ganhurira. Mhedzisiro yekubvumira uye kuramba ndeye kuzvitsanangudza. Ramba kunodzosera "ICMP: kuenda kusingasvikike" meseji kune anenge achikumbira. Limit inokutendera iwe kudzikamisa huwandu hweakundikana kubatana kuyedza. Izvi zvinokudzivirira kubva pakurwiswa kwechisimba.

Kamwe mutemo paunowedzerwa, unozoonekwa muhwindo guru gufw.
Kamwe mutemo watogadzirwa, unozoratidzwa muhwindo guru reGufw. Iwe unogona zvakare kuona iwo mutemo kubva kune shell terminal nekutaipa Sudo ufw chinzvimbo.