Nzira yekunyora sei DNS traffic muLinux neDNSCrypt?

Nhasi kudzivirirwa kwedata rako, pamwe nekubatana kwako kunetiweki uye zvishandiso zvako hazvichisiri chimwe chinhu izvozvo chete vanhu vane ruzivo rwemberi kana makambani anofanirwa kuita.

Pachiitiko ichi ngatione kuti tingawedzera sei kuvanzika kwedu muLinux, zvatichaita kutora kutonga kwekuti ndiani anogona kuona yedu DNS yekutarisa ruzivo.

Kunyangwe iyo isingavanze zvachose IP traffic, ichadzivirira njodzi DNS spoofing kurwisa, kuve nechokwadi chengetedzo huru.

PaLinux, nzira yakanakisa yekunyorera DNS traffic kushandisa DNSCrypt.

DNSCrypt inonzi network protocol yakagadzirirwa kuratidza DNS traffic (Domain Name System) pakati pemushandisi wemakomputa nemazita anodzokororwa emaseva

DNSCrypt inoputira isina kugadziriswa DNS traffic pakati pemutengi uye DNS resolutioner mune cryptographic kuvaka kuitira kuti uone spoofing. Kunyangwe iyo isingape chengetedzo yekupedzisira-kumagumo, inobatsira mukudzivirira network yemuno pakurwiswa nemurume-mu-wepakati.

Izvo zvakare zvinodzikamisa UDP-yakavakirwa kukwidziridzwa kurwisa nekuda kuti mubvunzo uve unenge wakakura senge mhinduro inoenderana. Naizvozvo, DNSCrypt inobatsira kudzivirira DNS spoofing.

DNSCrypt inogona zvakare kushandiswa pakuwana kutonga.

Maitiro ekuisa DNSCrypt paLinux?

Kuti tigoisa izvi zvinoshandiswa pane yedu system, isu tinofanirwa kutevedzera nhanho dzatinogovana pazasi zvinoenderana nekuparadzirwa kweLinux kwavari kushandisa.

Iwe unofanirwa kuziva kuti iyo DNSCrypt yekushandisa inosanganisirwa zvirinani mukati meakawanda ezvinyorwa zveLinux zvakagoverwa.

To pruner kuisa DNSCrypt paDebian, Ubuntu, Linux Mint uye kugovera kunobva pane izvi, ivo vanofanirwa kuvhura terminal uye voita unotevera kuraira mairi:

sudo apt install dnscrypt-proxy

Kana iri avo vari Arch Linux vashandisi uye zvigadzirwa:

sudo pacman -S dnscrypt-proxy

Avo vari kushandisa Fedora uye zvigadzirwa:

sudo dnf install dnscrypt-proxy -y

Pakupedzisira, ye avo vanoshandisa chero vhezheni yeOverSUSE:

sudo zypper gadza dnscrypt-proxy

Maitiro ekugadzirisa DNSCrypt paLinux?

Kamwe iko kuiswa kwacho paakaiswa pahurongwa, zvinodikanwa kuti isu tigadzirise sezvo kunyangwe yaiswa, haisi kushanda izvozvi.

Kune izvi isu tinofanirwa kushandisa yeDNS sevhisi, iyo pane zvakawanda zvingasarudzwa kubva mahara kusvika zvakabhadharwa sarudzo.

Izvo zvakakosha kuti uende neimwe nzira DNS, panzvimbo yekunamatira neiyo ISP yako inovapa, kana iwe uchida kumwe kuchengetedzeka.

Ivo vanogona kusarudza iyo inokodzera ivo zvakanyanya, isu tine sarudzo dze openDNS, CloudFlare pakati pevamwe,

Iye zvino Isu tinofanirwa kubaya pamambure icon uye nekugadzirisa default kubatana kwayo.

Panoí Tiri kuzozvimisikidza mune IPv4 sarudzo, uye totsvaga "DNS Servers". Mune "DNS Seva" zvinyorwa bhokisi, namatidza inotevera kero:

Ingo wedzera inotevera DNS kero pZve IPv4:

1.0.0.1

Panguva ye IPv6:

2606:4700:4700::1111,2606:4700:4700::1001

Mushure mekumisikidza iyo DNSCrypt software, zvinonyanya kukosha kuti maneja maneja atangiswezve nemirairo inotevera.

Solo nyora chete:

sudo systemctl restart NetworkManager.service

Iwo marongero ekutanga anotendera iyo DNSCrypt chishandiso kuti ishande iri munzvimbo Chinhu chekupedzisira kuita kuisa iyo DNS mbiri pane yekuraira tambo.

sudo dnscrypt-proxy -R cloudflare-dns.com

Uye ndizvozvo, ivo vatove kushandisa iri basa hombe mumasisitimu avo. Kana iwe uchida kumisa iyo DNSCrypt sevhisi, ingo nyora unotevera kuraira

sudo systemctl stop dnscrypt-proxy.service

Y Kuimisikidza zvachose, uye kuidzivirira kubva kumhanya pakutanga, ingo nyora:

sudo systemctl disable dnscrypt-proxy.service

Unogona kuwana ruzivo rwakawanda pawebhu, maitiro ekugadzirisa DNSCrypt, pamwe neese akasiyana maDNS masevhisi anogona kushandiswa mariri, ingo tarisa iyo DNSCript Wiki. Kana iwe uchida kuziva zvakawanda nezvazvo, unogona kubvunza Iyi link uyewo uyu mumwe.