Qaybinta loo sameeyay inay noqoto Firewall

Kuweena dunidan ku dhex milmay GNU / Linux iyo Software Bilaash ah, waxaa loo bartay xaqiiqda ah in maalin kasta aan ognahay qeybinta kala duwan, oo ku wajahan waxyaabo aad u kala duwan.

Maanta waxaan idin soo qaataa tusaale yar oo tan ah. Hagaag, waxaa jira dhowr (Badan) Qaybinta ku saleysan ama diirada saaraya inay noqdaan FireWall ama Firewall. Laakiin marka hore ... Muxuu cadaabku yahay gidaar?

Sida laga soo xigtay SAN Wikipedia.

Un galka dabka (brannmur Ingiriisiga) waa qayb ka mid ah nidaam ama shabakad loogu talagalay inay xannibto marinka aan la oggolayn, iyadoo loo oggolaanayo isgaarsiinta idman.

Waa aalad ama qalab loo qaabeeyey in lagu oggolaado, la xaddido, la kaydiyo, la dejiyo, taraafikada u dhexeysa baaxadda kala duwan ee ku saleysan xeerar iyo shuruudo kale.

Asal ahaan baal-dab-demis, maadaama badanaa la matalo. Waa gidaar jareysa ama faragelineysa gelitaanka, tani waxay labadaba ka imaan kartaa albaabka laga soo galo (Laga soo bilaabo internetka ilaa annaga) Ama lid ku ah ... Gudaha iyo dibedda.

Guud ahaan Firewalls-ka waxaa lagu rakibay aagga DMZ (aagga la masaafuriyey) Aaggan asal ahaan waa meesha uusan routerkeennu ku jimicsanin ama ku maareeynin gidaarradiisa gudaha (oo aan sidaa u badnayn). Sidan oo kale taraafikada oo dhan ayaa lagu ansaxiyaa adeegeena.

Sidoo kale waa in la caddeeyaa in qaybinta kasta loo isticmaali karo Firewall ama Router. Kaliya waxaa jira qaar horeyba "Diyaar u ah" ama loo sii diyaariyay. Waxyaabaha ay ka mid yihiin NIDS (Nidaamka Ogaanshaha Intrusion) IWM.

Mid kasta oo ka mid ah qaybinta ayaa leh PROs iyo CONS.

In kasta oo ay badan yihiin, haddana waxaan magacaabi doonnaa wax yar iyo fursadaha aad haysato.

ClearOs

Markii hore loo yaqaan ClarkConnect, qaybintaan ku saleysan Red Hat / CentOS, waa xal dhameystiran shirkadaha bixiya:

• Dab-damis Iptables.
• Nidaamka ogaanshaha soo gelitaanka GABAY
• Shabakad Gaar loo Leeyahay (PPPT, IPSec, OpenVpn)
• Wakiil leh shaandhaynta waxyaabaha ku jira (Squid, DansGuardian)
• adeegyada emaylka (Webmail, Postfix, SMTP, POP3/ s, IMAP/ s)
• Qalabaynta (Kolab)
• Database iyo Server Server (LAMP)
• Faylka Server iyo Adeegyada Daabacaadda (Samba iyo KOOBABKA)
• Flexshares (multiprotocol kaydinta midaysan iyadoo la adeegsanayo CIFS, HTTP/ S, FTP/ S, iyo SMTP)
• MultiWAN (Naqshadeynta Naqshadda Internetka ee Khaldan)
• Warbixinta tirakoobka nidaamka iyo adeegyada (MRTG iyo kuwa kale)

<h3Devil Linux

Waa qeybinta GNU / Linux oo loo adeegsanayo Router / Firewall, oo ka shaqeysa kana socota Live-CD, marka waxay awood u leedahay inay ka shaqeyso PC-du hore. Uma adeegsan qaab muuqaal ah, waxaa ku jira DNS, Web, FTP, adeegyada SMTP, aaladaha ay ka mid yihiin Mysql, Wget iyo Lynx, iyo adeegyada amniga sida OpenVPN iyo Shorewall. Waxay ku saleysan tahay Linux laga soo xoqo(Linux laga soo bilaabo salka) nidaamka dhisida qaybinta Linux kaas oo u oggolaanaya isticmaalaha inuu abuuro noocyo u gaar ah.
http://www.devil-linux.org/

Dab -damiska Endian

Waa qaybin GNU / Linux Ilo furan oo ku takhasusay Routing / Firewalling, oo ay sameeyeen Endian Srl oo Talyaani ah iyo bulshada Endian. Asal ahaan waxay ku saleysan tahay IpCop qeybinta kale oo iyaduna ahayd fargeeto ah 'SmoothWall'.

Nooca 2.2 wuxuu ka kooban yahay:

• Dab-damis (Labada Tilmaamood)
• Shabakadda Gaarka ah ee Khaaska ah (VPN) Gawaarida con OpenVPN o IPsec
• Web Antivirus
• Web anti-spam
• Iimayl-ka-hortagga fayraska
• Iimayl-ka-hortagga spam
• Wakiilka Transparent HTTP
• Sifeynta nuxurka
• Goobta / Xarig-la'aanta 
• Taageerada SIP VoIP
• Tarjumaadda Cinwaanka Shabakadda
• Cinwaan badan oo IP ah (magacyo)
• Isku xidhka websaydhka HTTPS
• Tirakoobka iskuxirka
• Diiwaanka taraafikada shabakadda
• Ugudbinta diiwaanada adeegaha dibada
• Adeegga DHCP
• Adeegga NTP
• IDS (Nidaamka Ogaanshaha Soo Gelitaanka)
• ADSL Taageerada Modem

http://www.endian.com/

Cafimat Fican

Waa qeybinta GNU / Linux BusyBox si aad uhesho gidaar / router kumbiyuutar lagu ridi karo bootable disk.

Cafimat Fican waxaa ilaaliya Thomas lundquist, oo ku jira horumar joogto ah. Nooca hadda jira waa 3.0.12

Shuruudaha

•   Intel 80386SX processor ama ka fiican
•   Laba kaar oo shabakad ah
•   1.44 MB floppy drive
•   12MB RAM

Waxaa ka mid ah:

• Liisaska xakamaynta gelitaanka
• ip-qarin (turjumaadda cinwaanka shabakadda)
• shaandhaynta baakadda
• waddo horumarsan
• Qaabaynta taraafikada
• PPPoE
• nidaamka baakadaha fudud, oo ay isticmaalaan daabacayaasha, VPN, qaabeynta taraafikada
• Ka soo gasho klogd / syslogd gudaha iyo meel fog
• Taageerada dekedda Serial adoo adeegsanaya konsole
• DHCP server iyo keydinta DNS ee shabakadaha gudaha

http://www.zelow.no/floppyfw/index.html

Qaar badan oo ka mid ah qaybinta ayaa sidoo kale lagu rakibi karaa noocyada qaar ee router.
Waxa ugu badan ee lagu rakibo router waa

Fur furan

Waa qaybinta GNU / Linux oo laga helay router-yada iyo aaladaha gundhigga ah. Waxay kakoobantahay xirmooyin kusaabsan 2000 baakado softiweer ah oo lagu rakibay lagana fogeeyay nidaamka maamulka xirmada opkg. FurWrt Waxaa loo qaabeyn karaa iyadoo la adeegsanayo iskuxirka khadka amarka ee 'BusyBox ash', ama isku xirka websaydhka 'LuCI'.

Operwrt wuxuu ku shaqeyn karaa router-yada CPE, albaabbada guryaha la dhigto, taleefannada casriga ah, kombiyuutarada jeebka ama PDA-yada iyo laptops yaryar sida OLPC, laakiin sidoo kale waa macquul inuu ku shaqeyn doono kombuyuutarrada x86 ee caadiga ah Mashruucu wuxuu kakooban yahay wiki, forum, SVN Source Version Control, iyo Trac oo loogu talagalay maaraynta mashruuca, hagaajinta cilladaha, iyo horumarinta koodhka Taageero farsamo oo dheeri ah ayaa lagu bixiyaa IRC.

http://openwrt.org/

Kuwa kale ... * m0n0wall
PfSense
*Clark Connect
* eBooks
* Dhabarka siman
* Aan la kala bixin
* IPCop

Waxaan ku soo gabagabeynayaa inaan dhaho maxaa yeelay waxaad rakibtay mid ka mid ah qeybintaan, shabakadaadu waxay noqon doontaa tan ugu amniga badan adduunka. Dhammaan waxay kuxirantahay isticmaalka, qaabeynta iyo dayactirka aad siiso nidaamka oo dhan.

Waad ku mahadsan tahay!