Indlela yokuqwalasela i-firewall kwi-Ubuntu

Njengazo zonke i-Linux distros, Ubuntu sele uza ne-firewall (firewall) efakiweyo. Esi siqhoboshi somlilo, enyanisweni, sifakwe kwi-kernel. Kwi-Ubuntu, indawo yomlilo yomda wokujongana nomlilo yathatyathelwa indawo yinto elula ukuyisebenzisa. Nangona kunjalo, i-ufw (i-FireWall engacacanga) nayo ine-graphical interface ekulula ukuyisebenzisa. Kule posi, siza kubonisa isikhokelo sinyathelo-nge-nyathelo malunga nendlela yokusebenzisa gufw, ujongano lomfanekiso we-ufw, ukumisela i-firewall yethu.


Ngaphambi kokufaka i-gufw, ayilo luvo olubi ukujonga imeko ye-ufw. Ukwenza oku, ndavula i-terminal kwaye ndabhala:

sudo ufw isimo

Iziphumo kufuneka zithethe into efana nale: "Isimo: akusebenzi". Leyo yimeko engagqibekanga ye-firewall kwi-Ubuntu: ifakwe kodwa ikhutshaziwe.

Ukufaka i-gufw, ndavula iZiko leSoftware Ubuntu ndalikhangela ukusuka apho.

Ungayifaka nakwisiphelo sendlela ngokuchwetheza:

Sudo apt-fumana ukufaka gufw

Ukuseta gufw

Nje ukuba ifakwe, ungayifumana kwiNkqubo> uLawulo> Useto lweFirewall.

Njengoko ubona kwi-skrini, i-ufw isebenza ngokungagqibekanga yamkela lonke unxibelelwano oluphumayo kwaye iyala lonke unxibelelwano olungenayo (ngaphandle kwezo zinxulumene neziphumayo). Oku kuthetha ukuba nasiphi na isicelo osisebenzisayo siya kuba nakho ukunxibelelana ngaphandle (nokuba yi-Intanethi okanye inxenye ye-Intranet yakho) ngaphandle kweengxaki, kodwa ukuba umntu ovela komnye umatshini ufuna ukufikelela kweyakho, ngekhe bakwazi.

Yonke imigaqo-nkqubo yoqhagamshelo igcinwe kwifayile  / njl / okungagqibekanga / ufw. Isimanga, ufw uvimba i-IPv6 traffic ngokungagqibekanga. Ukuyenza, hlela ifayile / njl / okungagqibekanga / ufw notshintsho IPV6 = hayi yi IPV6 = ewe.

Ukudala imigaqo yesiko

Cofa indawo yokongeza kwiwindows ephambili yegufw. Kukho iithebhu ezintathu zokwenza imigaqo yesiko: Kulungiselelwe kwangaphambili, kulula, kwaye kuqhubekile.

Ukusuka kokuQinisekiswa kwangaphambili kunokwenza uluhlu lwemithetho yenani elithile leenkonzo kunye nokusetyenziswa. Iinkonzo ezikhoyo zezi: FTP, HTTP, IMAP, NFS, POP3, Samba, SMTP, ssh, VNC kunye neZeroconf. Izicelo ezikhoyo zezi: Amule, uNogumbe, KTorrent, Nicotine, qBittorrent, kunye noThumelo.

Ukusuka ngokulula, unokwenza imigaqo kwizibuko elisisiseko. Oku kukuvumela ukuba wenze imigaqo yeenkonzo kunye nezicelo ezingafumaneki kulungiselelwe kwangaphambili. Ukuqwalasela uluhlu lwamachweba, ungasetha usebenzisa le syntax elandelayo: PORT1: PORT2.

Ukusuka kuPhambili, unokwenza imigaqo ethe ngqo ngakumbi usebenzisa iidilesi ze-IP apho ivela khona kunye namazibuko. Zine iindlela onokukhetha kuzo ukuchaza umthetho: vumela, khanyela, khanyela, kunye nomda. Iziphumo zokuvumela nokwala ziyazicacisa. Ukwala kuya kubuyisa "ICMP: indawo engafikelelekiyo" umyalezo kulowo ufaka isicelo. Umda ukuvumela ukuba unciphise inani lemizamo yonxibelelwano engaphumelelanga. Oku kukukhusela ekuhlaselweni ngamandla.

Nje ukuba umthetho wongezwe, uya kuvela kwiwindows yegufw.
Nje ukuba umthetho wenziwe, uyakuboniswa kwiwindow ephezulu yeGufw. Ungajonga umthetho okwi-terminal yeqokobhe ngokuchwetheza ubume besudo ufw.


Shiya uluvo lwakho

Idilesi yakho ye email aziyi kupapashwa. ezidingekayo ziphawulwe *

*

*

  1. Uxanduva lwedatha: UMiguel Ángel Gatón
  2. Injongo yedatha: Ulawulo lwe-SPAM, ulawulo lwezimvo.
  3. Umthetho: Imvume yakho
  4. Unxibelelwano lwedatha: Idatha ayizukuhanjiswa kubantu besithathu ngaphandle koxanduva lomthetho.
  5. Ukugcinwa kweenkcukacha
  6. Amalungelo: Ngalo naliphi na ixesha unganciphisa, uphinde uphinde ucime ulwazi lwakho.

  1.   ipoji sitsho

    Ukufunda ngokungaqhelekanga ukubhala, kulungile kwinto ethile

    1.    jm sitsho

      Andizukuthuka, njengoko usenza into engaqhelekanga, ngenxa yeempazamo ezibhaliweyo, kodwa kuya kufuneka ndikuxelele ukuba "ubona umququ kwiliso lomnye, kwaye awuboni umqadi kwelakho."
      Kumgca omnye obhaliweyo, wenze iimpazamo ezininzi kunye nokushiya; okona kubaluleke kakhulu, mhlawumbi, kukutshintsha okushiyekileyo okungapheliyo ngoku.

  2.   Adrian sitsho

    Andililo ingcali, kodwa njengoko bendifunda, ukuthintela izixhobo ekuphenduleni kwizicelo ze-echo (imeko encinci yokungabonakali kwezixhobo zethu kunye nokupasa isikena ngokufanelekileyo) kuya kufuneka ulandele la manyathelo:

    $ sudo ufw yenza ukuba

    $ sudo nano /etc/ufw/before.rules
    Apho umgca uthi:
    -A ufw-ngaphambi-kokufaka -p icmp -icmp-uhlobo echo-sicelo -j YAMKELE
    kujongeka ngoluhlobo:
    # -A ufw-ngaphambi-kokufaka -p icmp -icmp-uhlobo echo-sicelo -j YAMKELE

    Gcina kunano ngolawulo + O. Phuma ngolawulo + X.

    Emva koko:
    $ sudo ufw khubaza
    $ sudo ufw yenza ukuba

    Ndenze njalo kwi-PC yam. Umntu undilungisa ukuba ayichanekanga.

  3.   UChelo sitsho

    Molo, kuyinyani ukuba kuhlobo lwama-bits angama-64 i-GUI yahlukile. Ndicinga ukuba ayisiyonto inomdla njenge-GuardDog, kodwa ndiyizamile kwaye indinike iziphumo ezingcono kwezinye izibuko ezazindisokolisa, ke i-gufw yayisele isebenza. Ke le posi ilungile kum. Enkosi masisebenzise ...

  4.   Masisebenzise iLinux sitsho

    Ukuya kuthi ga ngoku ndiyakhumbula, kufanelekile ukuba isebenze nokuba uyaqala kwakhona.
    Le nkqubo sisixhobo nje somlilo esiza ngokuzenzekelayo ku-Ubuntu.
    Masinwabe! UPawulos.

  5.   UOscar Laforgue sitsho

    Nje ukuba i-firewall iqulunqwe, ngaba isasebenza nokuba uqalisa kwakhona okanye kufuneka iqale kuyo yonke into ongene kuyo? Enkosi kwangaphambili ngempendulo.

  6.   iguadix54 sitsho

    Enkosi ngeposi.
    Ndiyi-newbie kwaye andiqinisekanga ukuba le ndiyenzayo ichanekile ukukhusela ngokufanelekileyo. Ekuphela kwento endiyikhuphelayo kwi-intanethi yi-Ubuntu iso kunye nezinye i-distros, ke ndiyathanda ukuba zonke izibuko zivaliwe kwaye i-ufw ndiyisebenzise ngale ndlela ilandelayo kwikhonsoli.
    »Sudo ufw yenza», oku kubuyisela umyalezo wokuba i-firewall iyasebenza, kwelinye inyathelo ndenza uguquko olulandelayo ngokufaka lo myalelo ulandelayo kwikhonsoli:
    "Isudo gedit /etc/ufw/before.rules"
    Kwisikrini esilandelayo esibonakalayo, ndilungisa umgca apho "kwenziwe" ngenqaku le-hash ekuqaleni komgca ukusuka kwicala lasekhohlo.
    Ngoku umbuzo ebendifuna ukukubuza wona: ingaba ichanekile ukukhusela ikhompyuter yam?
    Enkosi kwangaphambili ngempendulo kunye nokuzithoba okuhle.

  7.   Masisebenzise iLinux sitsho

    Ewe kunjalo. Kwimeko apho ufuna ukwenza imigaqo, ndincoma ukusebenzisa gufw. 🙂
    Masinwabe! UPawulos.

  8.   iguadix54 sitsho

    Ndiyabulela kakhulu kunye nobubele obuvela eSpain

  9.   Miquel Mayol kunye Tur sitsho

    Ndiyifakile inguqulelo yam 10.10.1 ku-Ubuntu 10.10 AMD64 yahlukile, ubuncinci kwi-GUI yale uyichazayo.

    Yilento kudala ndiyifuna, enkosi.

  10.   Masisebenzise iLinux sitsho

    Yeyiphi cello elungileyo! Ndiyavuya!
    Masinwabe! UPawulos.

  11.   Yandri sitsho

    yandri ndingumntu osemtsha kumcimbi we-linux umbuzo wam kukuba kulula ukumiswa kwe-firewall kulo lonke ulwabiwo?

  12.   yintoni itawuli sitsho

    kuthiwa funda ...

  13.   Umsebenzisi weLinux sitsho

    Andikwazi ukongeza i-LibreOffice Impress ngaphandle. Ndiyayifuna ukuze ndikwazi ukusebenzisa ulawulo olukude (Impress Remote) nge-wi fi. Ukuza kuthi ga ngoku isisombululo yayikukucima umlilo okwexeshana

  14.   UAlexander ... sitsho

    Mholweni…
    Inqaku elihle. Iluncedo kakhulu
    Imuchas Gracias

  15.   Danny sitsho

    Molo mhlobo ndisebenzisa ubuntu 14.10, ndilandele amanyathelo owakhankanyileyo ukuphawula umthetho

    # -A ufw-ngaphambi-kokufaka -p icmp -icmp-uhlobo echo-sicelo -j YAMKELE

    Kodwa xa ndenza kwakhona ukuskena kwezibuko, kuya kufuneka kwakhona ndivule izicelo zePing (ICMP Echo), ndisebenzisa isikena seGRC ShieldsUp https://www.grc.com/x/ne.dll?bh0bkyd2 , nasiphi na esinye isisombululo ??

    I gracias