Njengazo zonke i-Linux distros, Ubuntu sele uza ne-firewall (firewall) efakiweyo. Esi siqhoboshi somlilo, enyanisweni, sifakwe kwi-kernel. Kwi-Ubuntu, indawo yomlilo yomda wokujongana nomlilo yathatyathelwa indawo yinto elula ukuyisebenzisa. Nangona kunjalo, i-ufw (i-FireWall engacacanga) nayo ine-graphical interface ekulula ukuyisebenzisa. Kule posi, siza kubonisa isikhokelo sinyathelo-nge-nyathelo malunga nendlela yokusebenzisa gufw, ujongano lomfanekiso we-ufw, ukumisela i-firewall yethu. |
Ngaphambi kokufaka i-gufw, ayilo luvo olubi ukujonga imeko ye-ufw. Ukwenza oku, ndavula i-terminal kwaye ndabhala:
sudo ufw isimo
Iziphumo kufuneka zithethe into efana nale: "Isimo: akusebenzi". Leyo yimeko engagqibekanga ye-firewall kwi-Ubuntu: ifakwe kodwa ikhutshaziwe.
Ukufaka i-gufw, ndavula iZiko leSoftware Ubuntu ndalikhangela ukusuka apho.
Ungayifaka nakwisiphelo sendlela ngokuchwetheza:
Sudo apt-fumana ukufaka gufw
Ukuseta gufw
Nje ukuba ifakwe, ungayifumana kwiNkqubo> uLawulo> Useto lweFirewall.
Njengoko ubona kwi-skrini, i-ufw isebenza ngokungagqibekanga yamkela lonke unxibelelwano oluphumayo kwaye iyala lonke unxibelelwano olungenayo (ngaphandle kwezo zinxulumene neziphumayo). Oku kuthetha ukuba nasiphi na isicelo osisebenzisayo siya kuba nakho ukunxibelelana ngaphandle (nokuba yi-Intanethi okanye inxenye ye-Intranet yakho) ngaphandle kweengxaki, kodwa ukuba umntu ovela komnye umatshini ufuna ukufikelela kweyakho, ngekhe bakwazi.
Yonke imigaqo-nkqubo yoqhagamshelo igcinwe kwifayile / njl / okungagqibekanga / ufw. Isimanga, ufw uvimba i-IPv6 traffic ngokungagqibekanga. Ukuyenza, hlela ifayile / njl / okungagqibekanga / ufw notshintsho IPV6 = hayi yi IPV6 = ewe.
Ukudala imigaqo yesiko
Cofa indawo yokongeza kwiwindows ephambili yegufw. Kukho iithebhu ezintathu zokwenza imigaqo yesiko: Kulungiselelwe kwangaphambili, kulula, kwaye kuqhubekile.
Ukusuka kokuQinisekiswa kwangaphambili kunokwenza uluhlu lwemithetho yenani elithile leenkonzo kunye nokusetyenziswa. Iinkonzo ezikhoyo zezi: FTP, HTTP, IMAP, NFS, POP3, Samba, SMTP, ssh, VNC kunye neZeroconf. Izicelo ezikhoyo zezi: Amule, uNogumbe, KTorrent, Nicotine, qBittorrent, kunye noThumelo.
Ukusuka ngokulula, unokwenza imigaqo kwizibuko elisisiseko. Oku kukuvumela ukuba wenze imigaqo yeenkonzo kunye nezicelo ezingafumaneki kulungiselelwe kwangaphambili. Ukuqwalasela uluhlu lwamachweba, ungasetha usebenzisa le syntax elandelayo: PORT1: PORT2.
Ukusuka kuPhambili, unokwenza imigaqo ethe ngqo ngakumbi usebenzisa iidilesi ze-IP apho ivela khona kunye namazibuko. Zine iindlela onokukhetha kuzo ukuchaza umthetho: vumela, khanyela, khanyela, kunye nomda. Iziphumo zokuvumela nokwala ziyazicacisa. Ukwala kuya kubuyisa "ICMP: indawo engafikelelekiyo" umyalezo kulowo ufaka isicelo. Umda ukuvumela ukuba unciphise inani lemizamo yonxibelelwano engaphumelelanga. Oku kukukhusela ekuhlaselweni ngamandla.
Nje ukuba umthetho wongezwe, uya kuvela kwiwindows yegufw.
Nje ukuba umthetho wenziwe, uyakuboniswa kwiwindow ephezulu yeGufw. Ungajonga umthetho okwi-terminal yeqokobhe ngokuchwetheza ubume besudo ufw.
Ukufunda ngokungaqhelekanga ukubhala, kulungile kwinto ethile
Andizukuthuka, njengoko usenza into engaqhelekanga, ngenxa yeempazamo ezibhaliweyo, kodwa kuya kufuneka ndikuxelele ukuba "ubona umququ kwiliso lomnye, kwaye awuboni umqadi kwelakho."
Kumgca omnye obhaliweyo, wenze iimpazamo ezininzi kunye nokushiya; okona kubaluleke kakhulu, mhlawumbi, kukutshintsha okushiyekileyo okungapheliyo ngoku.
Andililo ingcali, kodwa njengoko bendifunda, ukuthintela izixhobo ekuphenduleni kwizicelo ze-echo (imeko encinci yokungabonakali kwezixhobo zethu kunye nokupasa isikena ngokufanelekileyo) kuya kufuneka ulandele la manyathelo:
$ sudo ufw yenza ukuba
$ sudo nano /etc/ufw/before.rules
Apho umgca uthi:
-A ufw-ngaphambi-kokufaka -p icmp -icmp-uhlobo echo-sicelo -j YAMKELE
kujongeka ngoluhlobo:
# -A ufw-ngaphambi-kokufaka -p icmp -icmp-uhlobo echo-sicelo -j YAMKELE
Gcina kunano ngolawulo + O. Phuma ngolawulo + X.
Emva koko:
$ sudo ufw khubaza
$ sudo ufw yenza ukuba
Ndenze njalo kwi-PC yam. Umntu undilungisa ukuba ayichanekanga.
Molo, kuyinyani ukuba kuhlobo lwama-bits angama-64 i-GUI yahlukile. Ndicinga ukuba ayisiyonto inomdla njenge-GuardDog, kodwa ndiyizamile kwaye indinike iziphumo ezingcono kwezinye izibuko ezazindisokolisa, ke i-gufw yayisele isebenza. Ke le posi ilungile kum. Enkosi masisebenzise ...
Ukuya kuthi ga ngoku ndiyakhumbula, kufanelekile ukuba isebenze nokuba uyaqala kwakhona.
Le nkqubo sisixhobo nje somlilo esiza ngokuzenzekelayo ku-Ubuntu.
Masinwabe! UPawulos.
Nje ukuba i-firewall iqulunqwe, ngaba isasebenza nokuba uqalisa kwakhona okanye kufuneka iqale kuyo yonke into ongene kuyo? Enkosi kwangaphambili ngempendulo.
Enkosi ngeposi.
Ndiyi-newbie kwaye andiqinisekanga ukuba le ndiyenzayo ichanekile ukukhusela ngokufanelekileyo. Ekuphela kwento endiyikhuphelayo kwi-intanethi yi-Ubuntu iso kunye nezinye i-distros, ke ndiyathanda ukuba zonke izibuko zivaliwe kwaye i-ufw ndiyisebenzise ngale ndlela ilandelayo kwikhonsoli.
»Sudo ufw yenza», oku kubuyisela umyalezo wokuba i-firewall iyasebenza, kwelinye inyathelo ndenza uguquko olulandelayo ngokufaka lo myalelo ulandelayo kwikhonsoli:
"Isudo gedit /etc/ufw/before.rules"
Kwisikrini esilandelayo esibonakalayo, ndilungisa umgca apho "kwenziwe" ngenqaku le-hash ekuqaleni komgca ukusuka kwicala lasekhohlo.
Ngoku umbuzo ebendifuna ukukubuza wona: ingaba ichanekile ukukhusela ikhompyuter yam?
Enkosi kwangaphambili ngempendulo kunye nokuzithoba okuhle.
Ewe kunjalo. Kwimeko apho ufuna ukwenza imigaqo, ndincoma ukusebenzisa gufw. 🙂
Masinwabe! UPawulos.
Ndiyabulela kakhulu kunye nobubele obuvela eSpain
Ndiyifakile inguqulelo yam 10.10.1 ku-Ubuntu 10.10 AMD64 yahlukile, ubuncinci kwi-GUI yale uyichazayo.
Yilento kudala ndiyifuna, enkosi.
Yeyiphi cello elungileyo! Ndiyavuya!
Masinwabe! UPawulos.
yandri ndingumntu osemtsha kumcimbi we-linux umbuzo wam kukuba kulula ukumiswa kwe-firewall kulo lonke ulwabiwo?
kuthiwa funda ...
Andikwazi ukongeza i-LibreOffice Impress ngaphandle. Ndiyayifuna ukuze ndikwazi ukusebenzisa ulawulo olukude (Impress Remote) nge-wi fi. Ukuza kuthi ga ngoku isisombululo yayikukucima umlilo okwexeshana
Mholweni…
Inqaku elihle. Iluncedo kakhulu
Imuchas Gracias
Molo mhlobo ndisebenzisa ubuntu 14.10, ndilandele amanyathelo owakhankanyileyo ukuphawula umthetho
# -A ufw-ngaphambi-kokufaka -p icmp -icmp-uhlobo echo-sicelo -j YAMKELE
Kodwa xa ndenza kwakhona ukuskena kwezibuko, kuya kufuneka kwakhona ndivule izicelo zePing (ICMP Echo), ndisebenzisa isikena seGRC ShieldsUp https://www.grc.com/x/ne.dll?bh0bkyd2 , nasiphi na esinye isisombululo ??
I gracias