I-Firewall, i-IDS, ilifu, iMeyile (kwaye nantoni na ephumayo) ekhayeni lakho

Mholweni. Njengoko kuqhelekileyo kwizithuba zam, namhlanje siza kuthetha ngeeseva, iinethiwekhi kunye nezinye izinto.

Umncedisi we-linux

Ukuqala, ndifuna ukukuxelela ukuba ndithathe isigqibo sokwenza incwadana encinci ukuba uyifaka njani iserver ekhayeni lakho, ekhaya kodwa ngendlela efanelekileyo (Kwimeko yam ndisebenzisa iPentium 4 ene-1GB ye-RAM). Kwiseva yethu siza kufaka kwaye siqwalasele iinkqubo kunye neenkonzo endicinga ukuba zinokukunceda ufunde, ufunde kwaye ungazisebenzisa kubomi bakho bemihla ngemihla. Ezi nkqubo / iinkonzo zezi:

  • I-Firewall (Iptable): Siza kusebenzisa izixhobo zethu njengesango eliya kuthungelwano lwethu, kwaye siza kuqwalasela imigaqo esisiseko yendlela.
  • Ii-IDS: Siza kusebenzisa isoftware ebizwa ngokuba yi-SNORT ukubona ukuba kunokwenzeka ukuba kungene kwaye kuhlasele abantu, zombini kwinethiwekhi nakwiseva.
  • IMEYILI: Siza kuba neseva yethu yeposi.
  • Ilifu: Siza kuphinda sisebenzise isixhobo esibizwa ngokuba yi-OwnCloud ukuba neefayile zethu kunye namaxwebhu efini (iseva yethu).

Endleleni, siza kufunda neengcebiso ezipholileyo kunye namaqhinga anokuthi nabani na oyifundayo angazisebenzisa. Kodwa ke, masifike kuyo.

iposi

Ndifuna ukuqala ngale nkonzo, kuba ukuze siyifakele kwaye sisebenze ngokuchanekileyo, kufuneka kuqala senze uhlengahlengiso oluya kusinceda kakhulu. Ukufaka le seva, ndifake i-linux (Debian 8.5) kumatshini omdala. (IPentium 4 - 1GB RAM).

QAPHELA: Kubalulekile ukuba uyazi ukuba ungaqwalasela njani i-router yakho kunye nokwenza i-DMZ kwi-ip yomncedisi.

Njengoko wonke umntu esazi, iseva yeposi isetyenziselwa ukuthumela kunye nokufumana ii-imeyile, kodwa ukuba sifuna ukuyisebenzisa ukuyenza ngayo nayiphi na inkonzo (iGmail, Hotmail, Yahoo .. Njl). Sifuna i-domain yethu, kodwa oku kuxabisa imali, ke ndaye ndagqiba kwelokuba ndisebenzise inkonzo ye "No-IP", esivumela ukuba senze umamkeli obuyela kwi-IP yethu, (Ayinamsebenzi nokuba inamandla okanye imile) . Andifuni ukuya kwiinkcukacha ezininzi ngale nto, kodwa kuya kufuneka ungene: https://www.noip.com/ kwaye wenze iakhawunti. xa bengena, iphaneli yakho iya kuvela into enje:

i-noip yepaneli

Bamele bangene kuphela «Yongeza Umamkeli ». Apho kuya kufuneka bakhethe igama lomphathi wabo kuphela (oya kuthi usebenze njengedomeyini.) Ke, ukuba i-IP yabo yoLuntu inamandla, kufuneka bafake umxhasi kwiseva yabo ukuze le IP ihlaziye ngokuzenzekelayo.

Ngale nto, akukho-ip inesikhokelo sayo kwesi sixhobo: http://www.noip.com/support/knowledgebase/installing-the-linux-dynamic-update-client/

Xa befaka le nkqubo kwaye beyiqwalasela (yenza kwaye uyenze ifake). Inkqubo iya kucela idatha yakho yokungqinisisa kwi-notip.com

i-noip1

QAPHELAEmva kokufaka ulwazi lweakhawunti yakho. Iya kukubuza imibuzo ethile, kuya kufuneka usebenzise ukhetho olungagqibekanga (ENTER).

Xa banako oku, ii-imeyile zabo ziya kuba ngumsebenzisi @domain.no-ip.net (Umzekelo).

Ngoku ukufaka iseva yeposi. Siza kusebenzisa isixhobo esinamandla endisoloko ndithanda ukusisebenzisa kwezi meko apho sifuna ukukhawuleza kwaye sisebenze ngokufanelekileyo. Igama layo yiIredMail kwaye yiphakheji (yeSkripthi) esisiseko sayo ifaka yonke into ngokuzenzekelayo kwaye ikucele kuphela ulwazi oluthile ukuba uyenze.

Ukwenza oku, siza kuya kwiphepha elisemthethweni kwaye sikhuphele iskripthi.  http://www.iredmail.org/download.html

imeyile

Singawusebenzisa i-wget command ukukhuphela iphakheji, kwaye emva kokuyivula, siyifaka kwifolda apho ikhoyo.

Sisebenza nje iskripthi "IRedMail.sh"

ired1

Kuqala uza kufumana umyalezo owamkelekileyo apho kuya kufuneka ucofe u-ENTER. Ke umbuzo wokuqala akubuza wona ufuna ukuba iimeyile zakho zigcinwe phi.

ired2

Ngokuzenzekelayo, baya kugcina / var / vmail. Ungayishiya apho okanye ukhethe nayiphi na enye indawo okanye irekhodi. Kwimeko yam ethile, ndinenye idiski ebekwe kwi / idatha. kwaye ndiza kushiya ii-imeyile zam kwi / data / vmail.

Umbuzo olandelayo kukuba ufuna ukusebenzisa i-Apache okanye i-Nginx njengeseva yewebhu.

ired3

Wonke umntu akavumelani nenkonzo ebhetele, kodwa kwimeko yam ndiza kusebenzisa iApache.

Emva koko iya kubuza ukuba yeyiphi na iseva yedatha ofuna ukuyisebenzisa.

ired4

Ukwenza lula, kuba asizukusebenzisa i-LDAP okanye nantoni na enjalo, siya kusebenzisa iMysql nangona ngamanye amaxesha ndisebenzisa iMariaDB.

Umbuzo olandelayo umalunga nokuba yeyiphi na idomeyini oza kuyisebenzisa, apho kuya kufuneka ubeke enye oyenzileyo kwithuba elidlulileyo kwi-no-ip.

ired5

Emva koku, ikuxelela ukuba iya kwenza iakhawunti yomlawuli emiselweyo ebizwa Iposi yeposi@dominio.no-ip.net kwaye akubuze ukuba yeyiphi iphasiwedi ofuna ukuyifaka.

ired7

Emva koko, ikubuza ukuba zeziphi izixhobo ofuna ukuzifaka (kwaye ikunika inkcazo nganye nganye).

ired8

Unokukhetha ezo uzifunayo okanye ushiye zinjalo. Kwaye iya kukuxela kwangaphambili ukuba uqinisekise idatha oyifakileyo kwaye yiyo. Ukufakwa kuya kuqala. Kufuneka silinde nje ithutyana.

QAPHELA: Kungenzeka ukuba ngexesha lofakelo liza kukucela ulwazi olufana negama lokugqitha ofuna ukuseta kwiMysql (Ukuba awuyifakanga).

Xa egqibile uyakunika ezinye izikhombisi. kwaye ndincoma ukuba uqalise kwakhona iseva. kwaye ujonge ukuba yonke into iyasebenza, kufuneka ungene ku-https: // IP. le IP kufuneka ibe yi-LAN ye-IP yeseva yakho, ungayijonga usebenzisa ifconfig. 

ired9

Emva koko iRoundcube kufuneka iphume, eyiWebmail yethu. Kwaye kuvavanyo ungasebenzisa iakhawunti yePostmaster (abayenzileyo ngaphambili). kwaye imeyile yakho kufuneka iphume.

ired10

QAPHELA: Ngexesha lale nkqubo, njengoko yayilixesha lokuqala ukuyizama ndisuka ekhaya, ndinengxaki elandelayo: Kuya kuvela ukuba ngenxa yemigaqo-nkqubo yezokhuseleko, ababoneleli beenkonzo abanjengoGmail kunye ne-Outlook bavimba ii-imeyile ezivela kumanqanaba e-IP ashukumisayo. kwaye nangona i-ip yakho ingatshintshi, kunokwenzeka ukuba ivaliwe kuba isabhalwe njengendawo yokuhlala ip Kuya kufuneka ujonge i-ISP yakho ukuba unokufikelela kwi-IP emileyo yeshishini. 

INQAKU ELIBALULEKILEYO 2: Kusenokwenzeka ukuba i-ISP yakho ayikuvumeli ukuba usebenzise izibuko lama-25, kuba lizibuko elisetyenziswa ngabanye ababoneleli ukuba bakuthumele ii-imeyile, kufuneka unxibelelane ne-ISP yakho.

Ngoku, ukulawula iseva yakho yeposi (yenza iiakhawunti ... njl.njl) Kuya kufuneka ungene https://IP/iredadmin. Ngena ngegama lakho lomsebenzisi Iposi yeposi@dominio.no-ip.net.

ired11

Iphaneli inomdla, isetyenziselwa ukongeza kunye nokuguqula iiakhawunti ze-imeyile, kunye nemimandla emitsha.

Ngeli xesha kuya kufuneka sele uneseva esebenzayo yeposi. Kwiposi elandelayo siza kuqala ukwenza i-Firewall yethu kwaye siqwalasele uthungelwano lwethu.

Amaqhinga: Kwifolda apho sikhuphele khona iskripthi, kukho ifayile ebizwa ngokuba yiRedMail.tips apho uza kufumana ulwazi oluninzi, njengeefayile zoqwalaselo kunye nedatha yokufaka.

Masinwabe.!


Shiya uluvo lwakho

Idilesi yakho ye email aziyi kupapashwa. ezidingekayo ziphawulwe *

*

*

  1. Uxanduva lwedatha: UMiguel Ángel Gatón
  2. Injongo yedatha: Ulawulo lwe-SPAM, ulawulo lwezimvo.
  3. Umthetho: Imvume yakho
  4. Unxibelelwano lwedatha: Idatha ayizukuhanjiswa kubantu besithathu ngaphandle koxanduva lomthetho.
  5. Ukugcinwa kweenkcukacha
  6. Amalungelo: Ngalo naliphi na ixesha unganciphisa, uphinde uphinde ucime ulwazi lwakho.

  1.   ULeonardo sitsho

    Kulunge kakhulu!!!!! Ndilinde i-OwnCloud endikade ndifuna ukuyakha kwi-Raspberry Pi yam okwethutyana kwaye andinakuyenza ngezifundo endizifumene kwiwebhu.

  2.   yeza sitsho

    Muy bueno!
    Ndiyakuvuyela