Uyiqala njani iptables imithetho ngokuzenzekelayo kwi-systemd (ArchLinux)

Ndithathwa njengothileyo xa kufikwa kukhuseleko, yiyo loo nto ukusetyenziswa kwe-firewall kubalulekile kum. Kwilaptop yam ndinolwazi olubuthathaka, olubaluleke kakhulu kum; kwaye ngenxa yokuba i-firewall ye-PC ifana nokutshixa okanye ikhuselekile kuthi, sikhumbula ukuba kwikhompyuter sigcina amagama okungena kwi-imeyile, idatha yeakhawunti yebhanki (nabani na onayo), ulwazi lweseva, kunye nolunye ulwazi oluchaphazela ngqo ubomi bethu bomzimba ... kakuhle, ngaphandle kwamathandabuzo hamba kwinethiwekhi ngaphandle i-firewall emiselweyo, ngaphandle kokhuseleko olufanelekileyo kwikhompyuter yethu ayisiyonto ecetyiswayo.

Ngexesha elithile elidlulileyo ndikubonise indlela yokuqala imigaqo ye-iptables ngokuzenzekelayo kwi-distros njenge-Debian, Ubuntu okanye ezinye eziqulathe ifayile /etc/rc.local, nangona kunjalo kwiArchLinux njengoko isebenzisa isistim le fayile ayikho.

Ke, indlela endiyifumene ngayo ukuze iptable zam ziqwalaselwe njengoko ndinqwenela ukwenza iscript esishicilelayo esiqwalasela iptables, emva koko ndiguqule ifayile / / usr / lib / sistimu / inkqubo / iinkqubo zeseva ... kodwa, masingene iinxalenye 🙂

1. Simele yenza iscript esibhaliweyo Inemithetho yethu ye-iptables, into enje: I-Bash + iptables umzekelo weskripthi

2. Emva kokwenza iskripthi, sibhala imithetho yethu kuyo kwaye siyinike imvume yokuphumeza, siyaqhubeka ukuhlela inkonzo ye-iptables yenkqubo:

sudo nano /usr/lib/systemd/system/iptables.service

Siza kufumana into enje:

[Icandelo] Inkcazo = Isakhelo sokucoca iipakethe [IiNkonzo] Uhlobo = ishot ExecStart = / usr / bin / iptables-buyisela /etc/iptables/iptables.rules ExecReload = / usr / bin / iptables-buyisela /etc/iptables/iptables.rules I-ExecStop = / usr / lib / systemd / izikripthi / i-iptables-flush RemainAfterExit = ewe [Faka] i-WantedBy = i-multi-user.target

3. Ukuthatha ukuba iskripthi esasiyenzile ngaphambili sikwi /home/myuser/script-iptables.sh emva koko siya kuyishiya iptables.service fayile esivule ngolu hlobo lulandelayo:

[Icandelo] Inkcazo = Isakhelo sokucoca ipakethe [IiNkonzo] Uhlobo = ishot ExecStart = / ikhaya / myuser / script-iptables.sh ExecReload = / home / myuser / script-iptables.sh ExecStop = / usr / lib / systemd / script / iptables -Ukuhlala uhlala emva kweExit = ewe [Faka] i-WantedBy = multi-user.target

4. Emva koko kufuneka siqiniseke ukuba iptables iqala ngokuzenzekelayo:

sudo systemctl enable iptables

5. Siyiqala:

sudo systemctl start iptables

6. Kwaye singayijonga imigaqo:

sudo iptables -nL

Le yeyona ndlela ilula ndiyifumeneyo (1) ine-bash script yam elungiselela iptables kum, nayo (2) ukuba imigaqo iqale ngokuzenzekelayo kwaye ekugqibeleni (3) ukuba iskripthi ngokwaso sasiyinto ezimeleyo, oko kukuthi, ukuba ngomso ndifuna ukuyisebenzisa kwi-Debian endiyifakayo (umzekelo) ngekhe ndiphinde ndiyilungelelanise kwakhona.

Ngapha koko, ndiyathemba ukuba uyifumene iluncedo 🙂

Phendula nge quote