Ungayibhala njani i-DNS yezithuthi kwi-Linux nge-DNSCrypt?

Namhlanje ukukhuselwa kwedatha yakho, kunye nokunxibelelana kwakho nenethiwekhi kunye nezixhobo zakho akusekho nto loo nto kuphela abantu abanolwazi oluphambili okanye iinkampani kufuneka zenze.

Ngeli thuba masibone indlela yokunyusa ubumfihlo kwiLinux, into esiza kuyenza kukuthatha ulawulo lokuba ngubani onokubona ulwazi lwethu lokujonga i-DNS.

Nangona ingazukufihla ngokupheleleyo konke ukugcwala kwe-IP, iya kuthintela uhlaselo oluyingozi lwe-DNS, ukuqinisekisa ukhuseleko olukhulu.

KwiLinux, Eyona ndlela yokubethela i-DNS kukusebenzisa i-DNSCrypt.

I-DNSCrypt yinkqubo yenethiwekhi eyilelwe ukungqinisisa ukugcwala kwe-DNS (Inkqubo yeDomain Domain) phakathi komsebenzisi wekhompyuter kunye namagama aphindaphindiweyo eseva.

I-DNSCrypt isonga ukugcwala kwe-DNS okungagunyaziswanga phakathi komthengi kunye nesisombululo se-DNS kulwakhiwo lwe-cryptographic ukuze kufumaneke ukungafun. Nangona ingaboneleli ngokhuseleko lokuphela, iyanceda ekukhuseleni uthungelwano lwasekhaya ngokuchasene nokuhlaselwa ngumntu ophakathi.

Ikwanciphisa uhlaselo olusekelezelweyo olusekwe kwi-UDP ngokufuna ukuba umbuzo ubuncinci ube mkhulu njengempendulo ehambelana noko. Ke ngoko, i-DNSCrypt inceda ukuthintela i-DNS spoofing.

I-DNSCrypt inokusetyenziselwa ulawulo lofikelelo.

Uyifaka njani i-DNSCrypt kwiLinux?

Ukufakela oku kuluncedo kwinkqubo yethu, kufuneka silandele amanyathelo esabelana ngawo ngezantsi ngokuhanjiswa kweLinux abayisebenzisayo.

Kuya kufuneka uyazi ukuba isixhobo se-DNSCrypt sibandakanyiwe phantse kuzo zonke iindawo zokugcina izinto zeLinux.

Ukunqunqar ukufaka i-DNSCrypt kwi-Debian, Ubuntu, Linux Mint kunye nolwabiwo oluvela kwezi, Kuya kufuneka bavule i-terminal kwaye benze lo mthetho ulandelayo kuyo:

sudo apt install dnscrypt-proxy

Kwimeko ye abo bangabasebenzisi beArch Linux kunye neziphumo zazo:

sudo pacman -S dnscrypt-proxy

Abo basebenzisayo I-Fedora kunye neziphumo:

sudo dnf install dnscrypt-proxy -y

Okokugqibela, for abo basebenzisa nayiphi na inguqulelo ye-OpenSUSE:

I-sudo zypper ifake i-dnscrypt-proxy

Uyicwangcisa njani i-DNSCrypt kwiLinux?

Nje ukuba isixhobo sifakwe kwinkqubo, Kuyimfuneko ukuba siyilungiselele kuba nangona ifakiwe, ayisebenzi okwangoku.

Ngenxa yoku kufuneka sisebenzise inkonzo ye-DNS, apho kukho iindlela ezininzi onokukhetha kuzo ukusuka simahla ukuya kukhetho oluhlawulelweyo.

Kubalulekile ukuhamba nenye i-DNS, endaweni yokuncamathisela enye ebabonelelwa yi-ISP, ukuba ufuna ukhuseleko olungakumbi.

Banokukhetha eyona ibalungeleyo, sinokukhetha i-openDNS, CloudFlare phakathi kwabanye,

Ngoku Kuya kufuneka ucofe i icon yenethiwekhi kwaye uhlele unxibelelwano olungagqibekanga.

AphaSizakubeka indawo kwi-IPv4, kwaye sijonge "iiseva ze-DNS". Kwibhokisi yokubhaliweyo ye- "DNS Servers", uncamathisela le dilesi ilandelayo:

Yongeza nje le dilesi ilandelayo ye-DNS pYe IPv4:

1.0.0.1

Ngelixa le-IPv6:

2606:4700:4700::1111,2606:4700:4700::1001

Emva kokumisela isoftware ye-DNSCrypt, kubaluleke kakhulu ukuqala kwakhona umphathi wenethiwekhi ngalo myalelo ulandelayo.

Solo chwetheza nje:

sudo systemctl restart NetworkManager.service

Useto olusisiseko oluvumela isixhobo se-DNSCrypt ukuba sisebenze sikhona. Into yokugqibela yokwenza kukufaka iprofayile ye-DNS kwilayini yomyalelo.

sudo dnscrypt-proxy -R cloudflare-dns.com

Kwaye voila, sele besebenzisa le nkonzo inkulu kwiinkqubo zabo. Ukuba ufuna ukumisa inkonzo ye-DNSCrypt, chwetheza lo myalelo ulandelayo

sudo systemctl stop dnscrypt-proxy.service

Y ukuyikhubaza ngokupheleleyo, kwaye uyithintele ekusebenzeni kuqaliso, chwetheza nje:

sudo systemctl disable dnscrypt-proxy.service

Unokufumana ulwazi oluninzi kwiwebhu, ukuba ungayilungiselela njani i-DNSCrypt, kunye neenkonzo ezahlukeneyo ze-DNS ezinokusetyenziswa kuyo, jonga nje i-DNSCript Wiki. Ukuba ufuna ukwazi ngakumbi ngayo, unokuthetha esi sixhobo kunye le enye.