Bethela ukugcwala kwe-DNS yakho nge-DNSCrypt Proxy ku-Ubuntu kwaye ukhangele ngokukhuselekileyo

Ummeli we-DNSCrypt sisicelo somthombo ovulekileyo esijolise Fihla ukugcwala kwe-DNS kunxibelelwano lwethu ukuhamba ngonqabiseko olukhulu. Inkqubo ibethela izicelo ze-DNS kwalapha ekhaya kwaye emva koko zichazwe ngumboneleli we-DNS, ke nabani na ozama ukubathintela endleleni (umzekelo, ukwenza I-ataque umntu-phakathi) uya kuba nexesha elinzima kakhulu ukuyifumana.

Okwangoku kukho inani elilungileyo le- Ababoneleli be-DNS baxhaswe yi Ummeli we-DNSCrypt, Kwaye ekubeni sisoftware yasimahla, nabani na onolwazi olwaneleyo unokusetha eyakhe iseva ye-DNS kwaye ayiqwalasele ngenkqubo. Nangona kunjalo, ngokungagqibekanga sele ilungiselelwe kwangaphambili ukusetyenziswa nayo OpenDNS.

Kule posi ndiza kukubonisa olona fakelo lulula nolona lusisiseko kwimeko ye- Ubuntu kunye neziphumo. Abo bafuna ubumbeko oluphambili banokudibana ne- iphepha leprojekthi y Indawo yakho yokugcina izinto kwiGitHub.

Ukufakwa

Siqala ngokufaka iphakheji Ummeli we-DNSCrypt kusuka kwi Indawo yokugcina iPPA igcinwe nguSergey «Shnatsel» Davidoff:

sudo add-apt-repository ppa:shnatsel/dnscrypt
sudo apt-get update
sudo apt-get install dnscrypt-proxy

Ngaloo nto sele ifakwe kwaye isebenza, ngoku sinokuxelela kuphela inkqubo ukuba isebenzise. Kule nto sineendlela ezimbini, eyokuqala ngekhonsoli kunye neyesibini kwimowudi yemizobo, khetha eyona uyithandayo:

Indlela ye-1

Senza ukuba i-DNS ingasetyenziswa ngoku:

sudo unlink /etc/resolv.conf

Senza ifayile entsha /etc/resolv.conf ngomhleli wokubhaliweyo:

sudo gedit /etc/resolv.conf

Kwaye sincamathisela lo mgca ukudlula i-DNS traffic DNSCrypt:

nameserver 127.0.0.1

Ngoku sikhusela ifayile ukukhusela Umphathi weNethiwekhi yiguqule:

sudo chattr +i /etc/resolv.conf

Sigcina utshintsho kwaye sivale umhleli.

Indlela ye-2

Cofa kwi icon yenethiwekhi kwipaneli yethu kwaye ucinezele Hlela uxhulumaniso. Ngoku sikhetha unxibelelwano olusebenzayo kwaye ucofe kulo Hlela. Kwiwindow evulayo siya kwithebhu Useto lwe-IPv4 kwaye siza kubona into enje:

Silungiselela ukhetho njengoko sibonile apho, sikhetha ngaphakathi Indlela Msgstr "" "Iidilesi ezizenzekelayo kuphela (i-DHCP)", kunye ne Iiseva ze-DNS ukubeka 127.0.0.1

Ukwenza kusebenze

Nokuba usebenzise i IMetodo 1 njenge Indlela ye-2, inyathelo elilandelayo kukuqalisa kwakhona Umphathi weNethiwekhi:

sudo service network-manager restart

Siza kubona ukuba unxibelelwano luyasikwa kwaye luqaliswe kwakhona. Ukuba yonke into ihambe kakuhle, iya kube sele isebenza Ummeli we-DNSCrypt. Ukuyijonga siya kuyo kweli phepha, kwaye ukuba iziphumo ziqinisekile uya kusamkela OpenDNS:

Ngaphandle koko siya kufumana umyalezo wempazamo othi "Yhu", okanye ayizukulayisha naliphi na iphepha. Ukuyicombulula ngokutshintsha nje iseva 127.0.0.1 iye kwi-127.0.0.2 (okanye enye) kwaye siqale phantsi kwakhona Umphathi weNethiwekhi.

Ubuntu 14.04 kuphela

Umgcini wePPA ulumkisa ukuba kukho ibug in Ubuntu 14.04 ethintela ukucima izixhobo xa Ummeli we-DNSCrypt iyasebenza. Ibonisa ukuba usebenza kwisiqwengana ukusisombulula, kodwa okwangoku inokulungiswa ngokusebenzisa le miyalelo:

sudo apt-get install apparmor-utils
sudo aa-complain /etc/apparmor.d/usr.sbin.dnscrypt-proxy

Khupha ngaphandle

Ukuba kamva sifuna ukuyeka ukusebenzisa Ummeli we-DNSCryptOkokuqala, kuya kufuneka ubuyisele iinketho zonxibelelwano ukuba zazinjani ekuqaleni.

Ukuba usebenzise i Indlela ye-1 iya kuba kukususa ukhuseleko kwifayile kwaye uphinde unike amandla i-DNS yakudala ngalo myalelo:

sudo rm /etc/resolv.conf && sudo ln -s /run/resolvconf/resolv.conf /etc/resolv.conf

Ukuba usebenzise i Indlela ye-2, iya kuba kukuvula imenyu yoqwalaselo lwenethiwekhi kwakhona nangaphakathi Indlela khetha "Ngokuzenzekelayo (DHCP)".

Kuzo zombini ezi meko, kuya kufuneka uphinde uqalise kamva Umphathi weNethiwekhi ngalo myalelo ukhankanywe ngasentla, kwaye ekugqibeleni ukhiphe Ummeli we-DNSCrypt njalo:

sudo apt-get autoremove --purge dnscrypt-proxy

Ungalibali ukususa iPPA ngokuya kwiZiko leSoftware> Hlela> Enye isoftware.