Bethela ithrafikhi yakho ye-DNS nge-DNSCrypt Proxy ku-Ubuntu bese upheqa ngokuphepha

I-DNSCrypt Proxy uhlelo lokusebenza lomthombo ovulekile oluhlose ukwenza ngemfihlo traffic DNS uxhumano lwethu ukuze uzulazule ngokuphepha okukhulu. Uhlelo lubhala ngemfihlo izicelo ze-DNS endaweni yangakini bese-ke zisuswa ukubethelwa ngumhlinzeki we-DNS, ngakho-ke noma ngubani ozama ukuzinqanda endleleni (ngokwesibonelo, ukwenza ukuhlasela indoda-in-the-middle) ngizoba nesikhathi esinzima kakhulu ukuyithola.

Okwamanje kunenombolo enhle ye- Abahlinzeki be-DNS abasekelwa yi I-DNSCrypt Proxy, futhi ngokuba yisoftware yamahhala, noma ngubani onolwazi olwanele angazisethela iseva yakhe ye-DNS futhi ayilungiselele ngohlelo. Kodwa-ke, ngokuzenzakalela sekuvele kulungiselelwe ngaphambili ukusetshenziswa ne I-OpenDNS.

Kulokhu okuthunyelwe ngizokukhombisa ukufakwa okulula futhi okuyisisekelo esimweni se- Ubuntu nezinye. Labo abafuna ukumiswa okuthuthuke kakhulu bangaxhumana ne- ikhasi lephrojekthi y okugcina kwakho ku-GitHub.

Ukufakwa

Siqala ngokufaka iphakheji I-DNSCrypt Proxy kusukela Indawo yokugcina izinto ye-PPA enakekelwa nguSergey «Shnatsel» Davidoff:

sudo add-apt-repository ppa:shnatsel/dnscrypt
sudo apt-get update
sudo apt-get install dnscrypt-proxy

Ngalokho isivele ifakiwe futhi iyasebenza, manje singatshela kuphela uhlelo ukuthi luyisebenzise. Ukwenza lokhu sinezindlela ezimbili, eyokuqala nge-console neyesibili kwimodi yokuqhafaza, khetha leyo oyithanda kakhulu:

Indlela ye-1

Senza kungasebenzi i-DNS esetshenziswayo njengamanje:

sudo unlink /etc/resolv.conf

Sakha ifayili elisha /etc/resolv.conf ngesihleli sombhalo:

sudo gedit /etc/resolv.conf

Futhi sinamathisela lo mugqa ukudlulisa ithrafikhi ye-DNS I-DNSCrypt:

nameserver 127.0.0.1

Manje sivikela ifayela ukuvimbela Umphathi Wenethiwekhi shintsha:

sudo chattr +i /etc/resolv.conf

Sigcina ushintsho futhi sivale isihleli.

Indlela ye-2

Sichofoza isithonjana senethiwekhi kuphaneli yethu bese siyacindezela Hlela ukuxhumana. Manje sikhetha ukuxhumana esisebenza ngakho bese uchofoza kukho Hlela. Ewindini elivulayo siya kuthebhu Izilungiselelo ze-IPv4 futhi sizobona into enjengale:

Silungiselela izinketho njengoba kuboniswe lapho, sikhetha ukungena Indlela "Amakheli okuzenzakalelayo kuphela (i-DHCP)", naku- Amaseva we-DNS ukubeka 127.0.0.1

Ukwenza kusebenze

Ukuthi usebenzise i I-Metodo 1 njenge Indlela ye-2, isinyathelo esilandelayo ukuqala kabusha Umphathi Wenethiwekhi:

sudo service network-manager restart

Sizobona ukuthi ukuxhumeka kunqunywe futhi kwaqalwa kabusha. Uma konke kuhambe kahle, kuzobe sekuvele kusebenza I-DNSCrypt Proxy. Ukuyihlola siya kuyo leli khasi, futhi uma umphumela uba muhle uzosamukela I-OpenDNS:

Ngaphandle kwalokho sizothola umlayezo wephutha othi "Hawu", noma ngeke ulayishe noma yiliphi ikhasi. Ukuyixazulula simane sishintshe iseva engu-127.0.0.1 ye-127.0.0.2 (noma enye) bese siqala kabusha futhi Umphathi Wenethiwekhi.

Kuphela kwe-Ubuntu 14.04

Umgcini we-PPA uxwayisa ukuthi kukhona i-bug in Ubuntu 14.04 lokho kuvimbela ukucisha imishini lapho I-DNSCrypt Proxy iyasebenza. Kukhombisa ukuthi usebenza kumbhalo wokuyixazulula, kepha okwamanje kungalungiswa ngokusebenzisa le miyalo:

sudo apt-get install apparmor-utils
sudo aa-complain /etc/apparmor.d/usr.sbin.dnscrypt-proxy

Khipha

Uma kamuva sifuna ukuyeka ukusebenzisa i- I-DNSCrypt ProxyOkokuqala, izinketho zokuxhuma kuzodingeka zibuyiselwe endleleni ezazikhona ekuqaleni.

Uma usebenzise i Indlela ye-1 kungaba ukususa ukuvikelwa kufayela bese unika amandla kabusha i-DNS yakudala ngalo myalo:

sudo rm /etc/resolv.conf && sudo ln -s /run/resolvconf/resolv.conf /etc/resolv.conf

Uma usebenzise i Indlela ye-2, kungaba ukuvula imenyu yokumisa inethiwekhi futhi naku- Indlela khetha "Okuzenzakalelayo (DHCP)".

Kunoma ikuphi, kuzofanela uqale kabusha emuva kwesikhathi Umphathi Wenethiwekhi ngomyalo oshiwo ngenhla, futhi ekugcineni ukhiphe I-DNSCrypt Proxy ngakho:

sudo apt-get autoremove --purge dnscrypt-proxy

Ungakhohlwa ukususa i-PPA ngokuya ku-Software Center> Hlela> Enye isoftware.