I-Firewall Config: Isigcawu se-Firewall esibonisa kahle kakhulu seGufw Firewall
Emkhakheni wabasebenzisi abalula (amakhaya / amahhovisi) uma kukhulunywa ngokusebenzisa ifayili le- Isistimu yokusebenza yanoma yiluphi uhlobo, ngokuvamile, akudingeki ukuthi wenze imisebenzi eyinkimbinkimbi noma yobuchwepheshe kuyo, njenge, ukuhlunga okuqukethwe, ukuxhumana nokuvuleka kwetheku noma ukuvimba, phakathi kwabanye.
Njengoba lezi zinhlobo zemisebenzi zivame ukwenziwa indawo eyodwa yi Amayunithi wekhompyutha ngokusebenzisa amaseva futhi ephethwe ku- amakhompyutha for the Ochwepheshe be-IT. Kepha, lapho umsebenzisi olula efuna ukusebenzisa lokhu, ukuze ungabi nzima umsebenzi kukhompyutha yakhe, kunezinhlelo zokusebenza ezilula nezilula ezifana "Ukulungiselela i-Firewall" y Gufw.
Mayelana nama-Firewalls, i-GUFW nama-IPTables
Futhi njengenjwayelo, ngaphambi kokungena ngokugcwele esihlokweni sanamuhla sizobashiya labo abanentshisekelo yokuhlola okwakamuva okwedlule okuthunyelwe okuhlobene enesihloko esithi Izicishamlilo, i-GUFW nama-IPTables, izixhumanisi ezilandelayo kubo. Ukuze bakwazi ukuchofoza ngokushesha uma kunesidingo, ngemuva kokuqeda ukufunda le ncwadi:
"Njengawo wonke ama-Linux distros, Ubuntu usevele uza ne-firewall efakiwe. Le firewall, empeleni, ifakwa ku-kernel. Ku-Ubuntu, isikhombimsebenzisi somugqa womyalo we-firewall sathathelwa indawo yisikripthi esisebenziseka kalula. Kodwa-ke, i-ufw (i-FireWall engaqondakali) nayo ine-interface yokuqhafaza okulula kakhulu ukuyisebenzisa. Kulokhu okuthunyelwe, sizokwethula umhlahlandlela wesinyathelo ngesinyathelo sendlela yokusebenzisa gufw, isikhombimsebenzisi se-ufw sokuqhafaza, ukulungisa i-firewall yethu." Ungayisetha kanjani i-firewall ku-Ubuntu
"Iptables yingxenye yeLinux kernel (imodyuli) ebhekana nokuhlunga amaphakethe. Lokhu kushiwo ngenye indlela, kusho ukuthi i-Iptables yingxenye ye-kernel umsebenzi wayo ukwazi ukuthi yiluphi ulwazi / idatha / amaphakheji ofuna ukufaka ikhompyutha yakho, nokuthi yini okungafanele." Ama-Iptable wama-newbies, anelukuluku, anentshisekelo
I-Firewall Config: Ithuluzi lokumisa le-GUI le-firewalld
Yini i-Firewall Config?
Impela amaLinuxeros amaningi aseyazi Gufw. Kepha kulabo abangayazi, kuyindlela elula futhi enembile yokuphatha i-Linux firewall (Iptables), ngoba inikeza isikhombimsebenzisi sokuqhafaza (i-GUI) sohlelo lokusebenza lwe-console firewall (CLI) olubiziwe Hewu. Futhi phakathi kwezinto ezingenziwa nge- Gufw Yilezi, zenza imisebenzi ejwayelekile njengokuvumela noma ukuvimba okulungiselelwe ngaphambili, i-p2p ejwayelekile, noma amachweba angawodwana.
Noma kunjalo, kukhona olunye uhlelo lokusebenza olukhulu olubizwa nge- "Ukulungiselela i-Firewall" okuyiwebhusayithi yayo esemthethweni echazwe kafushane ngale ndlela elandelayo:
"Kuyithuluzi lokumisa lokuqhafaza le-firewalld." i-firewall-config
Ukuba isicelo I-Firewalld Okulandelayo:
"Uhlelo lokusebenza lwe-console (i-CLI) olunikeza i-firewall ephethwe ngamandla ngokusekelwa kwezindawo zenethiwekhi / ama-firewall achaza izinga lokuthembela kokuxhumeka kwenethiwekhi noma izixhumi. Ixhasa ukucushwa kwe-IPv4, IPv6 firewall, amabhuloho e-ethernet, namachibi e-IP. Ngaphezu kwalokho, kusungula ukwahlukana phakathi kwezinketho zokucushwa kwesikhathi sokusebenza kanye nezingunaphakade, futhi ngenxa yokuthi isebenzisa i-interface ye-D-Bus, kulula ukumisa izinsiza, izinhlelo zokusebenza kanye nabasebenzisi ukuguqula ukucushwa kwe-firewall ."
Ngaphezu kwalokho, kuhle ukukucacisa lokho I-Firewalld empeleni kuyisilawuli sangaphambili se- Ama-Iptable, njenge Hewu, kuphela, isebenzisa izindawo nezinsizakalo esikhundleni samaketanga nemithetho. Futhi ilawula amaqembu wokubusa ngamandla, ivumela izibuyekezo ngaphandle kokuphula amaseshini nokuxhumeka. Ngenxa yalokho, I-Firewalld ayithathi indawo ye- Ama-Iptable.
Izici
Ezinye zazo yilezi:
- Qedela i-D-Bus API
- IPv4, IPv6, ibhuloho nokusekelwa kwe-ipset
- Ukusekelwa kwe-NAT IPv4 ne-IPv6
- Izindawo ze-Firewall
- Uhlu oluchazwe ngaphambilini lwezindawo, izinsizakalo nama-icmptypes
- Ulimi olucebile lwemithetho eguquguqukayo futhi eyinkimbinkimbi ezindaweni
- Imithetho Yesikhathi Yomlilo Ovikelwe Ezindaweni
- Ukuvimbela: Ukugunyazwa kwezicelo ezingaguqula i-firewall
- Ukulayisha okuzenzakalelayo kwamamojula we-Linux kernel
- Ukuhlanganiswa noPoppet
Ezinye izindlela
Emkhakheni wamaseva kunezinketho eziningi zezinhlelo zokusebenza, amasistimu nokusabalalisa okuphelele ngezixazululo ezinamandla ze-Firewalls (Firewalls). Kodwa-ke, emkhakheni wezinhlelo zokusebenza zemidwebo yamakhompyutha wabasebenzisi abalula (okungezona ezobuchwepheshe), ukwenza imisebenzi ye ukuhlunga okuqukethwe sincoma ukusetshenziswa kohlelo lokusebenza oluwusizo nolulula olubizwa "Umsingathi Wokusingatha". Okulula kakhulu ukuyisebenzisa, ngakho-ke isebenza kahle kakhulu uhlelo lokulawula lwabazali (firewall) kokunye esikuthandayo I-GNU / Linux Distros.
"Kuyinto isicelo esetshenziselwa ukuvimba izizinda zewebhu ezingadingeki. Ine-interface elula yokuqhafaza ekuvumela ukuthi ubuyekeze kalula ifayela «
/etc/hosts»Kusuka ku-GNU / Linux Distro yakho uye komunye wamafayela weSikhungo sikaStevenBlack ahlanganisiwe. Lawa mafayela wokubamba ahlanganisiwe akuvumela ukuthi uvimbe amawebhusayithi ezigaba ezahlukahlukene, njenge: Izikhangiso, i-Porn, i-Gaming, i-Social Networks kanye ne-Fake News."
Izithombe zesikrini
Ku-a okuthunyelwe okulandelayo sizocubungula ukusetshenziswa kwe I-Firewalld y "Ukulungiselela i-Firewall".
Isifingqo
Ngamafuphi, ukusebenzisa zombili "Ukulungiselela i-Firewall" njengoba Gufw ukuphatha Ama-Iptable (i-native linux kernel firewall) ngokusobala kunoma iyiphi I-GNU / Linux Distro lapho amaphakheji wabo wokufaka atholakala noma ehambisanayo kuyindlela enhle ongayihlola. Ngaphezu kwakho konke, kulabo basebenzisi abaqala phansi futhi abanalo ulwazi oluningi lobuchwepheshe kanye ne-terminal (console) lokwenza imisebenzi ye ukuhlunga okuqukethwe, ukuxhumeka kanye nokuminyana kwembobo noma ukuvimba, phakathi kweminye imisebenzi yezobuchwepheshe.
Siyethemba ukuthi le ncwadi izosiza kakhulu kuwo wonke umuntu «Comunidad de Software Libre y Código Abierto» kanye negalelo elikhulu ekuthuthukisweni, ekukhuleni nasekusakazweni kohlelo lokuphilayo lwezinhlelo zokusebenza ezitholakalayo «GNU/Linux». Futhi ungayeki ukuwabelana nabanye, kumawebhusayithi wakho owathandayo, iziteshi, amaqembu noma imiphakathi yokuxhumana nabantu noma amasistimu wokuthumela imiyalezo. Ekugcineni, vakashela ikhasi lethu lasekhaya ku- «DesdeLinux» ukuhlola ezinye izindaba, bese ujoyina isiteshi sethu esisemthethweni se- I-Telegram ye DesdeLinux.