Ukusatshalaliswa okwenziwe kwaba yi-Firewall

Labo bethu abacwilisiwe emhlabeni we I-GNU / Linux ne-Free Software, sikujwayele ukuthi nsuku zonke sazi ukusatshalaliswa okwehlukile, okuqondiswe ezintweni ezihluke kakhulu.

Namuhla ngikulethela isibonelo esincane salokhu. Yebo, kunokusabalalisa okuningi (okuningi) okususelwe noma okugxile ekubeni yi-FireWall noma i-Firewall. Kepha okokuqala ... siyini isihogo somlilo?

Ngokusho kweSAN I-Wikipedia.

Un isicishamlilo (firewall ngesiNgisi) kuyingxenye yohlelo noma inethiwekhi eyenzelwe ukuvimba ukufinyelela okungagunyaziwe, ngenkathi ivumela ukuxhumana okugunyaziwe.

It is a device or set of devices configured to allow, limit, encrypt, decrypt, the traffic between scopes different based on a set of imithetho kanye nezinye izindlela.

Ngokuyinhloko i-firewall, njengoba imelwe njalo. Kungumdonga osika noma obamba ukufinyelela, lokhu kungaba kokubili kusukela ekungeneni (Kusuka kwi-inthanethi kuya kithi) Noma kunalokho ... Kusuka Ngaphakathi kuye ngaphandle.

Izicishamlilo zivame ukufakwa endaweni ye-DMZ (indawo ehlukunyezwe ngabasebenzi). Le ndawo empeleni lapho i-router yethu ingasebenzisi noma iphatha nge-firewall yangaphakathi (engeyona leyo). Ngale ndlela yonke ithrafikhi iqinisekisiwe kuseva yethu.

Kufanele futhi kucaciswe ukuthi noma ikuphi ukusatshalaliswa kungasetshenziswa njenge-Firewall noma iRouter. Kuphela kukhona ezinye esevele "Zilungile" noma zenziwe ngaphambilini. Ngezinto ezifana ne-NIDS (Intrusion Detection System) ETC.

Ngayinye yalezi zabelo inama-PRO ayo nama-CONS.

Yize kuningi, sizobala okumbalwa nokuthi yiziphi izinketho onazo.

I-ClearOs

Ngaphambili kwakuthiwa yi-ClarkConnect, lokhu kusatshalaliswa kususelwa ku- I-Red Hat / i-CentOS, Isixazululo esibanzi sezinkampani ezinikeza:

• firewall iptables.
• Uhlelo lokuthola ukungena ISINYANYA
• I-Virtual Private Network (PPPT, IPSec, OpenVpn)
• Ummeleli onokuhlunga okuqukethwe (Squid, DansGuardian)
• izinsizakalo ze-imeyili (Webmail, I-Postfix, SMTP, I-POP3/ s, I-IMAP/ s)
• I-Groupware (UKolab)
• Isizindalwazi neWebhu Server (LAMP)
• Iseva yefayela nezinsizakalo zokuphrinta (Samba futhi CUPS)
• I-Flexshares (isitoreji esinobumbano se-multiprotocol sisebenzisa Ama-CIFS, HTTP/ S, FTP/ S, futhi SMTP)
• I-MultiWAN (Iphutha Lokuklama i-Inthanethi Ebekezelayo)
• Imibiko yezibalo zohlelo nezinsizakalo (I-MRTG nabanye)

<h3Devil Linux

Ukusatshalaliswa kwe-GNU / Linux okufanele kusetshenziswe njenge-Router / Firewall, egijima futhi isebenze kusuka ku-Live-CD, iyenze ikwazi ukusebenza kusuka kwi-PC endala. Ayisebenzisi isikhombimsebenzisi sokuqhafaza, ifaka phakathi i-DNS, iWebhu, i-FTP, izinsizakalo ze-SMTP, amathuluzi afana ne-Mysql, i-Wget ne-Lynx, nezinsiza zokuphepha ezifana ne-OpenVPN neShorewall. I-Linux kusuka ekuqaleni(I-Linux kusuka ekuqaleni) isistimu yokwakha yokusabalalisa ye-Linux evumela umsebenzisi ukuthi azenzele izinguqulo zakhe zenkambiso.
http://www.devil-linux.org/

I-Endian Firewall

Kuyisabelo I-GNU / Linux Umthombo ovulekile okhethekile ku-Routing / Firewalling, othuthukiswe yi-Italian Endian Srl nomphakathi we-Endian. Ekuqaleni kususelwe ku-IpCop okunye ukusatshalaliswa okwakuyimfoloko yeSmoothWall.

Inguqulo 2.2 iqukethe:

• firewall (Zombili izinkomba)
• I-Network yangasese eyi-Virtual (I-VPN) Isango con I-OpenVPN o I-IPsec
• kuwebhu I-antivirus
• kuwebhu I-Antispam
• I-E-Mail Antivirus
• Imeyili Antispam
• I-Transparent HTTP Proxy
• Ukuhlunga okuqukethwe
• I-Hotspot / engenantambo 
• Ukusekelwa kwe-SIP I-VoIP
• Ukuhumusha kwekheli lenethiwekhi
• Ikheli le-IP eliningi (iziteketiso)
• Isixhumi esibonakalayo sewebhu se-HTTPS
• Izibalo zokuxhuma
• Ilogi yenethiwekhi
• Ukudlulisela phambili izingodo kuseva yangaphandle
• Iseva ye-DHCP
• Iseva ye-NTP
• I-IDS (Uhlelo Lokuthola Ukungena)
• Ukusekelwa Kwemodemu ye-ADSL

http://www.endian.com/

I-Floppyfw

Ukusatshalaliswa kwe-GNU / Linux kuyasebenza I-BusyBox ukuhlinzeka nge-firewall / router kudrayivu yediski ebhuthayo.

I-Floppyfw igcinwa yi UThomas lundquist, ngaphansi kokuthuthukiswa okuqhubekayo. Uhlobo lwamanje ngu-3.0.12

Izidingo

•   Iprosesa ye-Intel 80386SX noma engcono
•   Amakhadi amabili enethiwekhi
•   Idrayivu yedrayivu engu-1.44 MB
•   12MB RAM

Kufaka:

• Uhlu lokulawula ukufinyelela
• ip-masquerading (ukuhunyushwa kwekheli lenethiwekhi)
• ukuhlunga iphakethe
• umzila osezingeni eliphakeme
• Ukushayiswa Kwethrafikhi
• I-PPPoE
• uhlelo olulula lokupakisha, olusetshenziswa ngabashicileli, i-VPN, ukumiswa kwezimoto
• Ukungena nge-klogd / syslogd endaweni yangakini futhi ukude
• Ukusekelwa kwembobo yomkhiqizo nge-console
• Iseva ye-DHCP ne-DNS cache yamanethiwekhi angaphakathi

http://www.zelow.no/floppyfw/index.html

Eziningi zalezi zabelo zingabuye zifakwe ezinhlotsheni ezithile zama-routers.
Okusetshenziswa kakhulu ukufakwa kuma-routers yi-

I-Openwrt

Ukusatshalaliswa kwe-GNU / Linux okutholakala kuma-routers nakumadivayisi ashumekiwe. Iqukethe isethi yamaphakeji esoftware angaba ngu-2000 afakiwe futhi akhishwa ngaphansi kohlelo lokuphathwa kwephakeji le-opkg. I-OpenWrt Ingalungiswa kusetshenziswa isikhombimsebenzisi somugqa womyalo weBusyBox, noma isikhombimsebenzisi sewebhu seLuCI.

I-Operwrt ingasebenza kuma-routers e-CPE, amasango okuhlala abantu, ama-smartphones, ama-pocket computer noma ama-PDA kanye nama-laptops amancane afana ne-OLPC, kepha futhi kungenzeka ukuthi isebenze kumakhompyutha ajwayelekile we-x86. Iphrojekthi ifaka i-wiki, iforamu, i-SVN Source Version Control, ne-Trac yokuphathwa kwephrojekthi, ukulungiswa kwamaphutha, nokuthuthukiswa kwamakhodi.Ukuxhaswa okwengeziwe kwezobuchwepheshe kunikezwa nge-IRC.

http://openwrt.org/

Abanye ... * m0n0wall
*PfSense
* IClarkConnect
*eBox
* I-SmoothWall
* Qeda
* IPCop

Ngiphetha ngokusho ukuthi hhayi ngoba ufaka okukodwa kwalokhu kusatshalaliswa, inethiwekhi yakho izoba ephephe kunazo zonke emhlabeni. Konke kuncike ekusebenziseni, ukumisa nokulungisa okunikeza kulo lonke uhlelo.

Ukubingelela!