Sabuwar sigar na karamin tsarin don ƙirƙirar garun wuta da ƙofar hanyar sadarwa "PfSense 2.4.5". Wannan sabon sigar ya gabatar da wasu ci gaba, amma sama da duka ya zo ne don warware wasu kurakurai waɗanda aka gano a cikin sigar da ta gabata.
Ga wadanda basu da masaniya game da pfSense su sani cewa wannan rarrabuwa ce ta FreeBSD, wanda yake An daidaita don amfani azaman Firewall da Router. Yana da halin kasancewa tushen budewa, ana iya girka shi a kan kwmfutoci iri-iri sannan kuma yana da sauƙin yanar gizo don daidaitawa.
Game da pfSense
pfSense yana yin amfani da ci gaba daga aikin m0n0wall da amfani mai amfani na pf da ALTQ. Ana gudanar da rarraba ta hanyar haɗin yanar gizo.
Portofar tiveaura, NAT, VPN (IPsec, BuɗeVPN), da PPPoE za a iya amfani da su don tsara damar mai amfani a kan hanyar sadarwa da mara waya. Ana tallafawa nau'ikan iyawa iri-iri don iyakance bandwidth, iyakance adadin haɗin kai lokaci guda, tace zirga-zirga, da ƙirƙirar abubuwan daidaitawa na CARP mai tushen kuskure.
Ana nuna ƙididdigar aikin a cikin zane-zane ko a cikin tsari. Ana tallafawa izini a cikin rumbun adana bayanan mai amfani na cikin gida, haka kuma ta hanyar RADIUS da LDAP.
Daga cikin manyan halayensa an same shi:
- Firewall
- Teburin Jiha
- Fassarar Adireshin Yanar Gizo (NAT)
- Babban samuwa
- Multi WAN
- Daidaita lodi
- VPN wanda za'a iya haɓaka a cikin IPsec, BuɗeVPN da cikin PPTP
- PPPoE uwar garke
- Uwar garken DNS
- Tiveofar fursuna
- Sabar DHCP
PfSense yana da mai sarrafa kunshin fadada ayyukansaLokacin zabar kunshin da ake so, tsarin yana sauke ta atomatik kuma yana girka shi. Akwai kayayyaki kusan saba'in da ake dasu, daga cikinsu akwai wakilin Squid, IMSpector, Snort, ClamAV, da sauransu.
Sabbin fasali pfSense 2.4.5
A cikin wannan sabon batun zamu iya samun hakan an sabunta abubuwan haɗin tsarin zuwa FreeBSD 11-STABLE.
Ga ɓangaren haɓakawa daga wannan sabon sigar, zamu iya samu a kan wasu shafukan yanar gizon yanar gizo, gami da manajan satifiket, DHCP jerin jeri, da teburin ARP / NDPTaimako don rarrabewa da bincike ya bayyana.
A cikin saitunan tsarin fayil na UFS don sababbin tsarin, ta tsohuwa, ana kunna yanayin lokacin hutu don rage ayyukan rubuce-rubuce marasa buƙata.
A gefe guda, a cikin unbound DNS mai warwarewa, an ƙara shi zuwa kayan haɗin haɗin rubutun Python.
Duk da yake don IPsec DH (Diffie-Hellman) da PFS (Cikakken Tsare Sirri), an ƙara kungiyoyin Diffie-Hellman 25, 26, 27 da 31.
Baya ga wannan, sanarwar ta ambaci hakan An ƙara sifa "autocomplete = sabon-kalmar wucewa" zuwa siffofin tantancewa don dakatar da ƙaddamar da filayen kai tsaye tare da bayanai masu mahimmanci kuma an ƙara sabbin masu samar da rikodin DNS masu ƙarfi: Linode da Gandi.
A bangaren gyarawa, sanarwar ta ambaci cewa an daidaita laulayi da yawa, gami da batun cikin tsarin yanar gizo wanda ke bawa mai amfani ingantacce damar samun damar shigar da widget din hoto don gudanar da kowace lambar PHP da samun damar shiga shafuka masu dama na mai gudanarwa. dubawa Hakanan, an cire rubutun giciye (XSS) daga tsarin yanar gizo.
Zazzage kuma sami pfSense
A ƙarshe, ga masu sha'awar iya saukarwa da girkawa ko iya gwada wannan tsarin.
Kuna iya samun hoton wannan, daga shafin yanar gizan ku kuma a bangaren saukar da shi zaka iya samun hanyoyin da zaka saukar da hoton tsarin.
A cikin sashen saukarwa zamu iya samun hotuna da yawa don ginin amd64, wanda ya bambanta girman daga 300 zuwa 360 MB, a cikin su zamu iya samun LiveCD da hoto don girkawa a USB Flash.
Hoton don kebul na iya yin rikodin tare da Etcher wanda kayan aiki ne na kayan aiki da yawa. Ko kuma game da Windows za su iya yin rikodin hoton tare da taimakon Rufus.
Yayinda daga Linux zamu iya tallafawa kanmu daga tashar tare da umarnin dd.