En nyaya dzakapfuura Takataura nezvekukosha uye kudiwa kwekuve nekuchengetedza kwakaringana zvinhu zvedata uye zvirongwa zvedu. Iye zvino tichataura pamusoro pemhando dzemakombiyuta ekuchengetedza maturusi.
Munguva yakapfuura, zvaitendwa kuti kuisa Linux yakadzivirirwa kubva kune chero rudzi rwekurwiswa, zvisinei, kuwanda kwekuzivikanwa kwayo muhurumende nemakambani emakambani kwakaita kuti ive chinangwa chemacybercriminals.
Mhando dzemakombiyuta ekuchengetedza maturusi
Isu takatotsanangura muzvinyorwa zvakapfuura kuti kune marudzi maviri ekurwiswa: ayo anonangana nekusagadzikana kwesoftware uye izvo zvinotsvaga kushandisa hunhu hwepfungwa dzevanhu. Maturusi aya ane basa rekuchengetedza ese ari maviri Hardware (makomputa masisitimu nemanetiweki anoabatanidza) uye ruzivo rwakadzama rwakadai sekuwana data kubva kumarudzi ese ekurwiswa.
firewall
Ndivo vhezheni yekombuta yetsika kubvira inotarisisa network traffic ichipinda nekubuda uye kune komputa yemuno kana network uye netiweki yekunze. Inozviita nekushandisa seti yemitemo (Predefined Rules) kudzivirira kupinda kusingatenderwe uye kuurayiwa kwesoftware yakaipa.
Iwo ambotaurwa marongero anotarisisa kuti ndeipi traffic inogona kupfuura nayo zvichienderana nemaitiro akadai seprotocol, IP kero kana maapplication.
Nzira dzekuongorora traffic dzinoshandiswa ne firewall ndeidzi:
- Packet kusefa: Ndiyo nzira yatakatsanangura pamusoro, yega yega data packet inoongororwa zvinoenderana neyakagadziriswa maitiro uye zvinoenderana navo vanosarudza kana vakapasa kana kwete.
- State inspection: Sarudzo yekubvumidza kuti packet ipfuure kana kuti kwete yakavakirwa pakutarisa kubatana kune kunobva packet.
- Application layer firewalls: Aya ndiwo mafirita epamberi ayo padanho rekushandisa anoongorora mapaketi anotarisa pane chaiwo maapplication uye zvishandiso.
Mamwe mafirewall eLinux
IPFire
Yakavakwa kubva kuLinux Kubva kuScratch (Chimiro chekuvaka Linux kugovera kubva kutanga) kugoverwa uku Linux inobvumira nhamba huru yemidziyo yakadai seRaspberry Pi kuti ishandiswe semafirewall.
Iyo yekuisa maitiro iri nyore kwazvo uye intuitive kubvira magadzirirwo akasiyana akakamurwa kuva zvinhu zvinoonekwa nemavara. Green yakachengeterwa makomputa akabatana netiweki yemuno, nepo tsvuku inoreva Internet. Kuti traffic iende kubva kutsvuku kuenda kune yakasvibira, unofanirwa kuibvumidza.
Nekugovera iwe unogona zvakare kuona intrusions uye kuvaka emuno akavanzika network.
Isina kuomesesa Firewall (UFW)
Ndiyo software yaungangove wakaisa pane yako Linux kugovera kana yauchawana mumatura. Zita rayo chaizvoizvo rinoreva kuti uncomplicated firewall.
Kushanda kwayo kunoenderana neNetfilter framework inosanganisirwa kubva kufekitori muLinux kernel. A suite yemirairo inozivikanwa se iptables inoshandiswa kugadzirisa Netfilter.
Ufw inozove yekumberi kune iptables inoita kuti zvive nyore kubata netfilter, nekushandisa yekuraira mutsara interface kushandura firewall. Iyi interface iri nyore kwazvo kushandisa kune vese vashandisi ve novice uye nyanzvi maneja.
Izvo zvinokwanisika kuishandisa pamwe chete neiyo graphical interface.
shore wall
shore wall yakafanana neUFW pakuti haidi kushandiswa kwehardware kana virtualization mhinduro kushanda. Inoshanda zvakare pamusoro peNetfilter.
Kuti uise zvinodiwa zvekushanda, mafaira ekugadzirisa anoshandiswa kuti purogiramu ichange iine basa rekushandisa uchishandisa iptables.
Icho chishandiso chakanakira makomputa ane ndangariro shoma sezvo kana iyo yekumisikidza yapera haidi kuramba ichishanda. Nekudaro, kuchinjika kwayo uye simba zvine mufananidzi iyo isiri nyore kushandisa.
pfsense
Imwe firewall yakaiswa mukugovera, panguva ino kubva kuFreeBSD. Inogona kushandiswa pane router, DHCP kana DNS server level.
Kugadziriswa kwayo kunoitwa kubva pawebhu interface uye ine zvinyorwa zvakanakisa pamwe nerutsigiro rwekutengesa.
Muchinyorwa chinotevera ticharamba tichitaura nezve mamwe maturusi ekuchengetedza eLinux.