Iyo itsva vhezheni yeiyo compact system yekugadzira firewalls uye network masuo "PfSense 2.4.5". Iyi vhezheni nyowani inopa kumwe kugadzirisa, asi pamusoro pezvose zvinouya kugadzirisa zvimwe zvikanganiso zvakaonekwa mushanduro yapfuura.
Kune avo vasina kujaira pfSense, vanofanirwa kuziva kuti izvi itsika yekuparadzira FreeBSD, zvinova yakashandurwa kuti ishandiswe seFirewall uye Router. Iyo inozivikanwa nekuve yakavhurwa sosi, inogona kuiswa pamhando dzakasiyana dzemakomputa uye zvakare ine yakapusa webhu interface yekugadzirisa kwayo.
Nezve pfSense
pfSense inoshandisa zvinokudziridzwa kubva ku m0n0wall chirongwa uye kushandiswa kwe pf uye ALTQ. Kugoverwa kunotarisirwa kuburikidza newebhu webhu.
Captive Portal, NAT, VPN (IPsec, OpenVPN), uye PPPoE inogona kushandiswa kuronga mushandisi kuwana pane wired uye isina waya netiweki. Hwakasiyana siyana hwehunyanzvi hunotsigirwa kudzikamisa bandwidth, kudzikamisa huwandu hwekubatana panguva imwe chete, firita traffic, uye gadzira iyo CARP-yakavakirwa kukanganisa-kushivirira kumisikidza.
Nhamba dzeJobho dzinoratidzwa mumagrafu kana mutafura fomu. Mvumo inotsigirwa mudura renzvimbo revashandisi, pamwe neRADIUS neLDAP.
Pakati pehunhu hwayo hukuru inowanikwa:
- firewall
- State Tafura
- Shanduro yeNharembozha (NAT)
- Kuwanika kwepamusoro
- Multi WAN
- Mutoro kuenzanisa
- VPN iyo inogona kuvandudzwa muIPsec, OpenVPN uye muPPTP
- PPPoE server
- DNS server
- Captive portal
- DHCP server
PfSense ine maneja wepakeji yekuwedzera mashandiro ayoPaunenge uchisarudza iyo yaunoda package, iyo sisitimu inozvirodha otomatiki uye nekuiisa iyo. Kune akakomberedza makumi manomwe emamojuru anowanikwa, pakati pawo ari squid proxy, IMSpector, Snort, ClamAV, pakati pevamwe.
Main nyowani maficha pfSense 2.4.5
Mune ino nyaya nyowani tinogona kuwana izvo iwo epasi system system akagadziridzwa kuita FreeBSD 11-STABLE.
Kune chikamu chekuvandudza kubva pane iyi nyowani vhezheni, isu tinogona kuwana pane mamwe mapeji ewebhu interface, kusanganisira chitupa maneja, DHCP kusunga runyorwa, uye ARP / NDP matafura ayoTsigiro yekurongedza nekutsvaga yaonekwa.
Mune iyo UFS faira masystem masystem matsva, nekutadza, iyo noatime mode inogoneswa kudzikisira zvisina basa kunyora mabasa
Kune rimwe divi, mune unbound DNS resolution, yakawedzerwa kuPython kunyora zvinyorwa zvekubatanidza.
Panguva ye IPsec DH (Diffie-Hellman) uye PFS (Yakakwana Mberi Chakavanzika), Diffie-Hellman mapoka 25, 26, 27 uye 31 akawedzerwa.
Pamusoro peizvi, chiziviso chinotaura icho "autocomplete = nyowani-password" hunhu hwakawedzerwa kumafomu ekusimbisa kudzimisa auto-kupedzisa kweminda ine data rakaomarara uye zvakare yakawedzera nyowani DNS inesimba rekodhi vanopa: Linode naGandi
Padivi rekugadzirisa, chiziviso chinotaura kuti kusagadzikana kwakawanda kwakagadziriswa, kusanganisira nyaya iri muwebhu-based interface iyo inobvumidza mushandisi akavimbiswa kuwana mukana wekuisa mufananidzo widget kuti amhanye chero kodhi yePHP uye awane mukana kune iwo ane ropafadzo mapeji emubati. interface. Zvakare, muchinjikwa -saiti script (XSS) yabviswa kubva pawebhu-yakavakirwa interface.
Dhawunirodha uye utore pfSense
Chekupedzisira, kune avo vanofarira kugona kurodha pasi uye nekuisa kana kugona kuyedza ino system.
Unogona kuwana mufananidzo weizvi, kubva pawebhusaiti yako uye muchikamu chayo chekurodha unogona kuwana zvinongedzo zvekutora iyo system mufananidzo.
Muchikamu chekurodha pasi tinogona kuwana akati wandei mifananidzo yeamd64 architecture, iyo inosiyana pakukura kubva pa300 kusvika pa360 MB, pakati pavo tinogona kuwana LiveCD uye mufananidzo wekuisa mu USB Flash.
Mufananidzo weUSb unogona kurekodwa neEtcher inova chishandiso cheplatform. Kana pane iyo Windows ivo vanozokwanisa kunyora iyo mufananidzo nerubatsiro rweRufus.
Tichiri kubva kuLinux isu tinogona kuzvitsigira kubva kune iyo terminal neiyo dd yekuraira.