Zimbalwa iintsuku ezidlulileyo Inguqulelo entsha ye ukuhanjiswa kweFirewall I-OPNsense 20.7 kwaye apho eyona nto iphambili Eyona nto ibonakalayo yile hlaziya ukumiliselwa kwenkqubo yokufumanisa ukungenelela kunye nothintelo Meerkat 5.
Kulabo abangazi OPNsense Kuya kufuneka bayazi ukuba le nto yimfoloko yeprojekthi yePSSense, idalwe ngenjongo yokwenza usasazo oluvulekileyo ngokupheleleyo olunokuba nokusebenza kwinqanaba lezisombululo zorhwebo zokuphumeza ii-firewall kunye neendlela zomnatha.
Malunga ne-OPNsense
Ngokungafaniyo ne-pfSense, eIprojekthi ibekwe njengengalawulwa yinkampani, iphuhliswe ngokuthatha inxaxheba ngokuthe ngqo koluntu kwaye inenkqubo ebonakalayo yophuhliso.
Ukuhanjiswa kwesiseko kusekwe kwikhowudi ye-HardenedBSD 12.1, Egcina imfoloko ehambelanayo yeFreeBSD, edibanisa iindlela ezongezelelekileyo zokukhusela kunye nobuchule bokulwa nokuxhatshazwa.
Phakathi kwamathuba anokuthi i-OPNsense unokwazi ukwahlula ngokupheleleyo uvule isixhobo sokwazi faka njengeephakeji kwiFreeBSD eqhelekileyo, umthwalo wokulinganisa, useto lwewebhu Imibutho yokudibanisa abasebenzisi kwinethiwekhi (i-portal portal).
Kukwakho nazo iindlela zonxibelelwano ezichazayo (pf-based statewall firewall) setha umda we-bandwidth, isihluzo se-traffic, yenza i-VPN esekwe kwi-IPsec, OpenVPN kunye ne-PPTP, ukudityaniswa kwe-LDAP kunye neRADIUS, inkxaso ye-DDNS (i-DNS enamandla), inkqubo yokubika ebonakalayo kunye nemifanekiso.
Kwakhona, Unikezelo lubonelela ngezixhobo ukwenza ulungelelwaniso olunyamezelayo ngokusekwe ekusebenziseni umthetho we CARP kwaye ikuvumela ukuba uqale indawo eyongezelelweyo ukongeza kwi-firewall ephambili, eya kuthi ngokuzenzekelayo ivumelanise kwinqanaba loqwalaselo kwaye ithathe umthwalo kwimeko yentsilelo yokuqala.
Kumlawuli, Inika ujongano lwangoku nolulula ukumisela iFirewall, Yenziwe kusetyenziswa isikhokelo sewebhu seBootstrap.
Ikhowudi yemvelaphi yamacandelo osasazo, kunye nezixhobo ezisetyenziselwa ulwakhiwo, zisasazwa phantsi kwelayisensi ye-BSD.
Ewe Imifanekiso yenkqubo ezi zenziwe njenge-LiveCD, Nangona Inkqubo yomfanekiso ikwasasazwa ukubhala kwiFlash drive.
Yintoni entsha kwi-OPNsense 20.7?
Le nguqulo intsha ifika notshintsho ezimbalwa, kodwa isenguhlobo olubalulekileyo, kuba isiseko senkqubo kule nguqulo intsha sihlaziyiwe kunye neHardenedBSD 12.1, ifolokhwe yeFreeBSD 12.1, edibanisa iindlela ezongezelelekileyo zokhuselo kunye neendlela zokulwa ukuxhaphaza.
Kwakhona, njengoko bekutshiwo ekuqaleni, eyona nto ibalaseleyo kuhlobo olutsha kukuhlaziya kweSuricata kwinguqu yayo yesi-5.
Ngolu hlaziyo sinokufumana entsha iimodyuli zokuhlalutya nokubhalisa iiprotocol I-RDP, iSNMP kunye ne-SIP.
Ukongeza ekubeni kwimowudi yokuhlola ye-HTTP, zonke iimeko ezichazwe kwi-suite yovavanyo lwe-HTTP Evader zigutyungelwe ngokupheleleyo.
Olunye uphuculo olufunyenwe ngeZuricata 5 yinkxaso yendlela yokuqinisekisa umxhasi we-TLS JA3 Inkxaso yendlela yeJA3S yongezwa.
Kwaye kuyabonakala ukuba ikhowudi ibhaliwe kwakhona ukubamba ukugcwala kwabantu kusetyenziswa isikhokelo yiNetmap kwaye kunye nokongezwa amandla okusebenzisa imisebenzi yeNetmap eqhubele phambili, njengokutshintsha kwe-VALE ebonakalayo.
Olunye utshintsho olwahlukileyo:
- Inkxaso eyongeziweyo ye-DHCPv6 Multi-WAN ukunxibelelana ngeendlela ezininzi.
- Kuyenzeka ukuba uchaze awakho amaphepha abonisiweyo kwimeko yeempazamo zonxibelelwano kusetyenziswa ummeli wewebhu.
- Yongezwe ingxelo enomthi omile wolwazi malunga nonxibelelwano lwenethiwekhi.
- Ukuphunyezwa kwe-API yolawulo lomlilo.
- Ukuphucula ukhetho lokucoca iirekhodi kubhabho.
Khuphela ingxelo entsha ye I-OPNsense 20.7
Si Ngaba uyafuna ukufumana le nguqulo intsha solamente Kuya kufuneka uye kwiwebhusayithi esemthethweni nakwicandelo lokukhuphela ungafumana ikhonkco lokukhuphela le nguqulo intsha.
Imifanekiso ilungiselelwe ngohlobo lwe-LiveCD kunye nomfanekiso wenkqubo yokubhalela iiFlash drive, ubungakanani bomfanekiso umalunga ne-420MB.
I-OPNSense vs pfSence? yeyiphi endifanele ukuyikhetha?