Inguqulelo entsha ye Inkqubo ehambelanayo yokudala ii-firewall kunye neendlela zenethiwekhi Msgstr "PfSense 2.4.5". Le nguqulo intsha inika uphuculo oluthile, kodwa ngaphezulu kwayo yonke into iza kusombulula iimpazamo ezichongiweyo kuhlobo lwangaphambili.
Kwabo abangaziyo nge-pfSense kufuneka bayazi ukuba le Ulwabiwo lwesiko lweFreeBSD, oko ikukuthi ilungiselelwe ukusetyenziswa njengeFirewall kunye neRouter. Ibonakaliswa ngokuba ngumthombo ovulekileyo, inokufakwa kwiindidi ezahlukeneyo zeekhompyuter kwaye ikwakhona ujongano lwewebhu olucwangcisiweyo.
Malunga ne-pfSense
pfSense isebenzisa uphuhliso oluvela kwiprojekthi ye-m0n0wall kunye nokusetyenziswa okusebenzayo kwe-pf kunye ne-ALTQ. Ulwabiwo lulawulwa ngonxibelelwano lwewebhu.
I-Portal Portal, i-NAT, i-VPN (i-IPsec, i-OpenVPN), kunye ne-PPPoE inokusetyenziselwa ukuhlela ukufikelela komsebenzisi kwinethiwekhi engenazingcingo kunye ne-wireless. Uluhlu olubanzi lwezinto ezixhaswayo ziyaxhaswa ukunciphisa umda wendlela, ukunciphisa umda kunxibelelwano ngaxeshanye, isihluzo setrafikhi, kunye nokwenza ulungelelwaniso olusekwe kwi-CARP olusekwe kwisiphene.
Iinkcukacha-manani zomsebenzi ziboniswa kwiigrafu okanye kwifom yetafile. Ugunyaziso luxhaswa kwindawo yogcino lwedatha yomsebenzisi, kunye nakwiRADIUS kunye neLDAP.
Phakathi kweempawu zayo eziphambili ifunyenwe:
- Firewall
- Itheyibhile kaRhulumente
- Inguqulelo yeDilesi ye-Intanethi (NAT)
- Ukufumaneka okuphezulu
- Kwii-WAN ezininzi
- Ukulayisha umthwalo
- VPN enokuphuhliswa kwi-IPsec, OpenVPN nakwi-PPTP
- Umncedisi wePPPoE
- Iseva ye-DNS
- Indawo yokuthimba
- Iseva ye-DHCP
PfSense Unomphathi weephakheji ukwandisa ukusebenza kwayoXa ukhetha iphakheji oyifunayo, inkqubo iyazilayisha ngokuzenzekelayo kwaye iyifake. Kukho iimodyuli ezijikeleze amashumi asixhenxe ezikhoyo, phakathi kwazo i-squid proxy, IMSpector, Snort, ClamAV, phakathi kwabanye.
Iimpawu ezintsha eziphambili pfSense 2.4.5
Kule nkupho intsha sinokuyifumana izinto zesiseko zenkqubo zihlaziyiwe kwiFreeBSD 11-STABLE.
Kwinxalenye yokuphuculwa kwale nguqulo intsha, sinokuyifumana kwamanye amaphepha ojongano lwewebhu, kubandakanya umphathi wesatifikethi, uluhlu lokubopha lwe-DHCP, kunye neetafile ze-ARP / NDPInkxaso yokuhlela kunye nokukhangela ivele.
Kwiseto senkqubo yefayile yeUFS yeenkqubo ezintsha, ngokungagqibekanga, imo yexesha langoku inikwe amandla ukunciphisa imisebenzi yokubhala engeyomfuneko.
Kwelinye icala, kwifayile ye- Isisombululo se-DNS esingafakwanga, songezwe kwizixhobo zokudibanisa ukubhala kwePython.
Ngelixa le-IPsec DH (Diffie-Hellman) kunye ne-PFS (egqibeleleyo yokuPhambili kweMfihlo), amaqela e-Diffie-Hellman angama-25, 26, 27 kunye nama-31 ongezelelweyo.
Ukongeza koku, isibhengezo sikhankanya ukuba "i-autocomplete = iphasiwedi entsha" yongezwe kwiifom zokungqinisisa Ukukhubaza ukugqitywa kwamasimi ngokuzenzekelayo ngedatha ebuthathaka kwaye kongeze ababoneleli berekhodi abanamandla be-DNS: iLinode kunye neGandi.
Kwicala lokulungisa, isibhengezo sikhankanya ukuba ubuthathaka obuninzi bulungisiwe, kubandakanya umba kwi-interface esekwe kwiwebhu evumela umsebenzisi oqinisekisiweyo ukuba afikelele kwiwijethi yokulayisha umfanekiso ukuze asebenzise nayiphi na ikhowudi ye-PHP kwaye afumane ukufikelela kumaphepha anelungelo lomlawuli. ujongano. Kwakhona, isiza esinqamlezayo (XSS) sisusiwe kubuso obusekwe kwiwebhu.
Khuphela kwaye ufumane pfSense
Okokugqibela, kwabo banomdla wokukhuphela kunye nokufaka okanye ukuvavanya le nkqubo.
Ungawufumana umfanekiso wale nto, kwiwebhusayithi yakho kwaye kwicandelo lokukhuphela unokufumana amakhonkco ukukhuphela umfanekiso wenkqubo.
Kwicandelo lokukhuphela Singafumana imifanekiso emininzi yoyilo lwe-amd64, ezohluka ngobukhulu ukusuka kwi-300 kuye kwi-360 MB, phakathi kwazo sinokufumana i-LiveCD kunye nomfanekiso wokufaka kwi-USB Flash.
Umfanekiso we-usb unokurekhodwa kunye ne-Etcher esisixhobo esiphindaphindayo. Okanye kwimeko yeWindows baya kuba nakho ukurekhoda umfanekiso ngoncedo lukaRufus.
Ngelixa sivela kwiLinux sinokuzixhasa ukusuka kwisiphelo sendlela ngomyalelo we-dd.