En izihloko ezedlule Sikhulume ngokubaluleka nesidingo sokuba nezinto ezivikelayo ezanele zedatha yethu nezinhlelo. Manje sizokhuluma ngezinhlobo zamathuluzi okuphepha kwekhompyutha.
Esikhathini esedlule, bekunenkolelo yokuthi ukufaka i-Linux kuvikelwe kunoma yiluphi uhlobo lokuhlaselwa, nokho, izinga lokuduma kwayo kuhulumeni kanye nemikhakha yezinkampani kwenze ukuthi ibe umgomo wezigebengu ze-inthanethi.
Izinhlobo zamathuluzi okuphepha ekhompyutha
Sesivele sichazile ezihlokweni ezedlule ukuthi kunezinhlobo ezimbili zokuhlasela: lezo eziqondise ekubeni sengozini kwesoftware kanye nalezo ezifuna ukuxhaphaza izici zengqondo zabantu. Lawa mathuluzi aphethe ukuvikela kokubili ihadiwe (amasistimu ekhompyutha namanethiwekhi awaxhumayo) kanye nolwazi olubucayi olufana nokufinyelela idatha kusuka kuzo zombili izinhlobo zokuhlasela.
firewall
Ziyinguqulo yekhompyutha yamasiko kusukela ngaleso sikhathi iqapha ithrafikhi yenethiwekhi engena futhi ephuma futhi eya kukhompuyutha yasendaweni noma inethiwekhi kanye nenethiwekhi yangaphandle. Lokhu ikwenza ngokusebenzisa isethi yezinqubomgomo (Imithetho Echazwe Phambili) ukuze kuvinjelwe ukufinyelela okungagunyaziwe kanye nokwenziwa kwesofthiwe eyingozi.
Izinqubomgomo ezishiwo ngenhla zinquma ukuthi iyiphi ithrafikhi engadlula kuyo ngokusekelwe kumibandela efana nezivumelwano, amakheli e-IP noma izinhlelo zokusebenza.
Izindlela zokuhlaziywa kwethrafikhi ezisetshenziswa ngama-firewall yilezi:
- Ukuhlunga iphakethe: Kuyindlela esiyichaze ngenhla, iphakethe ledatha ngalinye lihlaziywa ngokwemibandela ebekiwe futhi ngokusho kwabo banquma ukuthi bayaphasa noma cha.
- Ukuhlolwa kwezwe: Isinqumo sokuvumela iphakethe ukuthi lidlule noma lingadluli sisekelwe ekuqapheni ukuxhumana nomthombo wephakethe.
- Ama-firewall esendlalelo sohlelo lokusebenza: Lezi izihlungi ezithuthuke kakhulu ezingeni lohlelo lokusebenza ezihlola amaphakethe agxile ezinhlelweni ezithile nakumadivayisi.
Amanye ama-firewall e-Linux
I-IPFire
Yakhiwe kusuka ku-Linux Ukusuka ku-Scratch (Uhlaka lokwakha ukusatshalaliswa kwe-Linux kusuka ekuqaleni) lokhu kusatshalaliswa I-Linux ivumela inani elikhulu lamadivayisi afana ne-Raspberry Pi ukuthi isetshenziswe njengezicishamlilo.
Inqubo yokufaka kulula kakhulu futhi enembile kusukela ukucupha okuhlukene kuhlukaniswe ngezinto ezikhonjwe ngemibala. Okuluhlaza kugcinelwe amakhompyutha axhunywe kunethiwekhi yendawo, kuyilapho okubomvu kubhekisela ku-inthanethi. Ukuze ithrafikhi isuke kokubomvu iye kokuluhlaza, kufanele uyigunyaze ngokuqondile.
Ngokusatshalaliswa ungathola nokungena futhi wakhe amanethiwekhi angasese endawo.
I-Firewall Engayinkimbinkimbi (UFW)
Isofthiwe okungenzeka ukuthi uyifakile ekusabalaliseni kwakho i-Linux noma ozoyithola kumakhosombe. Igama layo ngokwezwi nezwi lisho i-firewall engaxakile.
Ukusebenza kwayo kusekelwe kuhlaka lwe-Netfilter olufakwe efekthri ku-Linux kernel. Iqoqo lemiyalo eyaziwa ngokuthi i-iptables lisetshenziselwa ukulungisa i-Netfilter.
I-Ufw bese iyindawo engaphambili yama-iptables eyenza kube lula ukuphatha i-netfilter, ngokusebenzisa isixhumi esibonakalayo somugqa womyalo ukukhohlisa i-firewall. Lesi sikhombikubona kulula kakhulu ukusisebenzisa kubo bobabili abasebenzisi be-novice kanye nabaphathi abangochwepheshe.
Kungenzeka ukuyisebenzisa ngokuhambisana ne-graphical interface.
I-Shorewall
I-Shorewall ifana ne-UFW ngoba ayidingi ukusetshenziswa kwehadiwe noma izixazululo ze-virtualization ukuze isebenze. Isebenza futhi nge-Netfilter.
Ukuze kutholwe izidingo zokusebenza, kusetshenziswa amafayela okumisa lawo uhlelo oluzobe luphethe ukusetshenziswa kusetshenziswa ama-iptables.
Kuyithuluzi elikahle lamakhompyutha anenkumbulo encane njengoba uma inqubo yokumisa isiphelile ayidingi ukuqhubeka nokusebenza. Kodwa-ke, ukuguquguquka kwayo namandla kunomlingani okungeyona into elula ukuyisebenzisa.
pfsense
Enye i-firewall efakwe ekusabalaliseni, kulokhu isuka ku-FreeBSD. Ingasetshenziswa kumzila, i-DHCP noma ileveli yeseva ye-DNS.
Ukucushwa kwayo kwenziwa kusuka kusixhumi esibonakalayo sewebhu futhi inemibhalo emihle kakhulu kanye nokwesekwa kwezohwebo.
Esihlokweni esilandelayo sizoqhubeka nokukhuluma ngamanye amathuluzi okuphepha eLinux.