Ukulungisa iptables, amathiphu, nezeluleko Dummies

Okusetshenziswayo umyalo agudle lo iptables, okuzoxoxwa ngayo kulesi sihloko iyinhlangano esibonakalayo ejwayelekile ukuthi isetshenziswa ukulawula firewall netfilter. Lona yonke efanele, uma ikhompyutha yakho iyasebenza Linux ezisebenza uhlelo izinguqulo 2.4 no 2.6. Uma sikubeka kalula, ukumisa iptables kusiza ukuphatha lokuvikela, kodwa uyisebenzisa sidinga ukufinyelela impande. Naphezu kweqiniso lokuthi nomqondo ezahlukene, ngokuvamile kakhulu, ukhuluma ngabo, abantu asho into efanayo. Kodwa akunjalo.

Abantu evamile futhi abavamile cishe wezwa umqondo, okukhulunywa ngakho, kodwa isho ukuthini futhi lokho okudingekayo, kwabanye engaqondakali. Ngakho, kuzo zonke ikhompuyutha exhunywe kwi-internet, zidlule amaphakethe wenethiwekhi ezihlukahlukene ezidinga ukulawulwa. Lona firewall injongo. Le software ezisebenza ezahlukene OSI izingqimba. Basebenta ngokuhambisana wathi umsebenzi ekhethiwe futhi isenzo.

The main futhi umsebenzi oyinhloko firewall - isivikelo ezifana nokufinyelela okungagunyaziwe kuya amayunithi ngabanye kanye wonke amanethiwekhi computer. Badlala indima izihlungi (bebizwa): hlola futhi ukuhlunga amaphakethe wenethiwekhi ngokuvumelana nezimfuno ukuba kunqunywa uhlelo. Ethonya siwukuthi bangamalungu neketanga esingaguquguquki senzo. Empeleni, lokhu kwenzeka. Ukusetha i-iptables kusiza umsebenzisi ukusebenzisa yonke imithetho, by okuqondwe ngalokhu okulandelayo:

1. ukuhambisana iphakethe yokuhlola.
2. Ukusebenzisa izenzo ezifanele.

Isenzo kubhekwa njengendlela operation evamile abavamile, isib, YAMUKELA lakhe nokubulawa kwakhe ukwenza ushintsho yangaphakathi komunye uchungechunge kwenye. Indlela ukukwenza konke, zingatholakala kunoma iyiphi izilungiselelo imfundo iptables for Dummies. Okuningi abasebenzisi eziphambili ukwazi ukuthi izenzo ngokwabo ezinhlobo ezimbili: esibulalayo futhi okungezona esigungwini. Injongo eyinhloko ngowokuqala - ukuyeka ukucutshungulwa batch esikuziphathimandla eziyisisekelo imingcele, isibonelo, ALA. Okwesibili, ngokungafani, abayeki kucutshungulwa iphakethe, isibonelo, MARKU, TOS, by kushintshwe kuze kube sekupheleni logic. Lapho idatha wadlulela lonke uchungechunge, futhi kunikezwa yisiphi isenzo esisodwa, kuphela kusho ukuthi konke kwenzeka ngo imodi ezenzakalelayo (setha njengoba primary)

Jwayelekile kulungiselelwa iptables inikeza izinhlobo ezintathu eziyinhloko amathebula lapho Umbuso:

1. Mangle - uvame esetshenziswa uma udinga ukwenza izinguquko igama iphakethe. Isibonelo kukhona ukushintshwa TOS izingcezu.
2. Nat - chain ukubonisa Ikheli Network. Kungaba kwenziwe kuphela nemingcele omunye. Akukho ukuhlunga ayikwazi eyenziwa ngaphandle ezimweni ezingavamile.
3. Hlunga - idlule ke, wonke amaphakethe engenayo, futhi akukho mehluko, balandela nanoma yimuphi esibonakalayo. Ngamanye amazwi, iketango izihlungi traffic.

Bonke abasebenzisi banesithakazelo kakhulu ezintweni etafuleni lwesithathu. Isebenzisa ngamaketanga amathathu. Eyokuqala - kwamaphakethe engenayo - INPUT, kwesibili - zokuya komunye ikhompyutha kwenye - PHAMBILI, kanti eyesithathu - I-Eziphumayo - okukhiphayo. Ngaphansi kwemithetho yamanje, noma iyiphi iphakheji, uya yonke indlela, noma nje bayishaye indiva, noma cha.

Yonke imithetho ekhona iptables Ubuntu ukucushwa ivumela ukuhlela njengoba ungathanda umsebenzisi. Lokhu kwenziwa ngokufaka imiyalo ethile kule esigungwini. A string equkethe nenqubo sokunquma iphakethe, futhi kukhona umthetho. imithetho okuyisibonelo irekhodi le: iptables [-t nethebula igama] umyalo [iphethini] [isinyathelo -J]. Lapha t likhomba onjani itafula ngeke, uma kungenjalo, kusikiselwa okuzenzakalelayo string (ukuhlunga). Uma umsebenzisi kudinga uhlobo ehlukile, kumele ifakwe ngesandla. Ithimba Kumelwe ume ngokushesha ngemuva igama. Uma kungekho esinjalo, kuba okokuqala. Isenzo ichaza ukubeka iptables. I ezivamile ezifana YAMUKELA (iphakethe qeda Kuqediwe), Drop (ungalahlekelwa, buthule ukulahla isenzo luphela hhayi kuphela neketango olulodwa, kodwa futhi nabo bonke abanye).