Firewall yokhazikitsidwa mu ntchito yogwira ntchito imagwiritsidwa ntchito popewa magalimoto osavomerezeka pakati pa ma network apakompyuta. Buku kapena kusungitsa malamulo apadera pamoto, womwe ndi udindo wofikira. Ku OS, wopangidwa pa Linux Kernel, Centon 7 pali chowombera moto womangidwa, ndipo chimayendetsedwa ndi Firewall. Flawwallld yokhazikika imakhudzidwa, ndipo tikufuna kukambirana za izi lero.
Sinthani moto wamoto mu malo 7
Monga tafotokozera pamwambapa, chowongolera cholondola mu malo 7 chimapatsidwa chida chothandizira moto. Ichi ndichifukwa chake malo osungira moto adzaonekere pachitsanzo cha chida ichi. Mutha kukhazikitsa malamulo osefa ndi obowola, koma imachitika mosiyana pang'ono. Timalimbikitsa kuti mudziwe zomwe zatchulidwazi podina cholumikizira chotsatirachi, ndipo tidzayamba kusamvana kwa moto wamoto.Ngati mungakhale ndi nthawi yayitali kapena yothetseratu moto, tikukulangizani kuti mugwiritse ntchito malangizo omwe afotokozedwazo ndi ulalo wotsatirawu.
Werengani zambiri: Lemekezani moto mu malo 7
Onani malamulo okhazikika ndi malo otsika mtengo
Ngakhale moto wokhazikika ali ndi malamulo ake enieni ndi malo opezeka. Musanayambe kusintha kwandale, tikukulangizani kuti mudziwe za kasinthidwe pano. Izi zimachitika pogwiritsa ntchito malamulo osavuta:
- Malo okhazikika adzazindikira kuti ndi BMD-Chumar-One-Command-Onel.
- Pambuyo pa kutsegula kwake, muwona chingwe chatsopano chomwe chimanga chomwe mukufuna chimawonekera. Mwachitsanzo, "pagulu" limawerengedwa mu chithunzi pansipa.
- Komabe, magulu angapo akhoza kugwira ntchito mwachangu, pambali pake, amamangirizidwa ndi mawonekedwe osiyana. Dziwani izi kudzera pa chinsinsi cha Firewall-CMD - Ogwira Ntchito.
- Wotchinga moto-cmd - lamulo lililonse liziwonetsa malamulo omwe amakhazikitsidwa. Samalani pazenera pansipa. Mukuwona kuti pagulu logwira "laperekedwa pagulu la" Kusungunuka "- ntchito yosasinthika, enp0s3 mawonekedwe ndi ntchito ziwiri zowonjezeredwa.
- Ngati mukufunikira kuphunzira madera onse omwe alipo, alowe m'malo owonera moto.
- Magawo a malo ena omwe amafotokozedwa kudzera pa Firewall-CMD - dzina - Dzinalo, pomwe dzina la Zone.
Mukatha kudziwa magawo ofunikira, mutha kusamukira ndi kuwonjezera kwawo. Tiyeni tisanthule makonzedwe angapo odziwika kwambiri.
Kukhazikitsa malo ophatikizira
Monga mukudziwa kuchokera ku chidziwitso pamwambapa, malo anu okhazikika amafotokozedwa kwa mawonekedwe aliwonse. Zikhala mkati mwake mpaka zikhazikiko zimasintha wogwiritsa ntchito kapena mwanjira zina. Ndikotheka kusamutsa pamanja magawo pa gawo lililonse, ndipo chimachitika poyambitsa firewall-CMD - Lamulo lanyumba - eth0. Zotsatira zake "kupambana" kumatanthauza kuti kusamutsa kunali kopambana. Kumbukirani kuti makonda oterewa amabwezeretsanso mutayambiranso moto.
Ndi kusintha koteroko ku magawo, ziyenera kukumbukiridwa kuti kupatsidwa ntchito kwa ntchitozo zitha kubwezeretsedwanso. Ena a iwo sagwirizana ndi kugwira ntchito m'malo ena, tinene, SHS Ngakhale kuti ikupezeka mu "kunyumba", koma ogwiritsa ntchito kapena apadera azichita. Onetsetsani kuti mawonekedwewo adalumikizidwa bwino kunthambi yatsopanoyi, polowa ziphuphu zamoto.
Ngati mukufuna kukonzanso zoikapo zomwe zidapangidwa kale, ingothanitsenso moto wamoto: SuDo Sysctroct Refert Fratwaldld.Srvice.
Nthawi zina sikuti nthawi zonse zimakhala zofunika kusintha mawonekedwe a gawo limodzi lokha. Pankhaniyi, muyenera kusintha fayilo yosinthira kuti makonda onse amaphatikizidwa mokhazikika. Kuti tichite izi, tikukulangizani kuti mugwiritse ntchito mkonzi wa nano, zomwe zimayikidwa kuchokera ku boma loudo yum kukhazikitsa nano. Kenako mulibe zoterezi:
- Tsegulani fayilo yosintha kudzera mu mkonzi polowera sudo nano / etc / sysconfig / netct-script / Itcfg-eth0, komwe ndi mawonekedwe a mawonekedwe ofunikira.
- Tsimikizani kutsimikizika kwanu kuti muchite zinthu zina.
- Kanda "Zone" ndikusintha mtengo wake kwa omwe akufuna, mwachitsanzo, pagulu kapena kunyumba.
- Gwirani Ctrl + O makiyi kuti musunge zosintha.
- Osasintha dzina la fayilo, koma ingodinani pa Enter.
- Tulukani mkonzi wa Ctrl + X.
Tsopano malo oyambira adzakhala omwe mudawafotokozera, mpaka kusinthira kwa fayilo yosintha. Pazigawo zosinthidwa, kuthamanga sudo syssctl restorct fratch.Sirvice ndi SuDo Dongosolo Loyambilira.Srvice.
Kukhazikitsa malo okhazikika
Pamwambapa, tawonetsa kale gulu lomwe limakupatsani mwayi wophunzira malo osakhazikika. Itha kusinthidwanso pokhazikitsa gawo lomwe mungasankhe. Kuti muchite izi, mu kutonthoza, ndikokwanira kulembetsa Sudo Firewall-CMD - One-Sreet = Dzinalo, pomwe dzina la malo ofunikira.
Kupambana kwa lamuloli kudzaonekera ndi "kupambana" mzere wosiyana. Pambuyo pake, mawonekedwe onse apakapano adzabadwira kumalo odziwika, ngati enawo sakutchulidwa m'mafayilo osinthika.
Kupanga malamulo kwa mapulogalamu ndi zothandiza
Kumayambiriro kwa nkhaniyo, tinakambirana za gawo lililonse. Kutanthauzira ntchito, zothandizira ndi mapulogalamu a nthambi zoterezi zimalola kugwiritsa ntchito magawo amodzi pa aliyense wa ogwiritsa ntchito aliyense wogwiritsa ntchito. Poyamba, tikukulangizani kuti mudziwe nokha mndandanda wathunthu wa mautumiki omwe amapezeka pakadali pano: Officeall-cmd - ntchito.
Zotsatira zake zidzawonetsedwa mwachindunji. Seva iliyonse imagawidwa ndi danga, ndipo mutha kupeza chida chomwe mumakonda. Ngati ntchito yofunikira ikusowa, iyenera kukhazikitsidwa. Pa malamulo akukhazikitsa, werengani m'nkhani ya pulogalamuyi.
Lamulo lomwe lili pamwambapa likuwonetsa mayina okha a ntchitozo. Zambiri zatsatanetsatane za aliyense wa iwo zimapezeka kudzera mu fayilo ya payekha panjira / USR / Lib / Firewalld / Services. Zolemba zoterezi zili ndi mtundu wa XML, njira yake, ku SHS imawoneka ngati iyi: / / shusr/lirewalld/ssviced/ssviced/ssvices/ssents:
Ssh.
Chigoba chotetezeka (SHS) ndi protocol yolowera ndikuwongolera malamulo pamakina akutali. Imapereka kulumikizana kotetezedwa. Ngati mukufuna kupeza makina anu kutali ndi shutenet kudzera pa mawonekedwe owombera moto. Mukufuna phukusi la seva lotseguka kuti likhale lothandiza.
Thandizo la ntchito limayambitsidwa pamalo ena pamanja. Mu ma terminal, muyenera kukhazikitsa firewall-CMD - CMD = Buku Logring-BTTP, pomwe - pagulu ndi gawo = http - dzina la Utumiki. Dziwani kuti kusintha koteroko kudzathandiza pa intaneti imodzi.
Zowonjezera zokhazikika zimachitika kudzera pa SuDo Firewall-CMD - CMOMY - GTTP, ndipo zotsatira zake "zopambana" zikuwonetsa kuti "Kuchita bwino" kumawonetsa bwino opaleshoniyo.
Mutha kuwona mndandanda wathunthu wa malamulo okhazikika a malo ena powonetsa mndandanda mu mzere wapadera wa kutonthoza: SuDo Firewall-CMD - STRARDENS-REPERSTENS-REPER-CRISTERS Services.
Vuto la chisankho posowa mwayi wopita ku ntchito
Malamulo wamba owombera amawonetsedwa ndi ntchito zodziwika bwino komanso zotetezeka kwambiri, koma gawo lina lapakatikati kapena lachitatu lomwe likugwiritsa ntchito. Pankhaniyi, wogwiritsa ntchitoyo amafunikira kusintha makonda kuti athetse vutoli ndi mwayi wopeza. Mutha kuchita izi m'njira ziwiri zosiyanasiyana.
Port
Monga mukudziwa, ntchito zonse za pa intaneti zimagwiritsa ntchito doko lina. Imadziwika mosavuta ndi moto woyaka, ndipo mabatani amatha kuchitidwa. Popewa zoterezi kuchokera kumoto, muyenera kutsegula doko lomwe lasungidwa la sumu Port = 0000 / TCP - nambala ya doko ndi protocol. Njira yoyatsira motolly-cmd - ndi madoko omwe awonetsa mndandanda wa madoko otseguka.
Ngati mukufuna kutsegula madoko osiyanasiyana, gwiritsani ntchito zingwe za SMDAll-CMD - padoko = 0000-99999 / idp - padoko ndi protocol yawo.
Malamulo omwe ali pamwambawa amangokulolani kuyesa kugwiritsa ntchito magawo ofanana. Ngati zatha bwino, muyenera kuwonjezera madoko omwewo mosinthasintha, ndipo izi zimachitika polowa sudo firewall-CMD - Port - Port-Port - CMD Zone = pagulu - doko = 0000-9999 / UDP. Mndandanda wa madoko okhazikika amawonedwa motere: SuDo Firewall-CMD - madokotala a anthu onse -.
Tanthauzo la Ntchito
Monga mukuwonera, kuwonjezera madoko sikuyambitsa zovuta zilizonse, koma njirayi ndiyovuta kugwiritsa ntchito ndalama zambiri. Kutsata madoko onse omwe amagwiritsidwa ntchito kumakhala kovuta, poyang'ana komwe kuthandizira kudzakhala kolondola:
- Koperani fayilo yosintha polemba SuDo CP /LURRE/SURALLD/SRARYICLL/STELLD.xml ndi dzina la fayilo ya ntchito, ndi chitsanzo cha Dzina la makope ake.
- Tsegulani kope kuti musinthe kudzera m'konzi la mutu uliwonse, mwachitsanzo, sudo nano /tc/firewalld/exveple/example.xml.
- Mwachitsanzo, tapanga buku la HTTP. Mu chikalatacho, mwawona metadata yosiyanasiyana, mwachitsanzo, dzina lalifupi ndi malongosoledwe. Zimakhudza seva yogwira ntchito yongosintha nambala ya doko ndi protocol. Pamwamba pa chingwe "" Iyenera kuwonjezeredwa kuti mutsegule doko. TCP - Protocol yogwiritsidwa ntchito, nambala ya $ 100 - pa doko.
- Sungani zosintha zonse (ctrl + o), tsekani fayilo (Ctrl + X), kenako ndikuyambiranso motowo kuti mugwiritse ntchito mafayilo a Sudo - CMD -. Pambuyo pake, ntchito idzawonekera pamndandanda womwe ulipo, womwe umatha kuwonedwa kudzera pa firewall-CMD -.
Muyenera kusankha yankho loyenera kwambiri pa vuto lautumiki ndi mwayi wopita ku ntchitoyo ndikupereka malangizo omwe aperekedwa. Monga mukuwonera, machitidwe onse amachitidwa mosavuta, ndipo sayenera kukhala zovuta.
Kupanga madera oyeserera
Mukudziwa kale kuti poyamba kuchuluka kwa magawo osiyanasiyana okhala ndi malamulo otanthauziridwa apangidwa mu Flawalld. Komabe, mikhalidwe imachitika pomwe woyang'anira makina amafunikira kupanga malo osuta, monga "pagulu" la seva yokhazikitsidwa pa intaneti kapena "masilipe" - kwa seva ya DNS. Pa zitsanzo ziwiri izi, tidzasanthula zowonjezera nthambi:
- Pangani zigawo ziwiri zatsopano za Sudo Firewall-CMD-Code - Coutwib ndi Suron Firewall-CMDETY - MABWINO.
- Adzapezeka kuyambiranso chida cha SuDo Firewall-CMD -. Kuwonetsa magawo okhazikika, lowetsani zinyalala za Smudwire-CMD-Cmuden-Code.
- Apatseni ntchito zofunika, monga "ssh", "http" ndi "https". Izi zimachitidwa ndi zowombera sudo-cmd - galweb - Zowonjezera- Ntchito = https, komwe - komwe - pagulu ndi dzina la malo oti muwonjezere. Mutha kuwona zomwe zikuchitika podikirira Firewall-CMD - LEMBAB - ENABLE - nonse.
Kuchokera munkhaniyi, mwaphunzira momwe mungapangire malembedwe opanga ndikuwonjezera ntchito kwa iwo. Tawauza kale kuti ndi osinthika ndikugawa masinthidwe pamwambapa, mutha kungotchula mayina olondola. Musaiwale kuyambiranso motopo pambuyo posintha.
Monga mukuwonera, Firewalld Firewall ndi chida chofunikira kwambiri chomwe chimakupatsani mwayi wopanga zosintha moto. Imangowonetsetsa kuti zofunikira zothandizira ndi dongosololi ndi malamulo omwe afotokozedwawo nthawi yomweyo amayamba ntchito yawo. Pangani ndi sysction sysctionl imathandizira lamulo la Firewald.