Lungiselela i-firewall ku-mikrotik router

Ama-routers eMikrotik athandwa futhi afakwe emakhaya noma emahhovisi avela kubasebenzisi abaningi. Ukuphepha okusemqoka kokusebenza okunemishini enjalo yilungelo le-firewall elilungiselelwe. Kubandakanya iqoqo lamapharamitha kanye nemithetho ukuvikela inethiwekhi kubantu ongabazi nokugenca.

Lungiselela i-firewall router mikrotik

Ukusetha kwe-router kwenziwa kusetshenziswa uhlelo olukhethekile lokusebenza olukuvumela ukuthi usebenzise isikhombimsebenzisi sewebhu noma uhlelo olukhethekile. Kwezimbili lezi zinguqulo kukhona konke okudingekayo ekuhleleni i-firewall, ngakho-ke akunandaba ukuthi ukhetha ini. Sizogxila kunguqulo yesiphequluli. Ngaphambi kokuthi uqale, udinga ukungena ngemvume:

1. Nganoma yisiphi isiphequluli esikahle, iya ku-192.168.88.1.



2. Esibonelweni sokuqala kwewebhu ye-router, khetha u- "Webfig".



3. Uzobonisa ifomu lokungena ngemvume. Faka ukungena ngemvume nephasiwedi ezintanjeni, okungamanani azenzakalelayo omphathi.

Ungathola okuningi mayelana nokuhlelwa okuphelele kwama-routers ale nkampani kwenye i-athikili kusixhumanisi esingezansi, futhi sizophendukela ngqo ekucushweni kwamapharamitha avikelayo.

Funda kabanzi: Ungayisetha kanjani uMikrotik Router

Ukuhlanza imithetho yeshidi nokudala okusha

Ngemuva kokungena, uzokhombisa imenyu enkulu, lapho iphaneli nazo zonke izigaba zikhona ngakwesobunxele. Ngaphambi kokungeza ukucushwa kwakho, kuzodingeka wenze okulandelayo:

1. Nweba isigaba se- "IP" bese uya engxenyeni ethi "Firewall".



2. Hlanza yonke imithetho ekhona ngokucindezela inkinobho efanele. Kuyadingeka ukukhiqiza lokhu ukuze uqhubeke nokushayisana esikhathini esizayo lapho udala ukucushwa kwakho.



3. Uma ufake imenyu ngesiphequluli, ukuguqulwa kwewindows yokusetha kwenziwa nge-inkinobho ethi "Faka", kufanele uchofoze kuhlelo ohlelweni.

Manje, ngemuva kokungeza umthetho ngamunye, kuzodingeka uchofoze izinkinobho ezifanayo zendalo ukuze uphinde uphinde uphinde usebenzise iwindi lokuhlela. Ake sihlale imininingwane eminingi kuzo zonke izilungiselelo zokuphepha eziyisisekelo.

Bheka Idivaysi Yokuxhumana

I-router exhunywe kwikhompyutha kwesinye isikhathi ihlolwe uhlelo lokusebenza lweWindows ngokuxhumana okusebenzayo. Ungaqhuba inqubo enjalo ngesandla, kepha lesi sikhalazo sitholakala kuphela uma i-firewall ikhona ivumela ukuxhumana ne-OS. Kulungiselelwe kanjena:

1. Chofoza ku- "Faka" noma Red Plus ukukhombisa iwindi elisha. Lapha kulayini we- "Chain", ohunyushwe ngokuthi "Network" Cacisa "Okokufaka" - Ayingenayo. Ngakho-ke kuzosiza ekuboneni ukuthi uhlelo lubhekisela ku-router.



2. Entweni ethi "Protocol", setha inani le- "ICMP". Lolu hlobo lukhonza ukudlulisa imiyalezo ehlotshaniswa namaphutha nezinye izimo ezingejwayelekile.



3. Hambisa esigabeni noma ithebhu yesenzo, lapho ukufaka khona "Yamukela", okungukuthi, lokhu kuhlela kukuvumela ukuthi uqhube idivaysi yedivayisi.
4. Khuphuka uyosebenzisa izinguquko bese uqedela ukuhlela komthetho.

Kodwa-ke, kulokhu, yonke inqubo yokuthumela imiyalezo nokuhlola imishini ngeWindows ayipheli. Into yesibili ukudluliswa kwedatha. Ngakho-ke, dala ipharamitha entsha lapho ucacisa khona "i-chain" - "Phambili", kanye ne-protocol, chaza ukuthi kwenziwa kanjani esigabeni esedlule.

Ungakhohlwa ukubheka "isenzo" ukuze "kwamukele" kuhanjiswa lapho.

Imvume yokuxhumeka okufakiwe

Amanye amadivaysi axhunyiwe kwi-router nge-Wi-Fi noma izintambo. Ngaphezu kwalokho, iqembu lasekhaya noma lebhizinisi lingasetshenziswa. Kulokhu, uzodinga ukuxazulula ukuxhumana okufakiwe ukuze kungabikho zinkinga ngokufinyelela kwi-Intanethi.

1. Chofoza u- "Faka". Cacisa uhlobo lohlobo lwenethiwekhi olungenayo. Yehla phansi phansi bese uhlola "okusunguliwe" okuphambene "nombuso wokuxhuma" ukucacisa isethi yokuxhuma.



2. Ungakhohlwa ukubheka "isenzo" ukuze kukhethwe into oyifunayo, njengasemithethweni yemithetho edlule. Ngemuva kwalokho, ungagcina izinguquko bese uqhubeka.

Komunye umthetho, faka "phambili" eduze "kwe-chain" bese ubeka uphawu khona iphuzu elifanayo. Isenzo kufanele futhi siqinisekiswe ngokukhetha ukuthi "Yamukela", kuphela ngemuva kwalokho.

Ukuxhuma okuhlobene nokuxazulula

Cishe imithetho efanayo idinga ukuyenzelwe ukuxhumeka okuhlobene, ukuze kungabingelwa lapho kuzanywa khona ubuqiniso. Inqubo yonke yenziwa ngokoqobo ngezenzo eziningana:

1. Nquma ukuthi umthetho wenani elithi "chain" - "okufakwayo", yehla ubeke uphawu lokuhlola "okuhlobene" nokuhlola "isimo sokuxhumeka". Ungakhohlwa ngesigaba esithi "Action", lapho kusebenze khona ipharamitha efanayo.



2. Ekucushweni okusha kwesibili, shiya uhlobo lokuxhumeka njenge-efanayo, kepha inethiwekhi isethwe "phambili", futhi esigabeni sezenzo udinga into ethi "Yamukela".

Qiniseka ukuthi ugcina izinguquko ukuze kufakwe imithetho ohlwini.

Isinqumo sokuxhuma kusuka ku-LAN

Abasebenzisi benethiwekhi yendawo bazokwazi ukuxhuma kuphela uma ifakwe emithethweni ye-firewall. Ukuhlela, kuzodingeka ukuthi kudingeke ukuthi uthole ukuthi ikhebula lixhumeke kuphi (ezimweni eziningi liyikheli le-ether1), kanye nekheli le-IP lenethiwekhi yakho. Funda kabanzi ngalokhu kwenye impahla kusixhumanisi esingezansi.

Funda kabanzi: Ungalithola kanjani ikheli le-IP lekhompyutha yakho

Okulandelayo, udinga ukumisa ipharamitha eyodwa kuphela. Lokhu kwenziwa ngale ndlela elandelayo:

1. Emgqeni wokuqala, faka "okokufaka", bese wehla ku- "SRC elandelayo. Ikheli »bese uthayipha ikheli le-IP lapho. "Ku. I-interface »Cacisa i-" Ether1 "Uma ikhebula lokufaka kumhlinzeki lixhumeke kulo.



2. Hambisa kuthebhu ethi "Action" ukubeka inani elithi "ukwamukela" lapho.

Ukuvinjwa kokuxhumeka okuyiphutha

Ukudala lo mthetho kuzokusiza ukuvikela amakhompiyutha anephutha. Kunqunywa ngokuzenzakalela ukuxhumana okungathembeki ngezinto ezithile, ngemuva kwalokho ahlele kabusha futhi ukufinyelela ngeke kunikezwe. Udinga ukudala amapharamitha amabili. Lokhu kwenziwa ngale ndlela elandelayo:

1. Njengakweminye imithetho edlule, okokuqala ucacisa "okokufaka", bese wehlisa phansi bese uhlola ibhokisi elithi "elingavumelekile" eduze "nombuso wokuxhuma".



2. Iya kuthebhu noma isigaba "isenzo" bese usetha inani elithi "Drop", okusho ukukhipha amakhompiyutha alolu hlobo.
3. Ewindini elisha, shintsha kuphela "iketane" ku- "Phambili", okusele, njengakwedlule, kufaka phakathi isenzo "Drop".

Ungavimba neminye imizamo yokuxhuma emithonjeni yangaphandle. Lokhu kwenziwa ngokubeka umthetho owodwa nje. Ngemuva kokuthi "Chain" - "Okokufaka" Slip "in. I-Interface "-" Ether1 "ne-" Action "-" Drop ".

Imvume yethrafikhi evela kunethiwekhi yendawo kwi-Intanethi

Sebenza ohlelweni lokusebenza lweRouteros likuvumela ukuthi uthuthukise ukucushwa kwamathrafikhi amaningi. Ngeke sihlale kulokhu, ngoba ulwazi olunjalo ngeke lube lusizo kubasebenzisi abajwayelekile. Cabanga ngomthetho owodwa we-firewall okuvumela ukuthi udlule traffic kusuka kwi-Intanethi yendawo:

1. Khetha u- "Chain" - "Phambili". Setha "ku. Isikhombimsebenzisi "kanye" ngaphandle. Isikhombimsebenzisi esithi "amanani" ether1 ", ngemuva kwalokho okumaka uphawu lokubizelwa" ku. Isikhombimsebenzisi.



2. Esigabeni se- "Action", khetha isenzo esithi "Yamukela".

Ukwenqabela ukuxhumeka okusele, ungavele nje ngomthetho owodwa:

1. Khetha inethiwekhi "phambili", ungadaluli enye into.



2. Esebenzayo, qiniseka ukuthi "ukwehla" kufanelekile.

Ngokuya ngokucushwa kokugcina, kufanele ube nohlelo lwe-firewall, njengasesikrinini esingezansi.

Kulokhu, i-athikili yethu iza esiphethweni esinengqondo. Ngingathanda ukuqaphela ukuthi akudingeki ukuthi usebenzise yonke imithetho, ngoba kungenzeka kungadingeki ngaso sonke isikhathi, noma kunjalo, sikhombise ukulungiswa okuyisisekelo okulungele abasebenzisi abajwayelekile kakhulu. Siyethemba ukuthi imininingwane enikeziwe ibilusizo. Uma unemibuzo ngalesi sihloko, babuze kumazwana.