Xeerarka magaca martigeliyaha ee iptables waa sawirro DNS
Fahan sababta ka-bax magaca martigeliyaha ee iptables uu u joojin karo la mid noqoshada site ka dib isbeddelada DNS, iyo halka siyaasadda domain-ka proxy horudhaca ah ay ku duwan tahay.
Magaca martigeliyaha ee amarka iptables waxaa la xalliyaa ka hor inta aan xeerka la gudbin. Xeerka kernel-ka wuxuu la mid yahay cinwaannada ka soo baxa; ma celceliyo DNS paket kasta mana baarto magacyada martigeliyaha HTTP.
Marka ka-baxku joojiyo shaqeynta, isbarbardhig xeerka tirooyinka iyo tiriyayaasha cinwaanka macmiilku dhab ahaan isticmaalay. Isbeddelada DNS, jawaabaha kala duwan ee xalliyaha iyo martigeliyayaasha kheyraadka dheeraadka ah waxay cinwaankaas ka bixin karaan xeerka hore. Khatarta lidka ah waa cinwaan lala wadaago adeegyo aan xiriir la lahayn: ka-bax IP ah ayaa sidoo kale ku dari kara iyaga.
Si gaar ah u hubi nidaamka. Ka-bax ka dib ficil dhexgal hore u dhigma ayaa laga yaabaa inuu aad u daahay, laakiin horaantiisa ma ilaaliso kooxdiisa cinwaanno.
| Ka-bax loo baahan yahay | Siyaasad loo baahan yahay |
|---|---|
| Ha dhexgelin xiriirka ku socda yoolalkan shabakada | Xeerarka marin-hagaajinta paketka oo leh istaraatijiyad ku habboon ilaalinta cinwaannada |
| U oggolow macmiilkan inuu magacyadan ku codsado Squid | ACL-yada domain-ka yoolka heer codsi ah iyo xaddidaadda macmiilka iyo dekedda |
Oggolaanshaha Squid wuxuu codsiga ku hayaa gudaha proxy-ga. Ka-baxa firewall-ku wuxuu ka saaraa wadada oggolaanshaha Squid. Si miyir leh u dhex dooro labada. CONNECT caadi ah, xitaa go'aanka proxy-ga ee garanaya magaca martigeliyaha ma muujiyo wadada site-ka ee sirta ah, sidaas darteed keligiis ma noqon karo ka-bax wadada bogga.