Wadooyinka firewall-ka proxy ee OpenWrt: INPUT, OUTPUT iyo FORWARD
Kala sooc gelitaanka macaamiisha ee dhageystaha proxy ee router-ka iyo bixitaanka proxy-ga laftiisa iyo gudbinta tooska ah ee macaamiisha.
Marka router-ku uu isagu socodsiiyo web proxy, codsiga proxy-ga mara wuxuu isticmaalaa laba xiriir TCP. Ma aha oo kaliya in xiriirka macmiilka si aan isbeddel lahayn loo maro router-ka.
| Socodka | Wadada firewall-ka ee router-ka |
|---|---|
| Macmiilka ilaa dhageystaha proxy ee router-ka | INPUT |
| Habka proxy ilaa websaydhka | OUTPUT |
| Macmiilka si toos ah ilaa meel internet | FORWARD |
Si loo dalbado wadada proxy cad, u oggolow macaamiisha loogu talagalay inay gaaraan dhageystaha oo u oggolow xiriirada bixitaanka ee proxy-ga u baahan. Si gooni ah u xaddid gudbinta tooska ah ee aan la rabin ee LAN ilaa WAN.
Beddelka siyaasadda INPUT ee router-ka oo kaliya ma sharraxayso wadada gudbinta tooska ah. Taa beddelkeeda, oggolaanshaha dekedda dhageystaha ee FORWARD ma aha inuu daruuri oggolaado gelitaanka adeeg ku dhammaanaya router-ka.
Ilaali adeegyada maxalliga ah ee shabakadda weli u baahan, sida DNS-keeda iyo habaynta cinwaannada la doortay. Ku dabaq siyaasadda qoysaska cinwaannada ee dhab ahaan la isticmaalayo. HTTP proxy wuxuu bixiyaa hawlgallada web ama tunnel ee uu taageero; firewall-ku ma beddelo UDP ama ICMP aan loo baahnayn oo u rogo borotokoolkaas.