Imithetho yegama lomsingathi ku-iptables yizithombe ze-DNS
Qonda ukuthi kungani ukukhishwa kwegama lomsingathi ku-iptables kungayeka ukuvumelana nesayithi ngemva kwezinguquko ze-DNS, nokuthi umgomo wesizinda we-proxy ehamba phambili uhluke kuphi.
Ku-iptables umyalo, igama lomsingathi lixazululwa ngaphambi kokuba umthetho uthunyelwe. Umthetho we-kernel uvumelana namakheli avelayo; awuphindi i-DNS iphakethe ngalinye futhi awuhloli amagama e-HTTP.
Lapho ukukhishwa kuyeka ukusebenza, qhathanisa umthetho wezinombolo nezibalayo nekheli elasetshenziswa ngumsebenzisi. Izinguquko ze-DNS, izimpendulo ezihlukile zomxazululi kanye namahosthi emithombo engeziwe kungashiya lelo kheli ngaphandle komthetho wakudala. Ingozi ephambene ikheli elabiwe namasevisi angahlobene: ukukhishwa kwe-IP kungawafaka nawo.
Hlola ukulandelana ngokwehlukile. Ukweqa ngemva kwesenzo sokuvimbela esivele sivumelana kungase kube sekwephuzile, kodwa ukusihambisa phambili akugcini isethi yalo yamakheli.
| Ukukhishwa okudingekayo | Umgomo odingekayo |
|---|---|
| Ungavimbeli ukuxhumana okuya kulezi zindawo zenethiwekhi | Imithetho yokuhambisa amaphakethe enesu elifanele lokunakekela amakheli |
| Vumela leli klayenti ukuthi licele la magama nge-Squid | Ama-ACL esizinda esiya kulo ezingeni lesicelo kanye nemikhawulo yeklayenti neyembobo |
Imvume ku-Squid igcina isicelo ngaphakathi kwe-proxy. Ukweqa kwe-firewall kusikhipha endleleni yokugunyaza ye-Squid. Khetha ngamabomu phakathi kwakho kokubili. Nge-CONNECT evamile, ngisho nesinqumo se-proxy esazi igama lomsingathi asivezi indlela yesayithi ebethelwe, ngakho asikwazi ukuba ukukhishwa kwendlela yekhasi ngokwaso.