Ukunqamula i-proxy nge-iptables: izimbobo 80 no-443 njengeqoqo elilodwa
Fanisa izimbobo 80 no-443 njengeqoqo elilodwa, kodwa gcina ukukhethwa kwekheli lomsebenzisi kuhlukile endaweni ye-proxy ebhalwe kabusha.
Ukuze ukhethe i-TCP ehamba ngembobo 80 noma 443, sebenzisa iqoqo elilodwa:
-p tcp -m multiport --dports 80,443Ngokuphambene, --dport 80:443 ikhetha lonke ibanga kusukela ku-80 kuya ku-443 kufakwe nezinhlangothi zombili. Lokho kubamba izimbobo eziningi ezengeziwe. Ukhefana kanye namaphuzu amabili ziveza izinqubomgomo ezihlukene.
Lezi izingcezu zokufanisa, akuzona iziyalo eziphelele ze-firewall. Zengeza emucu nasenyathelweni okudingwa ukwakheka kokunqamula.
| Isikhethi | Yini esikubonayo ngaphambi kokubhalwa kabusha |
|---|---|
-s 192.0.2.20 | Ikheli lomthombo wekheli lomsebenzisi |
-d 198.51.100.30 | Ikheli leseva okudingwa kuyo |
--dports 80,443 | Izimbobo zensizakalo yendawo okudingwa kuyo |
Ikheli elinikezwa --to-destination ye-DNAT iyindawo entsha okudingwa kuyo, isibonelo isilaleli se-proxy. Alithathi indawo yencazelo yokufaniswa komthombo nendawo okudingwa kuyo kwangaphambili.
Gcina isikhethi sincane ngokwanele ukuchaza abasebenzisi nokuhamba okuhlosiwe. Ikakhulukazi cabangela ukuxhumana okwenziwa i-proxy ngokwayo ukuze izicelo zayo ezilandelayo zingaphindi zingene endleleni efanayo yokunqamula. Ukukhetha imbobo 443 nakho akushintshi amabhayithi kulokho kuxhumana kube isicelo esicacile se-HTTP proxy; uhlelo olwamukelayo lusadinga indlela efanele yokunqamula. Ukuze i-TCP idluliselwe ku-proxy ngokucaca, umhumushi kufanele abuyise indawo yokuqala okudingwa kuyo futhi axoxisane ngeprotokholi ye-proxy.