Gcina ukuhamba kokubuya okusungulwe kokuxhumana kwe-SOCKS okuphumayo kwe-SSH
Ukungena nge-SSH kungasinda ngesikhathi i-firewall yeseva ilahla izimpendulo zewebhusayithi ezifika kumaphothi endawo esikhashana.
Uma ukubhrawuza nge-SOCKS kuphuka ngemuva kwezinguquko ze-firewall yeseva ye-SSH, ungahluleli indlela yonke nge-SSH shell esekhona. Iseva ivula ukuxhumana kwe-TCP okuhlukile okuya endaweni eya kuyo kwe-ukudlulisela okuguquguqukayo.
Izimpendulo zazo zifika kumaphothi esikhashana akhethwa yiseva. Inqubomgomo evumela ukuhamba okusha okungena kuphela enkonzweni ye-SSH ingalahla lawo maphakethe ngaphandle uma ukuhamba okusungulwe kwamukelwa.
Kusethi ekhona yemithetho ye-IPv4 iptables, ingxenye yesimo sokuxhumana ithi:
-A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPTYibeke ngaphambi kwe-drop/reject yokugcina ehambisanayo. Ivumela ukuhamba kokubuya okulandelelwe, hhayi konke ukuxhumana okusha okuya ephothini eliphezulu.
Sebenzisa i-tuple elahliwe kanye nesimo ukuqinisekisa le nto. I-OUTPUT kumele ivume ukuxhumana okuqhubekayo, futhi izindlela ze-IPv6 zidinga imithetho yazo esebenzayo. Ukuxoxisana kwe-SOCKS, ukuthuthwa kwe-SSH nokuhamba okuya endaweni kuyizigaba ezihlukene okufanele zihlolwe.