Izindlela ze-firewall ye-proxy ku-OpenWrt: INPUT, OUTPUT ne-FORWARD
Hlukanisa ukufinyelela kwamaklayenti kusilaleli se-proxy serawuta ekukhishweni kwe-proxy ngokwayo nasekudlulisweni okuqondile kwamaklayenti.
Lapho i-rawuta ngokwayo isebenzisa i-proxy yewebhu, isicelo esidluliswe nge-proxy sisebenzisa izixhumanisi ezimbili ze-TCP. Akukhona nje ukuthi isixhumanisi sekhayenti sidluliswa singashintshiwe nge-rawuta.
| Ithrafikhi | Indlela ye-firewall ku-rawuta |
|---|---|
| Ikhayenti iya kusilaleli se-proxy serawuta | INPUT |
| Inqubo ye-proxy iya kuwebhusayithi | OUTPUT |
| Ikhayenti ngqo endaweni ye-inthanethi | FORWARD |
Ukuze ufune indlela ecacile ye-proxy, vumela amakhayenti ahlosiwe ukuthi afinyelele isilaleli futhi uvumele izixhumanisi zangaphandle ezidingekayo ze-proxy. Khawulela ngokwehlukana ukudluliswa okuqondile okungafuneki kusuka ku-LAN kuya ku-WAN.
Ukushintsha inqubomgomo ye-INPUT yerawuta kuphela akuchazi indlela yokudluliswa okuqondile. Ngokuphambene, ukuvumela imbobo yesilaleli ku-FORWARD akusho ukuthi kuvunyelwa ukufinyelela kusevisi ephela ku-rawuta.
Gcina izinsizakalo zasendaweni ezisadingeka kunethiwekhi, njenge-DNS nekumiswa kwamakheli akhethiwe. Sebenzisa inqubomgomo emindenini yamakheli esetshenziswa ngempela. I-HTTP proxy inikeza imisebenzi yewebhu noma yomhubhe esiyisekelayo; i-firewall ayiguquli i-UDP noma i-ICMP ethile ibe yilowo protocol.