Sakin kayan aikin rarraba don ƙirƙirar firewalls pfSense 2.4.5

ya faru sakin ƙaramin rarraba don ƙirƙirar bangon wuta da ƙofofin cibiyar sadarwa pfSense 2.4.5. Rarraba ya dogara ne akan tushen lambar FreeBSD ta amfani da ci gaban aikin m0n0wall da kuma amfani da PF da ALTQ mai aiki. Don lodawa akwai hotuna da yawa don gine-ginen amd64, masu girma daga 300 zuwa 360 MB, gami da LiveCD da hoto don shigarwa akan Flash USB.

Ana sarrafa kayan rarrabawa ta hanyar haɗin yanar gizo. Ana iya amfani da Portal Captive, NAT, VPN (IPsec, OpenVPN) da PPPoE don tsara ficewar masu amfani a cikin hanyar sadarwa mai waya da mara waya. Yana goyan bayan zaɓuɓɓuka masu yawa don iyakance bandwidth, iyakance adadin haɗin kai lokaci guda, tace zirga-zirga da ƙirƙirar jeri-haƙuri na kuskure dangane da CARP. Ana nuna kididdigar aiki a cikin nau'i na jadawali ko a cikin tsari na tebur. Ana samun goyan bayan izini daga bayanan mai amfani na gida, haka kuma ta RADIUS da LDAP.

Maɓalli canji:

  • An sabunta abubuwan tsarin tushe zuwa FreeBSD 11-STABLE;
  • Wasu shafukan yanar gizo, ciki har da manajan takardar shaida, jerin abubuwan haɗin DHCP da tebur na ARP/NDP, yanzu suna goyan bayan rarrabawa da bincike;
  • An ƙara mai warwarewar DNS dangane da Unbound zuwa kayan aikin haɗin rubutun Python;
  • Don IPsec DH (Diffie-Hellman) da PFS (Cikakken Sirri na Gaba) an ƙara. Kungiyoyin Diffie-Hellman 25, 26, 27 da 31;
  • A cikin saitunan tsarin fayil na UFS don sababbin tsarin, yanayin noatime yana kunna ta tsohuwa don rage ayyukan rubuta da ba dole ba;
  • An ƙara sifa ta “autocomplete=new-password” zuwa sifofin tantancewa don musaki cika filaye da bayanai masu mahimmanci;
  • An ƙara sabbin masu samar da rikodin DNS masu ƙarfi - Linode da Gandi;
  • An gyara lahani da yawa, gami da wani batu a cikin mu'amalar gidan yanar gizo wanda ke ba wa ingantacciyar mai amfani damar samun damar yin amfani da widget din hoton don aiwatar da kowace lambar PHP da samun damar shiga shafukan masu gata na mu'amalar mai gudanarwa.
    Bugu da ƙari, an kawar da yiwuwar rubutun giciye (XSS) a cikin haɗin yanar gizon.

source: budenet.ru

Add a comment