Ntọhapụ nke ngwa nkesa maka ịmepụta firewalls OPNsense 21.7 mere, nke bụ alaka nke ọrụ pfSense, nke e kere na ebumnuche nke ịmepụta ngwa nkesa mepere emepe nke nwere ike ịrụ ọrụ na ọkwa nke ngwọta azụmahịa maka ibuga firewalls na ọnụ ụzọ netwọk. . N'adịghị ka pfSense, a na-edobe ọrụ ahụ dị ka otu ụlọ ọrụ anaghị achịkwa ya, mepụtara site na ntinye aka nke obodo ma nwee usoro mmepe zuru oke, yana inye ohere iji ihe ọ bụla n'ime mmepe ya na ngwaahịa ndị ọzọ, gụnyere azụmahịa. ndị. A na-ekesa koodu isi mmalite nke ihe nkesa, yana ngwaọrụ eji eme mgbakọ, n'okpuru ikikere BSD. A na-akwado ọgbakọ ndị a n'ụdị LiveCD na onyonyo sistemụ maka ịdekọ na draịva Flash (422 MB).
Ọdịnaya bụ isi nke nkesa dabere na koodu HardenedBSD, nke na-akwado ndụdụ nke FreeBSD mekọrịtara ọnụ, nke na-ejikọta usoro nchebe na usoro iji gbochie nrigbu nke adịghị ike. Otu n'ime njirimara nke OPNsense bụ ngwa ihe nrụpụta mepere emepe emepe emepe, ikike ịwụnye n'ụdị ngwugwu n'elu FreeBSD oge niile, akụrụngwa na-edozi ibu, ihe ntanetị weebụ maka ịhazi njikọ ndị ọrụ na netwọkụ (Portal Captive), ọnụnọ nke usoro. maka nsochi njikọ steeti (ọkụ ọkụ steeti dabere na pf), ịtọba oke bandwidth, nzacha okporo ụzọ, imepụta VPN dabere na IPsec, OpenVPN na PPTP, njikọta na LDAP na RADIUS, nkwado maka DDNS (Dynamic DNS), sistemụ akụkọ na-ahụ anya na eserese.
Nkesa nkesa na-enye ngwaọrụ maka ịmepụta nhazi ndị na-adịghị mma na-adabere n'iji usoro CARP mee ihe ma na-enye gị ohere ịmalite, na mgbakwunye na firewall bụ isi, oghere ndabere nke ga-ejikọta ya na-akpaghị aka na nhazi ọkwa ma ga-eweghara ibu ahụ n'ime. ihe omume nke ọdịda nke isi ọnụ. A na-enye onye nchịkwa ihe ọhụụ na nke dị mfe maka ịhazi firewall, nke e wuru site na iji usoro weebụ Bootstrap.
N'ime mgbanwe ndị a:
- Nkesa a dabere na mmepe nke HardenedBSD 12.1. Mwepụta na-esote, 22.1, na-ezube ịkwaga na FreeBSD 13.
- Atụpụtala onye nrụnye ọhụrụ nke na-enye nkwado arụnyere maka nrụnye na nkebi nwere sistemụ faịlụ ZFS ma dabara adaba maka ịrụ ọrụ na igwe mebere na-eji UEFI.
- Emezigharịrị interface maka imelite ngwa ngwa.
- N'ime ndekọ na-egosipụta ọrụ nzacha okporo ụzọ, a na-ahụta na egosipụtara ihe nchọpụta iwu ugbu a iji zere nkọwa na-ezighi ezi mgbe agbanwechara usoro iwu.
- N'ime ndebiri na-enye gị ohere ijikọ otu netwọkụ, ndị ọbịa na ọdụ ụgbọ mmiri nwere aha ihe atụ akọwapụtara na iwu firewall (aliases), agbakwunyela ikike ịkọwapụta ihe mkpuchi bit (ihe mkpuchi anụ ọhịa) na ihe mkpuchi netwọkụ.
isi: opennet.ru