E wepụtala nkesa OPNsense 26.7 firewall ka ewepụrụ ya site na ọrụ pfSense na 2015 na ebumnuche nke ịmepụta nkesa isi mmalite mepere emepe nke nwere ike ịrụ ọrụ nke firewall azụmahịa na ngwọta ọnụ ụzọ. N'adịghị ka pfSense, a na-edobe ọrụ ahụ dịka ọ bụghị otu ụlọ ọrụ na-achịkwa, nke e mepụtara site na ntinye aka nke obodo na inwe usoro mmepe doro anya zuru oke, yana inye ohere iji ihe ọ bụla n'ime mmepe ya na ngwaahịa ndị ọzọ, gụnyere. ndị ahịa. A na-ekesa koodu isi mmalite nke ihe nkesa, yana ngwaọrụ eji eme mgbakọ, n'okpuru ikikere BSD. A na-akwado ọgbakọ ndị a n'ụdị LiveCD na onyonyo sistemụ maka ịdekọ na draịva Flash (490 MB).
Isi nkesa ahụ dabere na koodu FreeBSD. Atụmatụ OPNsense gụnyere: ngwaọrụ nrụpụta isi mmalite zuru oke, nkwado maka ntinye dị ka ngwugwu n'elu FreeBSD nkịtị, ngwaọrụ nhazi ibu, interface weebụ maka ịhazi njikọ ndị ọrụ na netwọk (Captive Portal), usoro nlekota ọnọdụ njikọ (firewall steeti dabere na pf), sistemụ mmachi bandwidth, nzacha okporo ụzọ, na imepụta VPN dabere na IPsec. OpenVPN na PPTP, njikọta na LDAP na RADIUS, nkwado DDNS (DNS Dynamic), usoro nke akụkọ na eserese anya.
Na ndabere nke nkesa, ọ ga-ekwe omume ịmepụta nhazi ndị na-adịghị mma na-adabere n'iji usoro CARP mee ihe na ikwe ka ịmalite, na mgbakwunye na firewall isi, oghere ndabere, nke a ga-emekọrịta na-akpaghị aka na nhazi nhazi na nhazi. ga-eweghara ibu ahụ ma ọ bụrụ na ọdịda nke oghere nke mbụ dara. A na-enye onye nchịkwa ihe ntanetị weebụ maka ịhazi firewall, wuru site na iji Bootstrap web framework na Phalcon MVC.
N'ime mgbanwe ndị a:
- Mgbanwe gaa na ntọala koodu FreeBSD 15.1 emechaala (a na-ejibu FreeBSD 14.3).
- Ebugharịla njikọ maka ịhazi iwu firewall, ikenye njikọ netwọk (nkewa n'etiti LAN na WAN), na ijikwa otu ọnụ ụzọ ámá iji jiri usoro MVC ma ugbu a enwere ike ịnweta ya site na Web API maka ijikwa nhazi netwọk akpaaka.
- E tinyekwara ọkachamara maka ịkwaga iwu ntụgharị adreesị site na usoro nhazi NAT ochie nke Outbound gaa na usoro ọhụrụ site na iji usoro nhazi Source NAT (SNAT).
- E tinyela nkwado maka DDNS (Dynamic) na nkesa akpaka nke prefixes IPv6 (blọk adreesị) na nhazi KEA DHCP.
- E tinyela nkwado IPv6 na ọnụ ụzọ Captive.
- Ụdị emelitere OpenVPN 2.7, PHP 8.5, Python 3.13.
- Edozila adịghị ike dị oke njọ (CVE-2026-57155, ọkwa siri ike 9.9 n'ime 10). Enweghị ike a nyere onye ọrụ na-enweghị ihe ùgwù na-enweghị ohere shei na ohere zuru oke iji nweta aha otutu (ndepụta nke aha netwọk na ndị ọbịa) iji mezuo koodu nwere ikike mgbọrọgwụ. Enweghị ike a na-akpata adịghị ike ahụ site na enweghị nyocha kwesịrị ekwesị mgbe a na-ahazi data sitere na nchekwa data GeoIP nke na-ejikọta mba ndị nwere adreesị IP.
E tinyere koodu obodo sitere na nchekwa data GeoIP n'enweghị nkwenye mgbe e dere aha faịlụ ahụ, nke na-ekwe ka e degharịa faịlụ ọ bụla dị na sistemụ ahụ, ebe onye njikwa na-agba ọsọ na ikike mgbọrọgwụ. Onye ọrụ na-enweghị ikike nwere ike iji Web API kọwaa URL iji budata nchekwa data GeoIP agbanwere maka aha otutu. Iji nweta ikike mgbọrọgwụ, mmadụ nwere ike ịkọwapụta "../../../../../../../../../../../etc/newsyslog.conf.d/zzz_pwn" kama koodu obodo na otu n'ime ntinye nchekwa data. Nke a ga-emepụta faịlụ nhazi maka sistemụ ntụgharị ndekọ, nke nwere ike ịkọwa iwu ndị na-agba ọsọ na ikike mgbọrọgwụ.
isi: opennet.ru
