Kutulutsidwa kwa zida zogawa popanga ma firewall pfSense 2.4.5

chinachitika kutulutsidwa kwa kugawa kophatikizika popanga ma firewall ndi zipata zama network mfSense 2.4.5. Kugawa kumachokera ku code code ya FreeBSD pogwiritsa ntchito chitukuko cha polojekiti ya m0n0wall komanso kugwiritsa ntchito pf ndi ALTQ. Za kutsitsa kupezeka zithunzi zingapo zamamangidwe a amd64, kuyambira kukula kwa 300 mpaka 360 MB, kuphatikiza LiveCD ndi chithunzi choyika pa USB Flash.

Chigawo chogawa chimayendetsedwa kudzera pa intaneti. Captive Portal, NAT, VPN (IPsec, OpenVPN) ndi PPPoE zitha kugwiritsidwa ntchito kukonza kutuluka kwa ogwiritsa ntchito pamaneti opanda zingwe komanso opanda zingwe. Imathandizira njira zingapo zochepetsera bandwidth, kuchepetsa kuchuluka kwa kulumikizana nthawi imodzi, kusefa magalimoto ndikupanga masinthidwe olekerera zolakwika motengera CARP. Ziwerengero zantchito zimawonetsedwa mu mawonekedwe a ma graph kapena mawonekedwe a tabular. Chilolezo chimathandizidwa ndi nkhokwe ya ogwiritsa ntchito kwanuko, komanso kudzera pa RADIUS ndi LDAP.

Chinsinsi kusintha:

• Zida zoyambira zoyambira zasinthidwa kukhala FreeBSD 11-STABLE;
• Masamba ena a intaneti, kuphatikiza woyang'anira satifiketi, mndandanda wa zomangira za DHCP ndi matebulo a ARP/NDP, tsopano amathandizira kusanja ndi kusaka;
• DNS solver yochokera ku Unbound yawonjezedwa ku zida zophatikizira za Python script;
• Kwa IPsec DH (Diffie-Hellman) ndi PFS (Perfect Forward Secrecy) anawonjezera Magulu a Diffie-Hellman 25, 26, 27 ndi 31;
• M'makonzedwe a fayilo ya UFS pamakina atsopano, mawonekedwe a noatime amayatsidwa mwachisawawa kuti achepetse zolemba zosafunikira;
• Mawonekedwe a "autocomplete=new-password" awonjezedwa ku mafomu otsimikizira kuti mulepheretse kudzaza minda yokhala ndi deta yovuta;
• Onjezani opereka ma rekodi atsopano a DNS - Linode ndi Gandi;
• Ziwopsezo zingapo zakhazikitsidwa, kuphatikiza vuto lapaintaneti lomwe limalola wogwiritsa ntchito wovomerezeka kuti azitha kugwiritsa ntchito widget yotsitsa zithunzi kuti agwiritse ntchito nambala iliyonse ya PHP ndikupeza mwayi wopezeka patsamba lamwayi la mawonekedwe owongolera.
  Kuphatikiza apo, kuthekera kolemba pamasamba (XSS) kwachotsedwa pa intaneti.

Source: opennet.ru