Kutulutsidwa kwa zida zogawa zopangira ma firewall OPNsense 22.1 kunachitika, yomwe ndi nthambi ya pulojekiti ya pfSense, yomwe idapangidwa ndi cholinga chopanga zida zogawa zotseguka zomwe zitha kukhala ndi magwiridwe antchito pamlingo wamayankho amalonda pakuyika ma firewall ndi zipata zama network. . Mosiyana ndi pfSense, polojekitiyi ili ngati yosayendetsedwa ndi kampani imodzi, yopangidwa ndi kutenga nawo mbali mwachindunji kwa anthu ammudzi ndipo ili ndi ndondomeko yachitukuko yowonekera bwino, komanso kupereka mwayi wogwiritsa ntchito zomwe zikuchitika muzinthu zamagulu achitatu, kuphatikizapo malonda. omwe. Magwero a magawo ogawa, komanso zida zomwe zimagwiritsidwa ntchito posonkhana, zimagawidwa pansi pa chilolezo cha BSD. Misonkhanoyi imakonzedwa mu mawonekedwe a LiveCD ndi chithunzi chadongosolo chojambulira pa Flash drive (339 MB).
Zofunikira pakugawa zimatengera kachidindo ka FreeBSD. Zina mwazinthu za OPNsense ndi zida zomangirira zotseguka, kuthekera koyika ngati mapaketi pamwamba pa FreeBSD nthawi zonse, zida zosinthira katundu, mawonekedwe a intaneti okonzekera kulumikizana ndi maukonde (Captive portal), kukhalapo kwa makina. potsata maiko olumikizirana (firewall yodziwika bwino yozikidwa pa pf), kukhazikitsa malire a bandwidth, kusefa kwamagalimoto, kupanga VPN yozikidwa pa IPsec, OpenVPN ndi PPTP, kuphatikiza ndi LDAP ndi RADIUS, kuthandizira kwa DDNS (Dynamic DNS), kachitidwe ka malipoti owonera ndi zithunzi.
Kugawa kumapereka zida zopangira masinthidwe osagwirizana ndi zolakwika potengera kugwiritsa ntchito protocol ya CARP ndikukulolani kuti muyambitse, kuwonjezera pa firewall yayikulu, node yosunga zobwezeretsera yomwe idzalumikizidwa yokha pamlingo wokonzekera ndipo idzatenga katunduyo. chochitika cha kulephera kwa node yoyamba. Woyang'anira amapatsidwa mawonekedwe amakono komanso osavuta kuti akonze zozimitsa moto, zomangidwa pogwiritsa ntchito Bootstrap web framework.
Zina mwazosintha:
- Kusintha kupita ku nthambi ya FreeBSD 13-STABLE kwapangidwa (mtundu wakale udakhazikitsidwa ndi HardenedBSD 12.1).
- Anapereka chizindikiritso mu chipika cha zambiri za kuchuluka kwa uthenga (kuzama) kwa zosefera ndi mtengo uwu.
- Zolemba za Opnsense-log zikuphatikizidwa pakuwunika zipika.
- Zida zowonjezera sysctl zawonjezedwa ku tunable framework.
- Ntchito yotsitsa ndi kukonza zolumikizira netiweki yapita patsogolo. Kusintha kogwiritsa ntchito LUA bootloader kwapangidwa.
- Zosinthidwa za mapulogalamu owonjezera kuchokera ku madoko, mwachitsanzo, filterlog 0.6, hostapd 2.10, lighttpd 1.4.63, nss 3.74, openssl 1.1.1m, openvpn 2.5.5, php 7.4.27, sqlite 3.37.2, 3.35.1.slog. 1.14.0, osamangidwa 2.10, wpa_supplicant XNUMX.
Source: opennet.ru