Iyo yekugovera kit yekugadzira OPNsense 20.7 firewalls inowanikwa

Ndakaona chiedza kugovera kit yekugadzira firewalls OPNsense 20.7, inova forogo yepurojekiti yepfSense, yakagadzirwa nechinangwa chekugadzira kugovera kwakanyatsozaruka kunogona kuva nekushanda kwezvigadziriso zvekutengeserana zvekuisa firewall uye network network gateways. Kusiyana nepfSense, chirongwa ichi chakamisikidzwa sechisiri kudzorwa nekambani imwe chete, yakagadziridzwa nekutora chikamu kwakananga munharaunda uye ine hurongwa hwekuvandudza hwakajeka, pamwe nekupa mukana wekushandisa chero chayakaitika muzvigadzirwa zvebato rechitatu, kusanganisira zvekutengesa. zvimwe. Zvinyorwa zvekwakabva zvezvikamu zvekugovera, pamwe chete nemidziyo inoshandiswa pakuungana, paradzira pasi peBSD rezinesi. Assemblies yakagadzirirwa muchimiro cheLiveCD uye system image yekurekodha paFlash drives (420 MB).

Izvo zvakakosha zvemukati zvekugovera zvinoenderana nekodhi YakaomeswaBSD 12.1, iyo inotsigira forogo yakawiriraniswa yeFreeBSD, iyo inobatanidza dzimwe nzira dzekuchengetedza uye matekiniki ekupikisa kushandiswa kwekusagadzikana. Pakati mikana OPNsense inogona kusiyaniswa neyakavhurika yakazara musangano toolkit, kugona kuisa muchimiro chemapakeji pamusoro peyenguva dzose FreeBSD, mitoro yekuyera maturusi, webhu interface yekuronga mushandisi kubatana kune network (Captive portal), kuvapo kwemaitiro e tracking connection states (stateful firewall based on pf), kuseta bandwidth, traffic filtering, kugadzira VPN yakavakirwa paIPsec, OpenVPN uye PPTP, kubatanidzwa neLDAP neRADIUS, kutsigirwa kweDDNS (Dynamic DNS), hurongwa hwekuona mishumo uye magirafu. .

Mukuwedzera, kugovera kunopa zvishandiso zvekugadzira kukanganisa-kushivirira zvigadziriso zvichienderana nekushandiswa kweCARP protocol uye kukubvumira kuti utange, kunze kweiyo huru firewall, node yekuchengetedza iyo inozogadziriswa pakarepo pachiyero chekugadzirisa uye ichatora. mutoro muchiitiko chekutadza kweprimary node. Iyo maneja inopihwa yemazuva ano uye yakapusa interface yekumisikidza firewall, yakavakwa uchishandisa iyo Bootstrap web framework.

Mushanduro itsva:

• Yakawedzera tsigiro yeDHCPv6 Multi-WAN yekubatanidza kuburikidza nematanho akawanda;
• Zvinogoneka kutsanangura mapeji ako anoratidzwa kana paine kukanganisa kwekubatanidza kuburikidza newebhu proxy;
• Kuitwa kweiyo network intrusion yekuona uye kudzivirira system yakagadziridzwa kuti Meerkat 5;
• Iyo base system inowiriraniswa neHardenedBSD 12.1, forogo yeFreeBSD 12.1, iyo inobatanidza mamwe maitiro ekuchengetedza uye matekiniki ekurwisa kushandiswa kwekusagadzikana;
• Yakawedzera mushumo nemuti maonero eruzivo nezve network network;
• Kushandisa API ye firewall management;
• Kugona kuwedzeredzwa kwekusefa matanda panhunzi.

Source: opennet.ru