Kuburitswa kwekiti yekugovera yekugadzira IPFire 2.23 firewalls

Yakagadzirwa kuburitswa kwekiti yekugovera yekugadzira ma routers uye firewalls - IP Moto 2.23 Core 131. IPFire inosiyaniswa neyakanyanya kupusa yekuisa maitiro uye kurongeka kwekugadzirisa kuburikidza neiyo intuitive web interface, izere nemagirafu anoonekwa. Saizi yekuisa iso mufananidzo iri 256 MB (x86_64, i586, ARM).

Iyo sisitimu ndeye modular, mukuwedzera kune ekutanga mabasa epacket kusefa uye traffic traffic yeIPFire, ma modules anowanikwa nekushandiswa kwehurongwa hwekudzivirira kurwiswa kwakavakirwa paSuricata, kugadzira faira server (Samba, FTP, NFS), a mail server (Cyrus-IMAPd, Postfix, Spamassassin, ClamAV uye Openmailadmin) uye printa server (CUPS), kuronga VoIP gedhi rakavakirwa paAsterisk uye Teamspeak, kugadzira isina waya yekupinda nzvimbo, kuronga kutenderera odhiyo uye vhidhiyo server (MPFire, Videolan , Icecast, Gnump3d, VDR). Kuisa ma-add-ons muIPFire, akakosha pasuru maneja, Pakfire, anoshandiswa.

Mukuburitswa kutsva:

• A new intrusion prevention system (IPS) yakaunzwa inotsigira kuongororwa kwakadzama kwemapakiti etiweki uye inopa kuzivikanwa kwekutyisidzira kunogona kuitika. Iyo sisitimu yakavakirwa pakuvandudzwa kweprojekiti Meerkat uye inosiyana neyakambopihwa Snort-based IPS mukuita kwepamusoro uye kuchengetedzeka. Zvirongwa zvekare zveIPS zvichashandurwa otomatiki mushure mekugadzirisa IPFire, asi nekukasira mushure mekufamba IPS inotanga mukutarisa maitiro uye inoda shanduko yemanyorero kune zvigadziriso kuti ichinje kune packet kusefa mode. Iyo muchengeti yekuwedzera haichadikanwa kuti ISP ishande, asi inogona kushandiswa zvakasiyana kuvharira password kufungidzira kuedza kuburikidza neSSH;
• Zvikamu zveSistimu zvakagadziridzwa, Linux kernel 4.14.113, gnutls 3.6.7.1, lua 5.3.5, nettle 3.4.1, ntp 4.2.8p13, rrdtool 1.7.1, unbound 1.9.1 inoshandiswa;
• Yakawedzerwa rutsigiro rwekudzosera zvikumbiro kuburikidza neSSH Agent, ichikubvumidza kuti ushandise muenzi ane IPFire senge yepakati poindi yekubatanidza kune vanogamuchira pane yemukati network;
• Yakagadziridzwa mapakeji ane ma-add-ons: borgbackup 1.1.9, dnsdist 1.3.3, freeradius 4.0.18, nginx 1.15.9, postfix 3.4.5, zabbix_agentd 4.2.0;
• Tor ine yakasarudzika seti yemitemo yekusefa inobuda traffic (TOR_OUTPUT) inofambiswa kuburikidza neTor gedhi.
• Imwe nzira yekuzviparadzanisa yakawedzerwa pakushandiswa kweiyo wireless access point, iyo inobvumidza iwe kurambidza kupindirana pakati pevatengi vanobatana kune isina waya network;
• Yakawedzera nyowani flashrom package ine utility yekuvandudza firmware.

Source: opennet.ru