Isango le-inthanethi lesoftware lenhlangano encane

Noma yimuphi usomabhizinisi ulwela ukunciphisa izindleko. Okufanayo kuyasebenza nengqalasizinda ye-IT.

Lapho kuvulwa ihhovisi elisha, izinwele zothile ziqala ukuphakama. Ngemuva kwakho konke, udinga ukuhlela:

• inethiwekhi yendawo;
• Ukufinyelela i-inthanethi. Kungcono nakakhulu ngokubhukha ngomhlinzeki wesibili;
• VPN ehhovisi eliphakathi (noma kuwo wonke amagatsha);
• I-HotSpot yamakhasimende ngokugunyazwa nge-SMS;
• ukuhlunga ithrafikhi ukuze abasebenzi bangachithi isikhathi ezinkundleni zokuxhumana futhi baxoxe ku-Skype;
• ukuvikela inethiwekhi yakho kumagciwane nokuhlaselwa. Nikeza ukuvikelwa kokungena (IDS/IPS);
• iseva yakho yemeyili (uma ungathembi noma iyiphi i-pdd.yandex.ru) ene-antivirus kanye ne-antispam;
• ukulahlwa kwefayela;
• Cishe udinga ucingo, i.e. hlela i-PBX, xhuma kumhlinzeki we-SIP nezinye izinto ezinhle...

Kodwa uchwepheshe wakwa-Enikey ngeke akwazi ukukhulisa inethiwekhi yebhizinisi enezidingo ezinjalo... Qasha umlawuli wesistimu obizayo?
Inani elikhulu kakhulu lama-ruble livela ngokwezindleko zesikhathi esizayo.

Kodwa lezi zindleko zingancishiswa kakhulu uma uzinaka Izixazululo ze-UTM, osekunenani elikhulu manje. Futhi njengoba ngibambelela esu “okungcono kakhulu” ekuxazululeni izinkinga zami, amehlo ami awela ku-UTM. Iseva Yokulawula I-inthanethi (X).

Ngizokutshela ngezansi ukuthi lolu hlelo luzosiza kanjani ukulondoloza isabelomali senkampani nokuthi kungani ungadingi umlawuli wesistimu obizayo ukuze uyigcine.

Kodwa uma ngibheka phambili, ngizosho ukuthi lo mkhiqizo othile futhi unemikhawulo yawo. Ungakwazi ukuhlola amakhono wesango ngokuningiliziwe Ngemva kokufunda imibhalo kuwebhusayithi esemthethweni.
Ngiyibekele isihloko esithi “ngesiRashiya,” okungukuthi, ngaphandle kokubheka i-mana, ukuze ngiqonde ukuthi yonke into yayinembile kangakanani.

Ukufakwa kokuqala

I-ICS ingafakwa kokubili ku-hardware yangempela naku-hypervisor. Ungasebenzisa i-PC ethile engenabalandeli.Isibonelo lesi.

Uhlelo lusekelwe ku I-FreeBSD 11.3 futhi kumishini eminingi kufanele isuke ngaphandle kwezinkinga.

Ukufakwa kwenziwa kudiski elingenalutho. Ngokunembayo, uma bekukhona okuthile lapho, ungavalelisa ngokuphephile kukho.Ngeshwa, isifaki sisekela isiNgisi kuphela. Kodwa ngemva kokufakwa, isikhombimsebenzisi esiyinhloko singase sibe ngesiRashiya.




Abazange futhi bakhohlwe ngokubekezelela amaphutha.Uma kukhona amadiski amaningana ohlelweni, angahlanganiswa abe ukuhlasela kusetshenziswa i-ZFS.

Khetha isixhumi esibonakalayo senethiwekhi bese unikeza i-ip kunethiwekhi ekhethiwe.

Sicela ukhombise igama lesizinda langempela uma uhlela ukumisa, isibonelo, iseva yemeyili. Uma singekho isidingo esinjalo manje, ungabhala ngaphandle kokuluhlaza okwesibhakabhaka. Ungayilungisa kamuva kusixhumi esibonakalayo.

Konke! Ungangena kusixhumi esibonakalayo sewebhu usebenzisa i-IP eshiwo kuzilungiselelo kanye nembobo 81. I-DHCP ayikavunywanga okwamanje, ngakho-ke kuzodingeka ukuthi unikeze i-IP evela kunethiwekhi efanayo ngesandla ku-PC yakho.

Sixhuma ku-inthanethi futhi sixhuma namahhovisi.

Uma ungena okokuqala, iwizadi iqala lokho kwenza Usethe iphasiwedi eqinile.
Nkosi




Okulandelayo siya kuzilungiselelo zenethiwekhi

futhi ulungiselele uxhumano kumhlinzeki wethu kanye nezindima zazo zonke izixhumanisi zenethiwekhi.



Ungamisa abahlinzeki abambalwa futhi uhlele ukulinganisa.

Ngendlela, uma ungakhululekile ngolimi lwesixhumi esibonakalayo sesiNgisi, ungalushintsha kalula lapha.


Uma udinga ukuxhuma ihhovisi, isibonelo, ehhovisi elikhulu. Bese sidala uxhumano olusha

futhi ulungiselele imizila yezinsiza kunethiwekhi yesilawuli kude.

Vele ukhohlwe ngomzila oguquguqukayo - ayikho lapha.
Mhlawumbe ngikhetha kakhulu, kepha i-IMHO lokhu kuyiphutha elikhulu...

Ukufinyelela ku-inthanethi kwabasebenzi

Ngokuvamile, umsebenzi oyinhloko wesango ukulawula ukufinyelela kwabasebenzi ku-inthanethi.
Izisebenzi zingakhonjwa nge-IP/mac noma ngokungena ngemvume/ngephasiwedi nge-ejenti noma ingosi yabathunjiweyo.


Futhi, uma inhlangano yakho isebenzisa uhla lwemibhalo olusebenzayo, i-ICS ingahlanganiswa nayo.


Izilungiselelo zokuhlunga (lapho isisebenzi singakwazi futhi singakwazi ukuya khona) zibanzi kakhulu.


Inani elikhulu lezifanekiso zemithetho esezilungile:
Ungavumela i-youtube, kodwa wenqabele ukulayisha amavidiyo lapho.

Kepha akumele uzibekele umkhawulo, futhi i-ICS isazokutshela ukuthi wonke umuntu waya kuphi nokuthi waya kuphi nemibiko yayo ebanzi:

Kuthiwani nge-Wi-Fi yesivakashi?

Futhi i-Wi-Fi yesivakashi ingahlelwa ngokuhambisana nezidingo zemithetho yaseRussia mayelana nokuhlonza umsebenzisi okuyisibopho.
I-ICS isekela ukuthumela i-SMS ngephrothokholi ye-SMPP nganoma yimuphi umhlinzeki we-SMS.

Ucingo.

Yebo Yebo! Asikho isidingo sokufaka iseva ehlukile enenkanyezi. Isivele iku-ICS.
Ngixhume ngempumelelo i-SIP kusuka kuMegafon (imizwa, i-multifon).

Uyithola kanjani i-SIP kuMegafon ngamatherifu amaselula kubantu ngabanye ingafundwa esihlokweni "I-SIP evela ku-Megafon ekhaya tariff".

Ukuphepha.

I-ICS inamathuluzi amaningi azokuvumela ukuthi wenze ngendlela oyifisayo izinga lokuphepha ngokwezidingo zakho: kusuka kuma-antivirus wamahhala i-ClamAV kanye Amasistimu okuthola ukungena kwe-Suricata emikhiqizweni Evgeniy Kaspersky, ukulungiselela kuphela ngesixhumi esibonakalayo sewebhu esiqondakalayo.

Ngisho nefail2Ban efanayo engalungiseki ingalungiselelwa ngokuchofoza okumbalwa


I-ICS futhi ingaqapha ithrafikhi ngephrothokholi ye-netflow evela kumishini yenethiwekhi ngaphandle kokudlula ithrafikhi ngokwayo.

Izinto zokuxhumana

Ukuxhumana kwabasebenzi kungahlelwa hhayi ngocingo nangeposi kuphela


kodwa futhi ngeJabber. Yiqiniso, bambalwa abantu abakhumbulayo mayelana nephrothokholi enjalo.

Iseva yewebhu:
I-ICS ine-web-server enokusekelwa kwe-PHP. Ungakwazi ukufaka esakho isitifiketi se-HTTPS uma usithengile, noma ucacise ukuthi i-ICS ithola mahhala Masibhale.


Lokhu kwanele ukusingatha iwebhusayithi yekhadi lebhizinisi noma ikhasi lokubikezela lokukhangisa. Kodwa ngeke ukwazi ukungena kuphothali esindayo ngamamojula wangokwezifiso. Futhi kimi, lokhu kuwubuwula. Noma kunjalo, isango kufanele lihlale liyisango.

Ukucushwa okuguquguqukayo kokuqapha nezaziso.
Ama-alamu angathunyelwa ngisho nakuTelegram. Futhi eqinisweni le-Russian Federation, kungenzeka ukuthumela imilayezo nge-proxy.

Ekuphethweni

Isango le-inthanethi le-ICS liqukethe cishe zonke izingxenye ezidingekayo ekusebenzeni kwehhovisi elincane.
Ngaphezu kwalokho, konke lokhu kungalungiswa umlawuli wesistimu ye-novice.

Ngaphandle kweqiniso lokuthi uhlelo alwakhiwe ku-FreeBSD, akukho ukufinyelela kulo nge-ssh. Okusho ukuthi, ngeke ukwazi ukufaka amamojula we-PHP ngaphandle kwezinduku. Kuzofanele weneliseke ngalokho onakho... Noma ucele ukusekela ukuze ukuqedele.

Kunoma yikuphi ekuqaleni landa isivivinyo sezinsuku ezingama-35 futhi uhlole ukuthi leli sango likufanele kangakanani.

Ilayisensi ayinaso isikhathi sokusebenza, kodwa ngaphandle kwalokhu izindleko zilungile yentando yeningi.

Isistimu yenze ngokwanele ebhentshini ekuhlolweni kokwenziwa.

Uma ikhasimende livuma futhi unesithakazelo endleleni lesi simiso esizoziphatha ngayo "empini," khona-ke ezinyangeni ezingu-3-6 ngizobhala isibuyekezo nazo zonke izinkinga nobunzima obuvele. Uma kungenzeka, sizohlola ikhwalithi yosekelo lobuchwepheshe.

Kumazwana, ngilindele imibuzo evela kuwe ezodinga ukubhekwa kabanzi ekusetshenzisweni kokulwa.

Source: www.habr.com