Dukumiintiga Hagaha Guud
Ujeedada IP Masquerading waa in ay u oggolaato mashiinada leh cinwaano IP ah oo aan loo adeegsan karin shabakadaada si ay u galaan internetka mashiinka mashiinka sameynaya maskaxda. Gaadiidka ka socda shabakada gaarka ah ee laguugu talagalay internetka waa in lagu hagaajiyaa jawaabaha si aad ugu noqotid dib u noqoshada mashiinka codsiga. Si tan loo sameeyo, kernel waa inuu wax ka bedelo cinwaanka IP-ga ee baakad kasta si markaas jawaabta loo soo celin doono, halkii laga heli lahaa cinwaanka IP-ga oo sameeyey codsiga, taas oo aan macquul ahayn internetka. Linux waxay isticmaashaa Connecting Tracking (fure) si ay ula socdaan xidhiidhada ay ka mid yihiin mishiinnada iyo dib-u-celin kasta oo ku filan. Gaadiidka ka tagaya shabakada gaarka ah ayaa ah "si buuxda loo soo celiyay" sidii ay uga soo jeedeen mashiinka albaabka Ubuntu. Nidaamkan waxaa loo gudbiyaa dukumiintiyada Microsoft sida wadaaga Internetka.
Tilmaamaha loogu talagalay IP Masquerading
Tani waxaa lagu gaari karaa qaanuun hal qadar ah, oo laga yaabo inay ku kala duwan yahiin nidaamyada shabakada:
sudo iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADEXeerka kor ku xusan wuxuu rumaysan yahay in cinwaankaaga gaarka ah uu yahay 192.168.0.0/16 iyo in qalabkaaga internetka uu yahay ppp0. Qoraalka ayaa hoos u dhacay sida soo socota:
- -wax - sharcigu waa inuu galo miiska
- -AAD GURIGA - sharcigu waa in lagu lifaaqaa (-A) silsiladda POSTROUTING
- -s 192.168.0.0/16 - Sharcigu wuxuu khuseeyaa gaadiidka ka soo jeeda goobta cinwaanka la cayimay
- -o ppp0 - qawaanku wuxuu khuseeyaa gaadiidka loo qorsheeyay in la mariyo qalabka shabakada ee la cayimay
- -j MASQUERADE - isugeynta taraafikadani waxay tahay in ay "boodaan" (-j) ujeedada MASQUERADE lagu beegsanayo sida lagu faahfaahiyay kor ku xusan
Silsilad kasta oo ku jira miiska shaandhada (miiska caadiga ah, iyo meesha ugu badan ama dhammaan shaandhada baakadka) waxay leedahay siyaasad ku dhisan ACCEPT, laakiin haddii aad abuurayso dab-damis ku dari qalabka albaabka, waxaad dajin kartaa siyaasadaha DROP ama CUDURRADA, oo kiiskani u baahan yahay gaadiidka maskaxda leh ee loo baahan yahay in loo oggolaado iyada oo loo marayo silsiladda FORWARD ee qaanuunka kor ku xusan:
sudo iptables -A QAADASHADA - 192.168.0.0/16 -o ppp0 -j ACCEPT sudo iptables -A HADDALA -192.168.0.0/16 -waxay ku xiran tahay, WAXYAALO -p ppp0 -j ACCEPTAmarradan kor ku xusan waxay u oggolaanayaan dhammaan isku xirnaanta shabakadaada internetka iyo dhammaan taraafikada la xidhiidha kuwa isku xiran si ay ugu noqdaan mishiinka bilaabay iyaga.
* Liisanka