Iyini i-Firewall futhi Yenza Kanjani Umsebenzi We-Firewall?

I-firewall iyindlela yokuqala yokuvikela inethiwekhi yakho

Njengoba ufunda okubalulekile kokuphepha kwekhompyutha nokuxhumana, uzohlangana nemigomo emisha eminingi: ukubethela , i-port, iTrojan , nabanye. I-Firewall iyigama elizovela ngokuphindaphindiwe.

Kuyini i-Firewall?

I-firewall iyindlela yokuqala yokuzivikela kwenethiwekhi yakho. Injongo eyisisekelo ye-firewall ukugcina izivakashi ezingagunyaziwe ukuphequlula inethiwekhi yakho. I-firewall ingaba idivaysi ye-hardware noma uhlelo lokusebenza lwesofthiwe ngokuvamile olubekwe endaweni engaphansi kwenethiwekhi ukuze isebenze njengomlindisango wazo zonke izimoto ezingenayo nezingenayo.

I-firewall ikuvumela ukuthi ubeke imithetho ethile ukukhomba ithrafikhi okufanele ivumeleke ngaphakathi noma ngaphandle kwenethiwekhi yakho yangasese. Ngokuya ngohlobo lwe-firewall oluqalisiwe, ungakwazi ukuvimbela ukufinyelela kwamakheli athile e- IP namagama wesizinda kuphela noma ungavimbela izinhlobo ezithile zethrafikhi ngokuvimbela amathrekhi we- TCP / IP ayisebenzisa.

Umsebenzi Wesikhwama Esibucayi?

Kunezinhlelo ezine eziyisisekelo ezisetshenziselwa izibhamu zokuvimbela ithrafikhi. Idivaysi eyodwa noma uhlelo lokusebenza lungasebenzisa okungaphezu kwalodwa kulaba ukuhlinzeka ngokuvikelwa okujulile. Izinqubo ezine ukuhlunga iphakethe, isango lesifunda-level, iseva ye-proxy, nesango lesicelo.

Ukuhlunga iphakethe

Isihlungi sepakethe sithinta yonke imoto ukuya futhi kusukela kwinethiwekhi futhi siyihlola ngokumelene nemithetho oyihlinzekayo. Ngokuvamile isihlungi sepakethe singakwazi ukuhlola ikheli le-IP yomthombo, i-port source, ikheli le-IP eliya kuyo, kanye ne-port port. Yilezi zinqubo ongazihlunga ukuze uvumele noma ungavumelani nemoto kusuka kwamakheli athile e-IP noma kumachwebeni athile.

Isango lezinga lesifunda

Isango lesifunda lesifunda livimbela yonke imoto engenayo kunoma yimuphi umlindi kodwa uqobo. Ngaphakathi, imishini yamaklayenti isebenzisa isofthiwe yokuvumela ukuba kutholakale uxhumano nomshini wesango wesifunda. Ezweni elingaphandle, kubonakala sengathi konke ukuxhumana kusuka kunethiwekhi yakho yangaphakathi kuvela esangweni lesifunda-level.

I-proxy Server

Iseva ye-proxy ivame ukufakwa ukuze kuthuthukiswe ukusebenza kwenethiwekhi, kodwa ingaba uhlobo lwe-firewall kanye. Amasiphakeli weproxy afihle amakheli akho angaphakathi ukuze zonke zokuxhumana zivele zivela kuseva elimele ngokwayo. I-proxy iseva amakhasi eceliwe. Uma Umsebenzisi A eya ku-Yahoo.com, iseva ye-proxy ithumela isicelo ku-Yahoo.com futhi ithola ikhasi lewebhu. Uma Umsebenzisi B bese exhuma ku-Yahoo.com, iseva ye-proxy isithumela ulwazi oluvele lusetshenzisiwe kuMsebenzisi A ngakho libuyiswa ngokushesha kunokuba liphinde lithole kusuka ku-Yahoo.com. Ungalungisa iseva ye-proxy ukuvimbela ukufinyelela kumawebhusayithi athile futhi uhlunge imoto ethile ye-port ukuvikela inethiwekhi yakho yangaphakathi.

Isicelo seSango

Isango lesicelo liyisisekelo seseva ye-proxy. Iklayenti langaphakathi kuqala lihlanganisa uxhumano nesango lesicelo. Isango lesicelo libeka ukuthi ukuxhumeka kufanele kuvunyelwe noma cha bese kusetha uxhumano nekhompiyutha yokuphela. Konke ukuxhumana kudlula kokubili ukuxhumeka-iklayenti kwisango lesicelo nesicelo sesango ukuya endaweni. Isango lesicelo liqapha yonke imoto ngokumelene nemithetho yayo ngaphambi kokunquma ukuthi ingayithumela yini. Njengezinye izinhlobo ze-proxy server, isango lesicelo yilona kuphela ikheli elibonwa yizwe langaphandle ukuze inethiwekhi yangaphakathi ivikelwe.

Qaphela: Lesi sihloko sefa sasihlelwe ngu-Andy O'Donnell