Jagoran Bayanin Gidan Jagora
Dalilin IP Masquerading shi ne don ba da damar inji tare da masu zaman kansu, adireshin IP maras kaiwa a kan hanyar sadarwarka don samun damar Intanit ta hanyar na'ura ta yin masquerading. Dogaro daga hanyar sadarwarka na intanet da aka ƙaddara don Intanit dole ne a yi amfani da shi don amsar da za a mayar da shi zuwa mashin da ya sanya buƙatar. Don yin wannan, kernel dole ne ya canza adireshin IP na kowanne fakiti domin a mayar da martani gareshi, maimakon adireshin IP ɗin da ke kaiwa wanda ya buƙaci, wanda ba zai iya yiwuwa a Intanit ba. Linux yana amfani da Hanyoyin Hanya (Conntrack) don ci gaba da lura da abin da haɗin ke kasancewa a cikin wace inji kuma ya sake dawo da fakiti kowanne. Harkokin zirga-zirga da ke barin cibiyar sadarwar ku yana "masqueraded" kamar yadda aka samo daga ofishin Ubuntu. An kira wannan tsari a cikin takardun Microsoft kamar yadda Haɗin Intanet ke raba.
Umurnai don IP Masquerading
Ana iya cika wannan tare da tsarin iptables ɗaya, wanda zai iya bambanta dan kadan bisa tsarin sadarwar ku:
sudo iptables -t nat - POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADEUmurin da ke sama ya ɗauka cewa adireshin adireshinku na sirri shine 192.168.0.0/16 kuma na'urar na'urarku ta Intanit tana ppp0. An gama rukuni ɗin kamar haka:
- -t nat - mulkin shine shiga cikin tebur
- -BAYARWA - dole ne a haɗa doka ta (-A) zuwa sarkar POSTROUTING
- -s 192.168.0.0/16 - Dokar ta shafi alaƙa da aka samo asali daga wurin adireshin da aka adana
- -o ppp0 - doka ta shafi tsarin da aka tsara a cikin zirga-zirga ta hanyar na'urar sadarwa ta musamman
- -J MASQUERADE - hanya da aka daidaita da wannan doka ita ce "tsalle" (-j) zuwa makaman MASQUERADE da za a yi amfani da ita kamar yadda aka bayyana a sama
Kowace sarkar a cikin tebur tace (teburin da aka keɓa, da kuma inda mafi yawan duk ko duk fakitin fakiti ya auku) yana da tsarin ƙaddamarwa na TAMBAYA, amma idan kuna ƙirƙirar tacewar taɗi banda kayan ƙofar, kuna iya saita manufofin zuwa DROP ko SABARI, a waccan yanayin ana buƙatar alamar kasuwancinku ta hanyar sashin lambar DUNIYA domin dokar da ke sama don aiki:
sudo iptables - WASHIYA -s 192.168.0.0/16 -o ppp0 -i yarda da sudo iptables -WAMBA -d 192.168.0.0/16 -m state --state ANYAKE, RUKANNA -i ppp0 -i yardaDokokin da ke sama za su ba da damar duk haɗin sadarwa daga cibiyar sadarwarku zuwa Intanit da duk hanyoyin da suka danganci waɗannan haɗi don komawa da inji wanda ya fara su.
* Lasisi