NAME
makompyuta_mapangidwe - mawonekedwe a mafayilo otha kulandira mawonekedwe
DESCRIPTION
Tsamba la Bukuli likufotokoza njira yosavuta yowonetsera kayendedwe kamene imachokera kwa kasitomala (dzina la eni / adiresi, dzina la ogwiritsira ntchito), ndi seva (dzina la ndondomeko, maina a alendo / adiresi). Zitsanzo zimaperekedwa kumapeto. Wowerenga wosapirira amalimbikitsidwa kuti apite ku gawo la EXAMPLES la kufotokoza mwamsanga.
Chida chowonjezera cha chinenero choyendetsera bwino chikufotokozedwa m'mawotchu Zowonjezera zimayambika pa nthawi yomanga pulogalamu ndi nyumba ndi -DPROCESS_OPTIONS.
M'malemba otsatirawa, daemon ndi dzina la mawonekedwe a network , ndipo kasitomala ndi dzina ndi / kapena adiresi ya msonkhano wopempha. Mayendedwe a daemon a Network amatchulidwa mu file inetd yosintha.
MAFUNSO OTHANDIZA OTHANDIZA
Pulogalamu yothandizira kupeza mauthenga awiri. Kusaka kumaima pamsinkhu woyamba:
*
Kufikira kudzaperekedwa pamene awiri (daemon, kasitomala) akugwirizana ndi cholembera pa /etc/hosts.allow .
*
Kupanda kutero, kulumikila kudzakanidwa pamene awiri ( daemon , kasitomala) akugwirizana ndi fayilo /etc/hosts.deny .
*
Apo ayi, kulumikila kudzaperekedwa.
Fayilo yodalandila yosavomerezeka ilipezedwa ngati ngati fayilo yopanda kanthu . Potero, kuyang'anitsitsa kungathe kutsegulidwa popanda kupereka mafayilo oletsa kupeza.
MALAMULO OTHANDIZA KUTHANDIZA
Fayilo yowunikira iliyonse ili ndi zero kapena mizere ya malemba. Mizere iyi ikukonzedwa mwa dongosolo la mawonekedwe. Kusaka kumathera pamene masewera amapezeka.
*
Makhalidwe atsopano amanyalanyazidwa pamene amatsogoleredwa ndi khalidwe lombuyo. Izi zimakulolani kuswa mizere yaitali kuti zisinthe.
*
Mizere yosayenerera kapena mizere yomwe imayamba ndi chikhalidwe cha `# 'imanyalanyazidwa. Izi zimakulowetsani kufotokozera ndemanga ndi malo azithunzi kuti magome aphweke kuwerenga.
*
Mizere ina yonse ikhale yokhutiritsa maonekedwe awa, zinthu pakati pa [] kukhala zosankha:
daemon_list: kasitomala_list [: shell_command]
daemon_list ndi mndandanda wa mayina omwe amachititsa daemon (mavumbulutso [0]) kapena wildcards (onani m'munsimu).
Otsatsa_ndandanda ndi mndandanda wa mayina amodzi kapena ambiri, maadiresi ochereza, machitidwe kapena wildcards (onani m'munsimu) zomwe zidzafanane motsutsa dzina la eni kasitomala kapena adiresi.
Mawonekedwe ovuta kwambiri daemon @ otsogolera ndi otsogolera @ otsogolera akufotokozedwa m'magulu pa mapulogalamu otsiriza a seva komanso pa zolemba za ositomala, omwe akutsatira.
Zolemba zamndandanda ziyenera kupatulidwa ndi zizindikiro ndi / kapena makasitomala.
Kupatula zolemba za NIS (YP) zamagulu, zothandizira kufufuza zonse ndizovuta.
PATTERNS
Chilankhulo choyendetsa bwino chimagwiritsa ntchito njira zotsatirazi:
*
Chingwe choyamba ndi `. ' khalidwe. Dzina la alendo likufanana ngati zigawo zomaliza za dzina lake zimagwirizana ndi chitsanzo chodziwika. Mwachitsanzo, chitsanzo `.tue.nl 'chimagwirizanitsa dzina la alendo' wzv.win.tue.nl '.
*
Chingwe chomwe chimatha ndi `. ' khalidwe. Adilesi yowonjezera ikulumikizana ngati malo ake oyambirira owerengera akugwirizana ndi chingwe chopatsidwa. Mwachitsanzo, chitsanzo `131.155. ' imagwirizanitsa adiresi ya (pafupi) aliyense wokhala nawo pamsewu wa yunivesite ya Eindhoven (131.155.xx).
*
Chingwe chomwe chimayambira ndi `@ 'khalidwe chimatengedwa monga dzina la NIS (kale YP). Dzina la alendo limayenderana ngati ali membala wa gululo. Mtsinje wa masewera sagwiritsidwe ntchito maina a ndondomeko ya daemon kapena mayina ogwiritsa ntchito makasitomala.
*
Mawu a mtundu `nnnn / mmmm 'amatanthauzidwa ngati awiriwa. Adilesi ya IPv4 ikufanana ngati `net 'ndi yofanana ndi yochepa ndi ya adiresi ndi` mask'. Mwachitsanzo, chitsanzo cha ukonde / mask `131.155.72.0/255.255.254.0 'chikufanana ndi adiresi iliyonse' 131.155.72.0 'kupyolera mu` 131.155.73.255'.
*
Chiwonetsero cha mawonekedwe `[n: n: n: n: n: n: n: n] / m 'amatanthauziridwa ngati' [net] / prefixlen 'awiri. Adilesi ya IPv6 yowonjezera ikulumikizana ngati 'zizindikiro za' prefix 'za' net 'zili zofanana ndi a `prefixlen' bits a adilesi. Mwachitsanzo, [net] / firstlen pattern `[3ffe: 505: 2: 1 ::] / 64 'amatsutsana ndi adiresi iliyonse pamtundu wakuti` 3: 505: 2: 1 ::' kudzera `3ffe: 505: 2: 1: fff: ffff: ffff '.
*
Chingwe chomwe chimayambira ndi '/' khalidwe chimatengedwa ngati dzina la fayilo. Dzina la eni kapena adiresi lifanane ngati likugwirizana ndi dzina lililonse la alendo kapena ma adiresi omwe ali mu fayilo lotchulidwa. Mafayilo apamwamba ndi zero kapena mizere yambiri ndi zero kapena dzina lopitilira alendo kapena njira za adiresi zolekanitsidwa ndi whitespace. Dzina la fayilo lingagwiritsidwe ntchito kulikonse kumene dzina la eni kapena maadiresi angagwiritsidwe ntchito.
*
Wildcards `* 'ndi`?' angagwiritsidwe ntchito kugwirizanitsa hostnames kapena ma intaneti. Njira yofananako siingagwiritsidwe ntchito mogwirizana ndi 'net / mask' yofananako, kutchula dzina loyambira ndi `. ' kapena adilesi ya IP yofanana ndi mapeto ndi `. '.
WILDCARDS
Chilankhulo chothandizira kupeza zogwirizana ndi zinyama zakuda:
ZONSE
Chilengedwe chamtchire, nthawizonse chimagwirizana.
LOCAL
Amagwirizanitsa aliyense wogwiritsa ntchito dzina lake.
WOSADZIWA
Amagwiritsa ntchito aliyense yemwe dzina lake silinadziwike, ndipo amatsagana ndi munthu aliyense yemwe dzina lake kapena adilesi ake sadziwika. Chitsanzo ichi chiyenera kugwiritsidwa ntchito mosamala: Mayina ogwira ntchito sangathe kupezeka chifukwa cha mavuto a panthawi ya seva. Adilesi ya intaneti sichidzapezeka pamene pulogalamuyo silingathe kudziwa mtundu wa intaneti imene ikuyankhula.
KUDZIWA
Amagwiritsa ntchito aliyense yemwe dzina lake amadziwika, ndipo amatsagana ndi munthu aliyense amene dzina lake ndi adiresi amadziwika. Chitsanzo ichi chiyenera kugwiritsidwa ntchito mosamala: Mayina ogwira ntchito sangathe kupezeka chifukwa cha mavuto a panthawi ya seva. Adilesi ya intaneti sichidzapezeka pamene pulogalamuyo silingathe kudziwa mtundu wa intaneti imene ikuyankhula.
PARANOID
Amagwirizanitsa munthu aliyense yemwe dzina lake silikugwirizana ndi adiresi yake. Pamene tcpd yakhazikitsidwa ndi -DPARANOID (njira yosasinthika), imagwetsa pempho kuchokera kwa makasitomalawa ngakhale musanayang'ane pa matebulo ogwiritsira ntchito. Mangani popanda -DPARANOID pamene mukufuna kuti muzitha kuyang'anira zofunsirazo.
OPERATORS
PAKATI
Ntchito yogwiritsidwa ntchito ndi ya fomu: `list_1 EXCEPT list_2 '; Zomangamanga izi zimagwirizana chirichonse chomwe chikugwirizana mndandanda_1 pokhapokha ngati chikugwirizana ndi list_2 . Wopereka EXCEPT angagwiritsidwe ntchito mu daemon_lists ndi mu client_lists. Wopereka EXCEPT akhoza kukhala ndi chisa: ngati chinenero cholamulira chiloleza kugwiritsa ntchito mabala, 'EXCEPT b PAKUTI c' idzawonekera ngati `(a EXCEPT (b CHOMODZI c)) '.
SHELL COMMANDS
Ngati lamulo loyang'aniridwa loyambako loyamba lili ndi lamulo la shell, lamulolo limaperekedwa ku% substitutions (onani gawo lotsatira). Chotsatiracho chikuchitidwa ndi njira ya mwana / bin / sh ndi zolembera zoyenera, zotsatira ndi zolakwika zogwirizana ndi / dev / null . Tchulani `& 'kumapeto kwa lamulo ngati simukufuna kudikirira mpaka itatha.
Malamulo a shell sayenera kudalira kayendedwe ka PATH ka inetd. M'malo mwake, ayenera kugwiritsa ntchito mayina omveka, kapena ayenera kuyamba ndi PATH lolongosoka = mawu alionse.
Mndandanda wa makalata_magulu (5) amafotokoza chinenero china chomwe chimagwiritsa ntchito gawo la lamulo la chipolopolo m'njira yosiyana ndi yosagwirizana.
% OPPANSIONS
Kuwonjezereka kwotsatila kulipo mkati mwa malamulo a zipolopolo:
% a (% A)
Adilesi yamakiti (kasitomala).
% c
Zosowa za amtundu: wosuta @ wolandila, wothandizira @ adilesi, dzina la alendo, kapena adilesi, malingana ndi momwe zilili zambiri.
% d
Dzina la machitidwe a daemon (ndemanga [0] mtengo).
% h (% H)
Dzina la okonda (kasitomala) dzina kapena adiresi, ngati dzina la alendo silikupezeka.
% n (% N)
Dzina la okonda (kasitomala) dzina lake (kapena "losadziwika" kapena "paranoid").
% p
Chiwonetsero cha daemon.
% s
Chidziwitso cha seva: daemon @ host, daemon @ adiresi, kapena dzina la daemon, malingana ndi momwe zilili zambiri.
% u
Dzina la kasitomala (kapena "osadziwika").
%%
Ikulongosola ku chikhalidwe chimodzi ``% '.
Anthu otchulidwa pa% omwe amatha kusokoneza chipolopolo amatsatiridwa ndi zovuta.
SERVER ENDPOINT PATTERNS
Pofuna kusiyanitsa makasitomala ndi adiresi ya pa intaneti yomwe amagwirizanako, gwiritsani ntchito mawonekedwe a mawonekedwe:
process_name @ host_pattern: customer_list ...
Zitsanzo ngati izi zingagwiritsidwe ntchito pamene makina ali ndi ma intaneti osiyanasiyana omwe ali ndi mayina osiyanasiyana a intaneti. Othandizira ogwira ntchito angagwiritse ntchito malowa kuti apereke zolemba za FTP, GOPHER kapena WWW ndi mayina a intaneti omwe angakhale a mabungwe osiyanasiyana. Onaninso chithunzi cha 'kupotoza' muzokambirana zam'makalata (5). Machitidwe ena (Solaris, FreeBSD) akhoza kukhala ndi adiresi imodzi ya intaneti pa mawonekedwe amodzi; ndi machitidwe ena omwe mungafunike kugwiritsira ntchito SLIP kapena PPP nthano zachinsinsi zomwe zimakhala mu malo ochezera a intaneti.
Wogwira_patpat amamvera malamulo omwewo monga maina ndi maadiresi omwe akupezeka pa client_list. Kawirikawiri, mauthenga a mapeto a seva amapezeka pokhapokha ndi mauthenga ogwirizana.
WOPHUNZIRA USERNAME KUYANKHA
Pamene wogwira ntchitoyo akuthandizira pulogalamu ya RFC 931 kapena mmodzi wa mbadwa zake (TAP, IDENT, RFC 1413) mapulogalamu okhutira akhoza kupeza zambiri zokhudzana ndi mwini wake wa kugwirizana. Chidziwitso cha dzina la azimayi, pamene chilipo, chatsegulidwa pamodzi ndi dzina la eni kasitomala, ndipo lingagwiritsidwe ntchito pofananitsa ndondomeko monga:
daemon_list: ... user_pattern @ host_pattern ...
Mawambo a daemon akhoza kusinthidwa pa nthawi yokonzekera kuti achite zolemba zomwe zimagwiritsidwa ntchito ndi malamulo (osasintha) kapena kuti nthawi zonse azifunsa mafunso omwe akukhala nawo. Pankhani ya zolemba zapamwamba zogwiritsa ntchito, lamulo ili pamwamba lingapangitse dzina lakutsegulira kuyang'ana pokhapokha ngati daemon_list ndi host_pattern match match.
Njira yogwiritsira ntchito imakhala ndi mawu ofanana monga daemon process pattern, kotero mapepala ofananawa amagwiritsidwa ntchito (umembala wagulu la gulu siwothandizidwa). Mmodzi sayenera kutengedwera ndi zolemba za username, ngakhale.
*
Zomwe amachitira ogwiritsa ntchito a kasitomala sangathe kuzidalira pamene zikufunikira kwambiri, mwachitsanzo, pamene makasitomala awonetsedwa. Mwachidziwikire, ALL ndi (UN) KUDZIWA ndiwo okhawo mayina a mayina omwe amagwiritsa ntchito bwino.
*
Zolemba za username zimatheka kokha ndi ma-based based TCP, ndipo pokhapokha ngati woyang'anira kasitomala akuyang'ana daemon yoyenera; muzochitika zina zonse zotsatira zake ndi "zosadziwika".
*
Nkhungu yotchuka ya UNIX ya kernel ingayambitse kuwonongeka kwa utumiki pamene zolemba zapathengo zimatsekedwa ndi chowotcha. Tsamba la README lopukuta limafotokoza njira kuti mudziwe ngati nkhumba yanu ili ndi kachilomboka.
*
Zolemba za username zingayambitse kuchedwa kwadzidzidzi kwa osagwiritsa ntchito UNIX. Kukhazikika kwa nthawi yaitali kwa zolemba za username ndi masekondi khumi: ofooka kwambiri kuti athe kulimbana ndi mapulogalamu apang'onopang'ono, koma motalika kukwiyitsa ogwiritsa ntchito PC.
Kusankhidwa kwa dzina lomasulira kungachepetse vuto lomaliza. Mwachitsanzo, lamulo monga:
daemon_list: @pcnetgroup ALL @ ALL
angagwirizane ndi mamembala a pc netgroup popanda kugwiritsa ntchito malemba, koma angagwiritse ntchito mauthenga a ntchito ndi machitidwe ena onse.
DETECTING ADDRESS ZOTHANDIZA ZOKHUDZA
Cholakwika mu jenereta ya chiwerengero cha machitidwe ambiri a TCP / IP amalola omvera kuti asonyeze mosavuta makamu odalirika ndi kutsegula kudzera, mwachitsanzo, utumiki wa kutali. Utumiki wa IDENT (RFC931 etc.) ungagwiritsidwe ntchito kuti uzindikire kusokoneza kwa adware ndi ena.
Musanavomereze wofuna chithandizo, wrappers angagwiritse ntchito service IDENT kuti apeze kuti kasitomala sanatumize pempho konse. Pamene wofuna chithandizo akupereka utumiki wa IDENT, chotsutsa chosayenera cha IDENT (wofuna kasitomale amatsutsana `UNKNOWN @ host ') ndi umboni wamphamvu wa kusokonezeka kwa masewera.
Chotsatira chabwino chotsatira chotsatira (wofuna chithandizo amatsanzira `KNOWN @ host ') sichidali chodalirika. N'zotheka kuti wothandizira asokoneze mgwirizano wa makasitomala ndi IDENT kuyang'ana, ngakhale kuti kuchita zimenezi n'kovuta kwambiri kusiyana ndi spoofing kogwiritsa ntchito makasitomala. Zingakhalenso kuti seva ya kasitomala IDENT yonena.
Zindikirani: IDENT lookups sagwira ntchito ndi UDP misonkhano.
ZITSANZO
Chilankhulocho chimasinthasintha mokwanira kotero kuti mitundu yosiyanasiyana ya ndondomeko yoyendetsera zowonjezera ikhoza kuwonetsedwa ndizing'onozing'ono. Ngakhale chinenerocho chikugwiritsira ntchito matebulo awiri ogwiritsira ntchito, malamulo ambiri amatha kugwiritsidwa ntchito ndi limodzi la matebulo kukhala lochepa kapena opanda kanthu.
Pamene mukuwerenga zitsanzo zomwe ziri pansipa, ndizofunika kuzindikira kuti tebulo likuloledwa pamaso pa tebulo losatsutsika, kuti kufufuza kumathera pamene masewera amapezeka, ndipo mwayiwu umaperekedwa pamene palibe machesi amapezeka.
Zitsanzo zimagwiritsira ntchito mayina ndi mayina. Zingatheke kupyolera mwa kuphatikiza maadiresi ndi / kapena mauthenga a pa Intaneti / netmask, kuti achepetse zotsatira za zolephera zolemba posachedwa.
YAM'MBUYO YOTSATIRA
Pankhaniyi, mwayi wotsutsa umatsutsidwa mwachinsinsi. Makamu ovomerezeka okha omwe amaloledwa kufika.
Ndondomeko yosasintha (palibe kupeza) ikugwiritsidwa ntchito ndi fayilo yaing'ono yakukana:
/etc/hosts.deny: ALL: ALL
Izi zikukana utumiki wonse kwa onse ogwira ntchito, kupatula ngati ataloledwa kulumikizidwa ndi zolembera mu fayilo lololeza.
Makamu ogwiritsidwa ntchito ovomerezeka ali m'ndandanda yowalola. Mwachitsanzo:
/etc/hosts.allow: ALL: LOCAL @some_netgroup
ZONSE: .foobar.edu PAMENE terminalserver.foobar.edu
Lamulo loyamba limaloleza mwayi wochokera ku makamu ku madera akumeneko (palibe `. 'Mu dzina la alendo) ndi kwa mamembala a some_netgroup netgroup. Lamulo lachiwiri limaloleza mwayi wochokera kwa onse ogwira ntchito ku foobar.edu domain (onani chingwe chotsogolera), kupatulapo terminalserver.foobar.edu .
KULUKA KWAMBIRI
Pano, kulumikizidwa kumaperekedwa ndi chosasintha; Magulu omveka bwino omwe akutsutsidwa ndiwotsutsidwa.
Ndondomeko yosasinthika (kulumikizidwa kwapatsidwa) imapangitsa fayilo lololeza kuti likhale lopanda kanthu kotero kuti likhoza kuchotsedwa. Maofesi osadziwika omwe ali ovomerezeka amapezeka mu fayilo lokana. Mwachitsanzo:
/etc/hosts.deny: ALL: some.host.name, .some.domain
ZONSE ZONSE mu.fingerd: other.host.name, .other.domain
Lamulo loyamba likukana amithenga ena ndi madera mautumiki onse; lamulo lachiwiri likulolabe zopempha zazing'ono kuchokera ku makamu ena ndi madera.
ZINTHU ZOBWINO
Chitsanzo chotsatira chiloleza mafupipafupi kuchokera kuzipangizo zamakono ku madera akumeneko (onetsetsani dothi lotsogolera). Zopempha kuchokera kumakamu ena aliwonse amakanidwa. M'malo mwa fayilo yofunsidwa, kufufuza kwadongosolo kumatumizidwa kwa woyipa wakukhumudwitsa. Zotsatira zimatumizidwa kwa wopambana.
/etc/hosts.allow:
mu.tftpd: LOCAL, .my.domain /etc/hosts.deny: in.tftpd: ALL: spawn (/ ena / malo / security_finger -l @% h | \ / usr / ucb / mail -s% d-% h root) &Lamulo labwino_lolemba limabwera ndi tcpd wrapper ndipo liyenera kuikidwa pamalo abwino. Imalepheretsa kuwonongeka kotheka kuchokera ku deta yomwe imatumizidwa ndi seva ya kutali chala. Zimapereka chitetezo chabwino kuposa lamulo lachimake chala.
Kuwonjezeka kwa% h (kasitomala ogwira ntchito) ndi% d (dzina lakutumiki) kumatsatiridwa mu gawo la malamulo a shell.
Chenjezo: musati musamangidwe ndi booby pa daemon yanu, pokhapokha ngati muli okonzeka kuzipinda zazing'ono zazing'ono.
Pazithunzithunzi za firewall zoterezi zimatha kunyamulidwa kwambiri. Maofesi omwe amagwiritsa ntchito makina othandizira amtunduwu amangopereka maulendo ang'onoang'ono omwe amapereka kunja kwa dziko lapansi. Mautumiki ena onse akhoza "kugulidwa" monga chitsanzo chapamwamba. Chotsatira ndicho dongosolo labwino kwambiri lochenjeza.
Chofunika: Gwiritsani ntchito lamulo la munthu ( % munthu ) kuti muwone momwe lamulo likugwiritsira ntchito pa kompyuta yanu.
Nkhani Zina