I-OpenSnitch, i-firewall ye-Linux ifinyelela enguqulweni yayo entsha engu-1.6

I-OpenSnitch

I-OpenSnitch ikuvumela ukuthi uqaphe ngokuhlanganyela umsebenzi wenethiwekhi wezinhlelo zokusebenza zabasebenzisi futhi uvimbele ithrafikhi yenethiwekhi engadingeki

Uhlobo olusha lwe I-OpenSnitch 1.6 isivele ikhishiwe Lokhu kukhishwa kufaka phakathi izithuthukisi ezahlukahlukene ekuhlanganisweni kwemvelo yedeskithophu, ukuphathwa kwama-node, ukulungiswa kweziphazamisi, nokunye okuningi.

Kulabo abangazi nge-OpenSnitch, kufanele wazi ukuthi lokhu Kuyitheku le-Little Snitch futhi lokhu, ngakolunye uhlangothi, i-firewall eyenzelwe i-Mac OS kuphela. i-fugcobo olukhulu ye-OpenSnitch landela izicelo ze-inthanethi eyenziwe izinhlelo zokusebenza umsebenzisi azifakile.

I-OpenSnitch ikuvumela ukuthi udale imithetho yokuthi yiziphi izinhlelo zokusebenza okufanele zivumele ukufinyelela ku-inthanethi nokuthi yiziphi okufanele zivinjelwe. Njalo lapho uhlelo lokusebenza olungenawo umthetho osebenzayo luzama ukungena kwi-Inthanethi, kuvela ibhokisi lengxoxo. Leli bhokisi lengxoxo linikeza inketho yokuvumela noma ukuvimba ukuxhumeka.

Ungathatha futhi isinqumo sokuthi ngabe lo mthetho omusha uyasebenza kunqubo, i-URL ngqo ezama ukufinyelela kusizinda, leso sibonelo, leso seshini, noma ingunaphakade.

Izici ezintsha eziphambili ze-OpenSnitch 1.6

Kule nguqulo entsha ye-OpenSnitch 1.6 singayithola izithuthukisi zokuphepha ezihlukahlukene esenziwe, esingagqamisa okusha inketho yokuphatha imithetho nezinqubomgomo zohlelo lwe-firewall kusuka ku-GUI, lapho ngokuyisisekelo isixhumi esibonakalayo sesithombe manje sinamandla okumisa imithetho yokuhlunga iphakethe yesistimu kanye nezinqubomgomo zokufinyelela. Ngokungeziwe ekubekeni imingcele ukuthi yiziphi izinhlelo zokusebenza ezingafinyelela i-inthanethi, manje usungakwazi ukumisa imithetho evamile yohlelo lokuvikela.

Olunye ushintsho olugqamayo kule nguqulo entsha yi izithuthukisi zokusekela zokuhlanganiswa ne izinkundla zokuphatha ukuphepha kwangaphandle (siem, ulwazi lwezokuphepha kanye nokuphathwa kwemicimbi) kanye nezinhlelo zokuqapha.

Kubuye kugqame indlela engcono nethembekile yokuthola amagama enqubo, izindlela nesithonjanakwezinhlelo zokusebenza, kanye nokuhlanganiswa okuthuthukisiwe nezixazululi zesistimu ye-DNS namalabhulali e-DNS yeklayenti.

Kungeziwe ukusekelwa kwemithetho yokuhlunga ethuthukisiwe ezicabangela izivumelwano ezintsha, ukuxhumana kwenethiwekhi, izimbobo zomthombo, namakheli e-IP.

Kwezinye izinguquko ezigqamile kule nguqulo entsha:

  • Ukwesekwa okwengeziwe kwemithetho yokungenisa nokuthekelisa ukuze kudluliselwe izilungiselelo kwamanye amasistimu kusetshenziswa isixhumi esibonakalayo esinezithombe.
  • Kwengezwe imenyu yokuphuma ukuze kuvalwe i-GUI.
  • Izithonjana ezingcono ku-GNOME/Fedora
  • Ukuthuthukiswa kwe-Wayland

Okokugcina, uma ungathanda ukwazi okwengeziwe ngakho, ungathintana nemininingwane ku isixhumanisi esilandelayo.

Ungayifaka kanjani i-OpenSnitch ku-Linux?

Njengezimfuneko kufanele sibe ne-Go efakwe kusistimu yethu futhi sichaze okuguquguqukayo kwe-$GOPATH. Usuvele uthembele kukho, manje ake sifake okunye okuncikile okudingekayo ekusebenzeni kwe-OpenSnitch ngaphakathi kwesistimu yethu.

Noma ngabe bangobani abasebenzisi be-Debian, Ubuntu nanoma yikuphi okuphuma kulokhu, Sizovula i-terminal futhi sizofaka lokhu kuncika ngomyalo olandelayo:

sudo apt-get install protobuf-compiler libpcap-dev libnetfilter-queue-dev python3-pip

Manje uma kunjalo Abasebenzisi be-RHEL, CentOS, Fedora noma okunye okuphuma kulokhu, ukuncika kukufaka ngomyalo olandelayo

sudo dnf -i protobuf-compiler libpcap-dev libnetfilter_queue-devel python3-pip

Ekugcineni, kulabo abananoma iyiphi inguqulo ye vulaSUSE efakiwe ingafaka lokhu kuncika ngomyalo olandelayo:

sudo zypper in protobuf-c libpcap-dev libnetfilter_queue python3-pip

Okokuqala sizoqeda lungisa ukuncika ngemiyalo elandelayo:

go get github.com/golang/protobuf/protoc-gen-go
go get -u github.com/golang/dep/cmd/dep
python3 -m pip install --user grpcio-tools

Ngokuncika okudingekayo ohlelweni, manje sizoqhubeka nokufaka lolu hlelo lokusebenza ngosizo lwemiyalo elandelayo:

go get github.com/evilsocket/opensnitch
cd $GOPATH/src/github.com/evilsocket/opensnitch

Ekugcineni siqhubekela phambili enze ukwakha isicelo:

make

sudo make install

Futhi siqala kabusha izinsizakalo nge:

sudo systemctl enable opensnitchd

Isikhathi sesifikile qala isevisi ye-OpenSnitch nge:

sudo service opensnitchd start

Siyaqhubeka sebenzisa lolu hlelo lokusebenza ngomyalo olandelayo:

opensnitch-ui

Ngenkathi kulabo abakhona Abasebenzisi be-Arch Linux, Manjaro noma yikuphi okuphuma ku-Arch Linux bazokwazi ukufaka i-OpenSnitch kusukela kunqolobane ye-AUR.

Ukufaka i-OpenSnitch esigungwini, sizothayipha okulandelayo:

yay -S opensnitch-git

Lapho uhlelo lokusebenza selufakiwe, ungasesha isiqalisi sayo kumenyu yakho yohlelo lokusebenza ukuze usiqhube.