I-Bro Security Suite yinkqubo enamandla kunye neguquguqukayo yokufumana inethiwekhi kwiLinux. Isebenza ngokusebenza ngasemva, ukuhlalutya kunye nokungena kwitrafikhi.
Bro yinkqubo enamandla ethi, ukongeza ekusebenzeni kwayo ekunikezeleni ngaphandle kwebhokisi, ikwabonelela ngokuguquguquka kokwenza ukuba uhlalutyo lube semxholweni.
Ngokugxila ekubekeni iliso kukhuseleko lwenethiwekhi, I-Bro ikwabonelela ngeqonga elibanzi lohlalutyo ngokubanzi lokugcwala kwenethiwekhi.
Insiza inomxholo ocebileyo, ovulekileyo, kwaye uyanconywa ngabantu abaninzi kuluntu lwezokhuseleko ngenxa yemvelaphi evulekile kunye nokusebenza kakuhle.
Sebenzisa isixhobo sokhuseleko lwenethiwekhi ye-Bro, uyakufuna ikhompyuter ene-2GB ye-RAM ubuncinci.
Ngexesha lofakelo lwenxalenye yesifundo, siza kubona ukuba silungiselela njani isuti yokhuseleko lwe-Bro ku-Ubuntu, njengoko uninzi lwabantu lusebenzisa iimfuno zabo.
Oko kwathiwa, imiyalelo yofakelo ayichazwanga kwi-Ubuntu, kwaye isixhobo seBro sinokusebenza phantse kuyo nayiphi na inkqubo yokusebenza kweseva yeLinux kwaye umphuhlisi ubonelela ngemiyalelo kulo lonke unikezelo olukhulu.
Uqwalaselo lweGeoIP
Isixhobo sokhuseleko lwenethiwekhi I-Bro ifuna idathabheyisi yeedilesi ze-IP ukukhangela iinjongo zokhuseleko, Ke ngoko, ngaphambi kokuzama ukufaka isoftware ye-Bro, kuya kufuneka ukhuphele iifayile zedatha ye-IPv4 kunye ne-IPv6 GeoIP.
Ke oku siza kuvula itheminali nge-Ctrl + Alt + T kwaye kuyo siza kwenza le miyalelo ilandelayo:
wget http://geolite.maxmind.com/download/geoip/database/GeoLiteCity.dat.gz wget http://geolite.maxmind.com/download/geoip/database/GeoLiteCityv6-beta/GeoLiteCityv6.dat.gz
Ngoku ukukhuphela kwenziwe, siya kuqhubeka nokukhupha idatha kwezi fayile nge:
gzip -d GeoLiteCity.dat.gz gzip -d GeoLiteCityv6.dat.gz
Emva koku Kuya kufuneka sibeke isiseko sedatha se-GeoIP kwi / usr / share / GeoIP / kwifolda. Singakwenza oku ngokwenza lo mthetho ulandelayo:
sudo mv GeoLiteCity.dat /usr/share/GeoIP/GeoIPCity.dat sudo mv GeoLiteCityv6.dat /usr/share/GeoIP/GeoIPCityv6.dat
Ukufaka isixhobo sokhuseleko seBro kwi-Ubuntu nakwiziphumo
Ukwenza ufakelo lwe-Bro kwinkqubo, iya kwenziwa ngokungagqibekanga ku / khetha isikhombisi senkqubo kwaye ukongeza kuloo Kuya kufuneka senze ukuba indawo yokugcina izinto iphela.
Kuqala siza kwenza indawo yokugcina izinto ngalo myalelo ulandelayo:
sudo add-apt-repository universe
Sihlaziya uluhlu lwethu lweephakeji nge:
sudo apt update
Kwaye emva koko siya kuqhubeka nokufaka iphakheji ye-Bro kwinkqubo yethu ngalo myalelo ulandelayo:
sudo apt install bro bro-aux bro-common bro-pkg broctl
Uqwalaselo lweBro
Ukuze usebenzise isixhobo sokhuseleko lwenethiwekhi ye-Bro, kuyakufuneka uqwalasele ikhadi lomnatha oza kulisebenzisa.
Ngokuzenzekelayo, usetyenziso luqwalaselwe ukusebenzisa "i-Eth0".
Nangona esi sixhobo kunokwenzeka ukuba ayisosixhobo esifanelekileyo senethiwekhi kuninzi lwenu, kuya kufuneka nisitshintshe ngokuhlela ifayile ye-node.cfg.
Ukufumana isixhobo sakho senethiwekhi, vele usebenzise lo myalelo:
ifconfig
Kwimeko yam nakwininzi lenu, ujongano lwenethiwekhi onayo yinto efana nale:
enp2s0**
Nangona inokwahluka, ukuchonga oku, njengoko ubona emfanekisweni kubonakala ngoluhlobo:
Nje ukuba ujongano lwakho lwenethiwekhi luchongiwe, ngoku qhubeka ukuyitshintsha ngalo myalelo ulandelayo:
sudo nano /etc/bro/node.cfg
Ngaphakathi kwifayile Kuya kufuneka bafumane umgca othi »interface = eth0 ″ kwaye benze utshintsho oluhambelanayo ujongano onalo.
Emva koko kufuneka bagcine ifayile yoqwalaselo ngokucinezela Ctrl + O.
Cwangcisa uluhlu lwe-IP
Ngoku ujongano lwenethiwekhi luqwalaselwe iBro, Kuya kufuneka baqwalasele uluhlu lwe-IP lwenkqubo yokujonga.
sudo nano /etc/bro/networks.cfg
Njengoko ulayisha iifayile zenethiwekhi.cfg, uya kubona eminye imizekelo emiselweyo. Sula oku kungagqibekanga kwaye ubeke endaweni yazo ngedilesi ye-IP yekhadi lenethiwekhi elibekwe ngaphambili.
Kwimeko yam yinto efana no-192.168.xxx.x / 24 kwi-IPv4 nakwi-IPv6 xxxx: xxxx: xxxx: xxxx: xxxx: xx: xxxx / 64
Inyathelo lokuzikhethela, ngu Lungiselela idilesi ye-imeyile apho baya kufumana khona izilumkiso ze-Bro, kuba kufuneka bahlele ifayile:
sudo nano /etc/bro/broctl.cfg
Kwaye kufuneka bajonge icandelo le "MailTo" kwaye apha baya kuyimisela imeyile oyifunayo. Yenziwe ukuba kufuneka sivule iBro Shell nge:
sudo broctl
Kanye kwigobolondo, yisebenzise ukumisela ifayile yoqwalaselo emiselweyo:
install
Emva kokwenza umyalelo wokufaka, qala inkonzo nge:
deploy
Ukuphuma kwigobolondo, chwetheza nje:
exit
Ngelixa uyekisa inkonzo chwetheza nje:
stop