Difference between revisions of "Firewalls/zh-cn"

Firewalls/zh-cn (view source)

Revision as of 17:04, 10 December 2021

70 bytes removed , 2 years ago

Created page with "{{warning|iptables.service 和 ufw.service 是冲突的，不要同时启用他们}}"

Yubo

14

edits

@@ Line 2: / Line 2: @@
 __TOC__
-=Overview=
+==绪论==
 建议您运行本地防火墙，即使您已经处于网络防火墙的保护之下。本地防火墙将保护你免受内网中威胁的影响。
-=UFW=
+==不复杂的防火墙（Uncomplicated FireWall）==
-UFW stands for Uncomplicated FireWall, and is a program for managing a netfilter firewall. It provides a command line interface and aims to be uncomplicated and easy to use.  UFW is far simpler than iptables and a good place to start unless you have very specialized needs.
+UFW表示简单的防火墙，作为一个对netfilter防火墙的的包装。它提供了一个命令行界面，旨在简单易用。UFW远比iptables更加简单；除非你有特殊需求，使用UFW是最佳选择。
-==Installing UFW==
+==安装UFW==
-You can install the {{ic|ufw}} package using you favorite package manager or the command:
+您可以使用任何包管理器安装UFW,如 pamac install ufw
- pamac install ufw
-Once UFW is installed you need to start and enable it using the commands:
+一旦UFW安装好了，您需要使用一下命令启动您的防火墙：
- sudo systemctl enable ufw.service
+sudo systemctl enable ufw.service
- sudo ufw enable
+sudo ufw enable
-{{warning|Don't enable both iptables.service and ufw.service}}
+{{warning|iptables.service 和 ufw.service 是冲突的，不要同时启用他们}}
-==Adding Rules==
+==添加规则==
-To view the current configuration you can use the command {{ic|ufw status}}.  Here is what it looks like in a new install:
+想要看见目前的设置，可以输入 {{ic|ufw status}}。 如果您是第一次安装，命令行中应当有如下输出：
 <pre>
 sudo ufw status verbose
@@ Line 38: / Line 37: @@
-This indicates that it will block all incoming traffic and allow all outgoing traffic.  This is a good starting point for most desktop systems.  However, often we will want to allow some incoming traffic.  This can be done with the command {{ic|ufw allow}}.  For example, if we want to allow incoming ssh traffic so we can connect to the machine from other machines on the network we could use the command:
+这表示它将阻止所有传入流量并允许所有传出流量。这在大多数情况下是一个很好的起点。但是，您通常希望允许一些传入的流量。这可以通过命令{{ic | UFW允许}}来完成。例如，如果您想要允许传入的SSH流量，所以您可以从网络上的其他机器连接到这台机器，您可以使用：
- sudo ufw allow ssh
+sudo ufw allow ssh