Ungayifihla njani i-DNS yakho Ngaphandle kokuchukumisa iRouter yakho nge-DoH: Isikhokelo esiGqibeleleyo

¿Uyifihla njani i-DNS yakho ngaphandle kokuchukumisa i-router yakho usebenzisa i-DNS ngaphezulu kwe-HTTPS? Ukuba unexhala lokuba ngubani onokubona ukuba zeziphi iiwebhusayithi oqhagamshela kuzo, Imibuzo yeSixokelelwano seDomain efihliweyo nge-DNS ngaphezulu kwe-HTTPS Yenye yeendlela ezilula zokwandisa ubumfihlo bakho ngaphandle kokulwa nomzila wakho. Nge-DoH, umguquleli oguqula i-domain kwiidilesi ze-IP uyeka ukuhamba kwindawo ecacileyo kwaye uhamba ngetonela ye-HTTPS.

Kwesi sikhokelo uya kufumana, ngolwimi oluthe ngqo kwaye ngaphandle kwejargon eninzi kakhulu, Yintoni kanye kanye i-DoH, yohluke njani kwezinye iinketho ezifana ne-DoT, uyenza njani ukuba isebenze kwizikhangeli kunye neenkqubo zokusebenza (kubandakanya iWindows Server 2022), uqinisekisa njani ukuba iyasebenza ngokwenene, iiseva ezixhaswayo, kwaye, ukuba uziva ulikroti, nokuba ungaseta njani esakho isicombululi seDoH. Yonke into, ngaphandle kokuchukumisa i-router…ngaphandle kwecandelo lokuzikhethela kwabo bafuna ukuyiqwalasela kwi MikroTik.

Yintoni i-DNS ngaphezulu kwe-HTTPS (DoH) kwaye kutheni unokukhathalela

Xa uchwetheza kwindawo (umzekelo, Xataka.com) ikhomputha ibuza umlungisi we-DNS ukuba yintoni na i-IP yayo; Le nkqubo ikholisa ukuba kumbhalo ocacileyo Kwaye nabani na okunethwekhi yakho, umboneleli wakho we-Intanethi, okanye izixhobo eziphakathi unokuyikroba okanye ayenze. Lo ngundoqo we-DNS yakudala: iyakhawuleza, yonke indawo… kwaye ibonakala kubantu besithathu.

Kulapho i-DoH ingena khona: Ihambisa loo mibuzo ye-DNS kunye neempendulo kwitshaneli enye efihliweyo esetyenziswa yiwebhu ekhuselekileyo (HTTPS, port 443)Isiphumo sesokuba abasahambi “ebaleni,” kuncitshiswa ukubakho kobuntlola, ukuqweqwediswa kwemibuzo, kunye nohlaselo oluthile lomntu ophakathi. Ngaphezu koko, kwiimvavanyo ezininzi I-latency ayibi mandundu kakhulu kwaye ingaphuculwa enkosi kulungiselelo lothutho.

Una ventaja clave es que I-DoH inokuvulwa kwinqanaba lesicelo okanye lenkqubo, ke akunyanzelekanga ukuba uxhomekeke kumphathi wakho okanye umzila ukwenza nantoni na. Oko kukuthi, unokuzikhusela "ukusuka kwisiphequluli ngaphandle," ngaphandle kokuchukumisa naziphi na izixhobo zenethiwekhi.

Kubalulekile ukwahlula i-DoH kwi-DoT (i-DNS ngaphezulu kwe-TLS): I-DoT ifihla i-DNS kwizibuko 853 ngqo kwi-TLS, ngelixa i-DoH iyidibanisa kwi-HTTP(S). I-DoT ilula kwithiyori, kodwa Kunokwenzeka ukuba ivalwe ngeefirewall esika amazibuko angaqhelekanga; I-DoH, ngokusebenzisa i-443, ikhusela ngcono ezi zithintelo kwaye inqanda uhlaselo olunyanzelwayo "lokubuyisela umva" kwi-DNS engafihlwanga.

Kwimfihlo: Ukusebenzisa i-HTTPS akuthethi ukuba iikuki okanye ukulandela umkhondo kwi-DoH; imigangatho icebisa ngokuchasene nokusetyenziswa kwayo Kulo mongo, i-TLS 1.3 iphinda inciphise isidingo sokuqalisa kwakhona iiseshoni, ukunciphisa ulungelelwaniso. Kwaye ukuba unenkxalabo malunga nokusebenza, i-HTTP/3 ngaphezulu kwe-QUIC inokubonelela ngophuculo olongezelelweyo ngokuphindaphinda imibuzo ngaphandle kokuthintela.

Isebenza njani i-DNS, imingcipheko eqhelekileyo, kunye nalapho i-DoH ingena khona

Inkqubo yokusebenza ngokuqhelekileyo ifunda ukuba yeyiphi i-solventer emayisetyenziswe nge-DHCP; Ekhaya uqhele ukusebenzisa ii-ISP's, eofisini, inethiwekhi yenkampani. Xa olu nxibelelwano lungafihlwanga (UDP/TCP 53), nabani na kwi-Wi-Fi yakho okanye kwindlela angabona imimandla ebuzwayo, afake iimpendulo ezingeyonyani, okanye aphinde akuthumele kuphendlo xa isizinda singekho, njengoko abanye abaqhubi benza.

Uhlalutyo oluqhelekileyo lwe-traffic lubonisa izibuko, i-IPs yomthombo / indawo yokuya kuyo, kunye ne-domain ngokwayo isonjululwe; Oku akuvezi nje imikhwa yokubrawuza, ikwenza kube lula ukunxibelelanisa uqhagamshelo olulandelayo, umzekelo, kwiidilesi ze-Twitter okanye ezifanayo, kwaye ufumanise ukuba ngawaphi amaphepha owandwendwele.

Nge-DoT, umyalezo we-DNS ungena ngaphakathi kwe-TLS kwi-port 853; kunye no-DoH, Umbuzo we-DNS ufakwe kwisicelo esiqhelekileyo se-HTTPS, ekwavumela ukusetyenziswa kwayo ngezicelo zewebhu ngokusebenzisa i-APIs yesikhangeli. Zombini iindlela zabelana ngesiseko esifanayo: uqinisekiso lomncedisi kunye nesatifikethi kunye nomjelo ofihliweyo wokuya esiphelweni.

Ingxaki ngamazibuko amatsha kukuba iqhelekile ezinye iinethiwekhi block 853, isoftware ekhuthazayo ukuba “ibuyele umva” kwi-DNS engafihlwanga. I-DoH iyakunciphisa oku ngokusebenzisa i-443, eqhelekileyo kwiwebhu. I-DNS/QUIC ikhona njengenye inketho ethembisayo, nangona ifuna i-UDP evulekileyo kwaye ayisoloko ikhona.

Naxa uguqulela uthutho ngendlela entsonkothileyo, lumka ngento enye: Ukuba isicombululi sixoka, i-cipher ayilungi.Ngenxa yale njongo, i-DNSSEC ikhona, evumela ukuqinisekiswa kokuthembeka kwempendulo, nangona ukwamkelwa kwayo akubanzi kwaye abanye abalamli baphula ukusebenza kwayo. Nangona kunjalo, i-DoH ithintela amaqela esithathu endleleni ekubeni akrobe okanye aphazamise imibuzo yakho.

Yisebenze ngaphandle kokuchukumisa i-router: izikhangeli kunye neenkqubo

Eyona ndlela icacileyo yokuqalisa kukwenza i-DoH isebenze kwisikhangeli sakho okanye kwinkqubo yokusebenza. Le yindlela oyikhusela ngayo imibuzo kwiqela lakho ngaphandle kokuxhomekeka kwi-firmware ye-router.

Ugoogle chrome

Kwiinguqulelo zangoku ungaya kuzo chrome://settings/security kwaye, phantsi "Sebenzisa i-DNS ekhuselekileyo", vula ukhetho kwaye ukhethe umboneleli (umnikezeli wakho wangoku ukuba uxhasa i-DoH okanye enye kuluhlu lukaGoogle olufana ne-Cloudflare okanye iGoogle DNS).

Kwiinguqulelo zangaphambili, iChrome ibonelele ngotshintsho lokulinga: uhlobo chrome://flags/#dns-over-https, khangela "Khusela ukukhangela kwe-DNS" kunye yitshintshe ukusuka kokuMiselweyo ukuya kwiVunyiwe. Qala kwakhona isikhangeli sakho ukuze usebenzise utshintsho.

Microsoft Edge (Chromium)

I-Edge esekwe kwiChromium ibandakanya ukhetho olufanayo. Ukuba uyayifuna, yiya ku edge://flags/#dns-over-https, fumana "Khusela ukukhangela kwe-DNS" kunye yenze kwi VuliweKwiinguqulelo zangoku, ukuvula kukwafumaneka kwiisetingi zakho zabucala.

IMozilla Firefox

Vula imenyu (phezulu ekunene)> Useto> Ngokubanzi> skrolela ezantsi “Useto lweNethiwekhi”, cofa ku Uqwalaselo kwaye umaka "Yenza i-DNS isebenze ngaphezulu kwe-HTTPSUnokukhetha kubaboneleli abanje Cloudflare okanye NextDNS.

Ukuba ukhetha ulawulo oluhle, kwi about:config lungisa network.trr.mode: 2 (onethuba) isebenzisa i-DoH kwaye yenza umva ukuba ayifumaneki; Isi-3 (esingqongqo) sigunyazisa i-DoH kwaye iyasilela ukuba akukho nkxaso. Ngemo engqongqo, chaza isilungisi se-bootstrap njenge network.trr.bootstrapAddress=1.1.1.1.

I-Opera

Ukusukela kwinguqulo 65, iOpera ibandakanya ukhetho lokuya yenza i-DoH isebenze nge-1.1.1.1. Iza ingasebenzi ngendlela engagqibekanga kwaye isebenza ngendlela ethatha ithuba: ukuba i-1.1.1.1:443 iyaphendula, iyakusebenzisa i-DoH; ngenye indlela, iwela umva kwisisombululi esingafihlwanga.

Windows 10/11: I-AutoDoH kunye neRegistry

IiWindows zingenza ngokuzenzekelayo i-DoH ngezisombululi ezithile ezaziwayo. Kwiinguqulelo ezindala, unokunyanzela ukuziphatha ukusuka kwiRegistry: run regedit kwaye uye e HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters.

Yenza i-DWORD (32-bit) ebizwa EnableAutoDoh ngexabiso 2 y Qala kwakhona ikhompyuthaOku kuyasebenza ukuba usebenzisa iiseva ze-DNS ezixhasa i-DoH.

Iseva yeWindows 2022: Umxhasi we-DNS one-DoH yasekhaya

Umxhasi we-DNS owakhelwe-ngaphakathi kwi-Windows Server 2022 ixhasa i-DoH. Uya kukwazi ukusebenzisa i-DoH kuphela ngeeseva ezikuluhlu lwabo “lwe-DoH eyaziwayo”. okanye ukuba wongeze ngokwakho. Ukuyiqwalasela kujongano lomzobo:

1. Vula iiSetingi zeWindows > Inethiwekhi kunye ne-Intanethi.
2. Ngena i-Ethernet kwaye ukhethe ujongano lwakho.
3. Kwisikrini senethiwekhi, skrolela ezantsi ukuya Configuración de DNS kwaye ucinezele Hlela.
4. Khetha u-“Manual” ukuchaza iiseva ezikhethwayo nezizezinye.
5. Ukuba ezo dilesi zikuluhlu olwaziwayo lwe-DoH, iya kwenziwa ukuba isebenze "Uguqulelo oluKhethekileyo lweDNS" ngeendlela ezintathu:
   • Uguqulelo oluntsonkothileyo kuphela (DNS ngaphezulu kweHTTPS): Nyanzela i-DoH; ukuba umncedisi akaxhasi i-DoH, akuyi kubakho sisombululo.
   • Khetha uguqulelo oluntsonkothileyo, vumela ukungafihlwa: Izama i-DoH kwaye ukuba ayiphumelelanga, iwela emva kwi-DNS yakudala engafihlwanga.
   • Ayibhalwanga ngokuntsonkothileyo kuphela: Isebenzisa umbhalo ocacileyo weDNS.
6. Gcina ukuze ufake utshintsho.

Unokubuza kwaye wandise uluhlu lwabasombululi be-DoH abaziwayo usebenzisa i-PowerShell. Ukubona uluhlu lwangoku:

Get-DNSClientDohServerAddress

Ukubhalisa iseva entsha eyaziwayo ye-DoH ngetemplate yakho, sebenzisa:

Add-DnsClientDohServerAddress -ServerAddress "<IP-del-resolutor>" -DohTemplate "<URL-plantilla-DoH>" -AllowFallbackToUdp $False -AutoUpgrade $True

Qaphela ukuba i cmdlet Set-DNSClientServerAddress ayizithinti ukusetyenziswa kwe-DoH; uguqulelo oluntsonkothileyo luxhomekeke ekubeni ezo dilesi zikuluhlu lweeseva ze-DoH ezaziwayo. Awukwazi ngoku ngoku uqwalasele iDoH yeWindows Server 2022 DNS umxhasi osuka kwiWindows Admin Centre okanye nge sconfig.cmd.

Umgaqo-nkqubo weQela kwi-Windows Server 2022

Kukho umyalelo othiwa "Misela i-DNS ngaphezulu kwe-HTTPS (DoH)" en Configuración del equipo\Directivas\Plantillas administrativas\Red\Cliente DNS. Xa yenziwe yasebenza, ungakhetha:

• Vumela i-DoH: Sebenzisa i-DoH ukuba iseva iyayixhasa; kungenjalo, umbuzo uncrypted.
• Vala i-DoH: ayisebenzisi i-DoH.
• Ifuna i-DoH: inyanzelisa i-DoH; ukuba akukho nkxaso, isisombululo siyasilela.

Kubalulekile: Musa ukwenza “Funa i-DoH” kwiikhompyuter ezidityaniswe nedomeyiniUvimba weefayili oSebenzayo uxhomekeke kwi-DNS, kwaye indima ye-Windows Server DNS ayixhasi imibuzo ye-DoH. Ukuba ufuna ukukhusela i-DNS traffic ngaphakathi kwendawo ye-AD, cinga ukusebenzisa Imithetho ye-IPsec phakathi kwabathengi kunye nabasombululi bangaphakathi.

Ukuba unomdla wokwalathisa kwakhona imimandla ethile kwizisombululi ezithile, ungasebenzisa i I-NRPT (Itheyibhile yoMgaqo-nkqubo weSisombululo segama). Ukuba iseva yendawo ikuluhlu olwaziwayo lwe-DoH, ezo thethwano iya kuhamba nge-DoH.

Android, iOS kunye neLinux

Kwi-Android 9 nangaphezulu, ukhetho DNS privado ivumela i-DoT (kungekhona i-DoH) ngeendlela ezimbini: “Okuzenzekelayo” (okusebenzisa ithuba, kuthatha isisombululi senethiwekhi) kunye no-“Strict” (kufuneka uchaze igama lomamkeli elingqinisiswe sisatifikethi; ii-IP ezithe ngqo azixhaswa).

Kwi-iOS kunye ne-Android, i-app 1.1.1.1 I-Cloudflare yenza i-DoH okanye i-DoT ikwimowudi engqongqo isebenzisa i-VPN API ukuthintela izicelo ezingafihlwanga kwaye zigqithisele ngomjelo okhuselekileyo.

KwiLinux, systemd-resolved ixhasa i-DoT ukususela kwi-systemd 239. Ivaliwe ngokungagqibekanga; ibonelela ngemo ethatha ithuba ngaphandle kokuqinisekisa iziqinisekiso kunye nemowudi engqongqo (ukususela kwi-243) kunye nokuqinisekiswa kwe-CA kodwa ngaphandle kwe-SNI okanye ukuqinisekiswa kwegama, yenza buthathaka imodeli yokuthembana ngokuchasene nabahlaseli endleleni.

KwiLinux, macOS, okanye Windows, ungakhetha imowudi engqongqo yeklayenti ye-DoH efana cloudflared proxy-dns (ngokungagqibekanga isebenzisa 1.1.1.1, nangona uyakwazi ukuchaza imisinga ezinye iindlela).

Iiseva ezaziwayo ze-DoH (iWindows) kunye nendlela yokongeza ezinye

Iseva yeWindows ibandakanya uluhlu lwezisombululo ezaziwa ngokuxhasa i-DoH. Ungayijonga ngePowerShell kwaye wongeze amangeniso amatsha ukuba uyafuna.

Ezi zezona abancedisi be-DoH abaziwayo ngaphandle kwebhokisi:

uMnini weSeva	Iidilesi ze-IP zeseva ye-DNS
I-Cloudflare	1.1.1.1 1.0.0.1 2606:4700:4700::1111 2606:4700:4700::1001
Uphando	8.8.8.8 8.8.4.4 2001:4860:4860::8888 2001:4860:4860::8844
I-Quad9	9.9.9.9 149.112.112.112 2620:fe::fe 2620:fe::fe:9

Ngokuba ver la lista, baleka:

Get-DNSClientDohServerAddress

Ngokuba yongeza isilungisi esitsha se-DoH kunye netemplate yaso, isebenzisa:

Add-DnsClientDohServerAddress -ServerAddress "<IP-del-resolutor>" -DohTemplate "<URL-plantilla-DoH>" -AllowFallbackToUdp $False -AutoUpgrade $True

Ukuba ulawula izithuba zamagama ezininzi, i-NRPT iya kukuvumela ukuba wenze njalo lawula imimandla ethile kwisisombululi esithile esixhasa i-DoH.

Ijongwa njani ukuba i-DoH iyasebenza

Kwibhrawuza, ndwendwela https://1.1.1.1/help; apho uya kubona ukuba itrafikhi yakho isebenzisa i-DoH ngo-1.1.1.1 okanye hayi. Luvavanyo olukhawulezayo ukubona ukuba ukwesiphi isimo.

In Windows 10 (uguqulelo luka-2004), unokujonga kwitrafikhi yeDNS yakudala (izibuko 53) nge pktmon ukusuka kwikhonsoli eyodwa:

pktmon filter add -p 53
pktmon start --etw -m real-time

Ukuba ukuhamba rhoqo kweepakethi kubonakala kwi-53, kunokwenzeka ukuba usasebenzisa iDNS engafihlwanga. Khumbula: iparameter --etw -m real-time ifuna u-2004; kwiinguqulelo zangaphambili uya kubona impazamo "engaziwayo iparamitha".

Ukuzikhethela: yilungise kwi-router (MikroTik)

Ukuba ukhetha ukubeka embindini ufihlo kwirutha, unokwenza lula i-DoH kwizixhobo zeMikroTik. Okokuqala, ngenisa ingcambu yeCA eliza kusayinwa ngumncedisi oza kudibanisa kuye. Kwi-Cloudflare unokukhuphela DigiCertGlobalRootCA.crt.pem.

Layisha ifayile kwi-router (ngokuyidonsa kwi "Files"), kwaye uye ku Inkqubo > Izatifikethi > Thatha ngaphandle ukuyibandakanya. Emva koko, qwalasela i-DNS ye-router kunye ne Cloudflare DoH URLsNje ukuba isebenze, i-router iya kubeka phambili unxibelelwano olufihliweyo ngaphezu kwe-DNS engafihlwanga engafihlwanga.

Ukuqinisekisa ukuba yonke into ilungile, ndwendwela 1.1.1.1/uncedo ukusuka kwikhompyuter emva kwerouter. Unokwenza yonke into nge-terminal kwi-RouterOS ukuba ukhetha.

Ukusebenza, ubumfihlo obongezelelweyo kunye nemida yendlela yokusebenza

Xa kufikwa kwisantya, iimetriki ezimbini zibalulekile: ixesha lesisombululo kunye nomthwalo wephepha wokwenyani. Iimvavanyo ezizimeleyo (ezifana noSamKnows) Bagqiba ukuba umahluko phakathi kwe-DoH kunye ne-DNS yakudala (Do53) ingumda kumacala omabini; ekusebenzeni, akufanele uqaphele nakuphi na ukucotha.

I-DoH ifihla "umbuzo we-DNS," kodwa kukho iimpawu ezininzi kwinethiwekhi. Nokuba ufihla i-DNS, i-ISP inokuthatha izinto ngokusebenzisa imidibaniso ye-TLS (umzekelo, i-SNI kwezinye iimeko zelifa) okanye ezinye izikhondo. Ukuphucula ubumfihlo, unokujonga i-DoT, i-DNSCrypt, i-DNSCurve, okanye abathengi abanciphisa imetadata.

Ayiyiyo yonke inkqubo yendalo exhasa i-DoH okwangoku. Uninzi lwabasombululi belifa aluboneleli ngale nto., ukunyanzelisa ukuthembela kwimithombo yoluntu (Cloudflare, Google, Quad9, njl.). Oku kuvula ingxoxo malunga nokubekwa kwindawo enye: ukugxila kwimibuzo kubadlali abambalwa kubandakanya ubumfihlo kunye neendleko zokuthembela.

Kwiimeko zeshishini, i-DoH inokungqubana nemigaqo-nkqubo yokhuseleko esekelwe kuyo DNS esweni okanye ukuhluza (i-malware, ulawulo lwabazali, ukuthotyelwa komthetho). Izisombululo ziquka i-MDM/Group Policy ukuseta i-DoH/DoT resolutionr kwimowudi engqongqo, okanye idityaniswe nolawulo lwenqanaba lesicelo, oluchaneke ngakumbi kunokuthintela okusekwe kwisizinda.

I-DNSSEC incedisana ne-DoH: I-DoH iyalukhusela uthutho; I-DNSSEC iqinisekisa impenduloUkuthathwa komntwana ngowamkelo akulingani, kwaye ezinye izixhobo eziphakathi ziyayophula, kodwa umkhwa ulungile. Endleleni phakathi kwabasombululi kunye neeseva ezigunyazisiweyo, i-DNS ngokwesiko ihlala ingabhalwanga; sele kukho imifuniselo esebenzisa i-DoT phakathi kwabaqhubi abakhulu (umzekelo, 1.1.1.1 kunye neeseva ezigunyazisiweyo ze-Facebook) ukwandisa ukhuseleko.

Enye indlela ephakathi kukufihla kuphela phakathi i-router kunye nesisombululo, ukushiya uxhulumaniso phakathi kwezixhobo kunye ne-router engabhalwanga. Iluncedo kuthungelwano oluneengcingo olukhuselekileyo, kodwa alukhuthazwa kwiinethiwekhi ze-Wi-Fi ezivuliweyo: abanye abasebenzisi banokuhlola okanye baqhathe le mibuzo kwi-LAN.

Zenzele esakho isicombululi seDoH

Ukuba ufuna ukuzimela ngokupheleleyo, unokusebenzisa isicombululi sakho. Unbound + Redis (L2 cache) + Nginx yindibaniselwano edumileyo yokunikezela ngee-URL ze-DoH kunye nemimandla yokucoca enoluhlu oluzihlaziya ngokuzenzekelayo.

Esi sitaki sisebenza ngokugqibeleleyo kwiVPS ethobekileyo (umzekelo, umbindi omnye/2 iingcingo kusapho). Kukho izikhokelo ezinemiyalelo esele ilungele ukusetyenziswa, efana nale ndawo yokugcina: github.com/ousatov-ua/dns-filtering. Abanye ababoneleli beVPS banikezela ngeekhredithi ezamkelekileyo kubasebenzisi abatsha, ngoko unokuseta uvavanyo ngexabiso eliphantsi.

Ngomsombululi wakho wabucala, unokukhetha imithombo yakho yokucoca, uthathe isigqibo ngemigaqo-nkqubo yogcino kunye kuphephe ukubeka kwindawo enye imibuzo yakho kwiqela lesithathu. Ngembuyekezo, ulawula ukhuseleko, ukugcinwa, kunye nokufumaneka okuphezulu.

Phambi kokuvala, inqaku lokuthembeka: kwi-Intanethi, iinketho, iimenyu kunye namagama atshintsha rhoqo; ezinye izikhokelo ezindala ziphelelwe lixesha (Umzekelo, ukuya “kwiiflegi” kwiChrome akusafuneki kwiinguqulelo zamva nje.) Soloko ujonga isikhangeli sakho okanye amaxwebhu enkqubo.

Ukuba uyenzile ukuza kuthi ga ngoku, sele uyayazi into eyenziwa yi-DoH, ingena njani kwiphazili kunye ne-DoT kunye ne-DNSSEC, kwaye okona kubaluleke kakhulu, uyivula njani ngoku kwisixhobo sakho ukuthintela i-DNS ekuhambeni kwindawo ecacileyo. Ngokucofa okumbalwa kwisikhangeli sakho okanye uhlengahlengiso kwi-Windows (nakwinqanaba lomgaqo-nkqubo kwi-Server 2022) uya kuba nemibuzo entsonkothileyo; ukuba ufuna ukusa izinto kwinqanaba elilandelayo, ungahambisa ufihlo kwirutha yeMikroTik okanye wakhe esakho isicombululo. Undoqo kukuba, Ngaphandle kokuchukumisa irutha yakho, ungakhusela enye yezona ndawo zihletywayo malunga netrafikhi yakho namhlanje..