Xiv bob. Tizim xavfsizligi (firewall)

$ sudo cp /etc/ipsec.conf

Quyidagi konfiguratsiyani faylga nusxalash va joylashtirishni bajaramiz:
config setup
charondebug="all"
uniqueids=yes
conn prodgateway-to-devgateway
type=tunnel
auto=start
keyexchange=ikev2
authby=secret
left=10.20.20.3
leftsubnet=10.0.2.15/24
right=10.20.20.1
rightsubnet=192.168.0.101/24
ike=aes256-sha1-modp1024!
esp=aes256-sha1!
aggressive=no
keyingtries=%forever
ikelifetime=28800s
lifetime=3600s
dpddelay=30s
dpdtimeout=120s
dpdaction=restart
Qo’shimcha ma’lumot olish uchun ipsec.conf buyrug’idan foydalanamiz:
$ man ipsec.conf
Nazorat savollari:

1. 
   Tizim xavfsizligi nima?
   
2. 
   Firewall sozlamalari qanday amalga oshiriladi?
   
3. 
   IPsec funksional imkoniyatlari qanday?
   
4. 
   Qaysi opretasion tizimlari uchun IPSecni qo’llash mumkin?