Binciken Nmap na danye ya kasa kan VPN amma haɗin -sT yana aiki?

Shafi yana lodawa ta hanyar rami yayin binciken tashar jiragen ruwa yana bayar da rahoton cewa uwar garke ba ta nan, kuma tunanin farko shi ne VPN yana toshe wani abu. Yawancin lokaci ba ya toshe wani sabon abu. Gwaje-gwajen biyu suna neman dama daban-daban daga tsarin aiki, kuma ɗaya ne kawai cikinsu yake buǙatar damar fakiti na danye. Gano wace dama ta kasa kafin ka taɓa ramin.

Raba damar daga ramin

Aikace-aikace na yau da kullum yana rōkōn kernel ya buɗe haɗin TCP, kuma kernel yana yin musafaha ba tare da wata dama ta musamman ba. Bincike na danye yana gina fakiti da kansa, wanda ke buǙatar soket danye ko direban ɗauka dangane da dandamali. Waɗannan tambayoyi ne na izini da direba, kuma suna wanzu ko an haɗa VPN ko a’a.

Wannan bambanci yana bayanin rashin daidaiton da aka saba. curl yana yin nasara domin hanyar soket tana aiki, yayin da binciken SYN ya kasa domin tsari ba zai iya buɗe soket danye a kan fuskar ramin ba. Hakanan yana bayanin yanayin akasin haka, inda bincike na danye ke bayar da rahoton an tace domin hanyar tana watsar da binciken yayin da hanyar aikace-aikacen ta kasance lafiya.

Babu ɗaya daga cikin sakamakon da ke bayanin sabis ɗin nesa. Dukansu suna bayanin hanya ɗaya a ƙarƙashin hanya ɗaya, don haka riƙe hanyar tare da ƙarshe.

Gudanar da gwajin haɗin a kan uwar garke ɗaya da aka amince

Zaɓi uwar garke ɗaya da aikinka ya ƙunsa, sannan yi amfani da yanayin da ba ya buǙatar dama ta danye. Manufar misali a nan ita ce 198.51.100.24, wurin rubutu da aka tanada don irin wannan misali.

Layi ɗaya, uwar garke ɗaya, tasha ɗaya, babu matakin ganowa:

nmap -sT -Pn -p 443 --unprivileged 198.51.100.24

-sT yana zaɓar cikakken haɗin TCP, don haka yana bin hanyar kernel ɗaya da aikace-aikace ke amfani da ita kuma ba ya buǙatar direban ɗauka. -Pn yana tsallake gano uwar garke; nmap har yanzu yana yin warwarewar matakin haɗi ga maƙasudai a ɓangaren gida, don haka tutar ba alkawarin zirga-zirgar farko ba ce. --unprivileged yana gaya wa nmap ya ɗauka cewa ba shi da haƙƙin danye ko saurara, wanda ke canza hanyar kuma ba ya ba da komai.

Karanta kowace tuta a matsayin canji ɗaya, ba gyara ba

Dauki kowace zaɓi a matsayin magana game da hanyar. Babu ɗaya daga -sT, -Pn ko --unprivileged da ke ƙara hanya, buɗe wutar bango ta nesa ko tabbatar da takardar shaida. Binciken haɗi kuma yana kammala musafaha na gaske wanda sabis ɗin ke rubutawa, don haka gwajin da aka amince da sharewar da ba a amince ba suna kama da juna daga uwar garke sai dai a girma da sauri. Tattara zaɓuɓɓuka har sai fitarwa ta canza shine yadda ake rubuta matsalar hanya a matsayin gano cibiyar sadarwa.

Lokacin da fitarwa ta ce a rufe, wani abu ya amsa da sake saiti, kuma wannan gano ne daban da shiru. Lokacin da fitarwa ta ce an tace, na’ura ta watsar da binciken ko amsarsa, kuma VPN na iya zama na bazata. Rubuta ainihin kalmomin, domin hukuncin matakin ganowa da gazawar matakin bincike suna nuni ga yadudduka daban-daban.

Idan da gaske ana buǙatar yanayin da ke da dama, mai dandamalin ne zai yanke shawara ko an tallafa wa damar, direba da tsarin fuska. Ɗga wannan kira ɗaya ba ya canza hanyarsa.

Tsaya kan sakamakon jigilar, sannan gwada sabis ɗin

Musafaha da aka kammala yana amsa tambaya ɗaya game da adireshi ɗaya, tasha, tushe da lokaci. Ba ya tabbatar da cewa bayan fage yana cikin lafiya, domin mai daidaita nauyi ko wakili na gaba zai iya karɓar haɗin yayin da aikace-aikacen da ke bayansa ya tsaya.

Bi shi da abokin ciniki na sabis ɗin kansa domin a lura da asalin TLS da halayen aikace-aikace a matsayin gaskiya daban-daban:

openssl s_client -connect 198.51.100.24:443 -servername staging.example.net </dev/null 2>/dev/null | openssl x509 -noout -subject -dates
curl -sS -o /dev/null -w '%{http_code}\n' https://staging.example.net/health

Wata al’ada tana riƙe sakamakon da amfani. Rubuta ainihin umarnin, adireshin tushen da ya yi amfani da shi da lokacin, domin sakamakon jigilar ba tare da wannan mahallin ba ba za a iya sake yin ko kwatanta shi ba.

Idan takardar shaidar ta ambaci uwar garke da ba ka yi tsammani ba, jigilar ta yi aiki kuma hanya ba ta taɓa zama matsala ba; laifin yana cikin ɓoyayyen ɓangaren gida ko DNS. Idan musafaha ya kasa, rubuta igiyar kuskuren gida maimakon yin gama-gari game da ramin. Riƙe bayanin iyaka kusa da sakamakon, domin na gaba yana buǙatar sanin wace hanya ce ta haifar da shi.