Ungazi kanjani ukuthi iyiphi ikheli iseva ye-FTP eliyirekhoda ngempela

Umugqa welogi ukhombisa ikheli elilodwa. I-laptop ithwala ikheli lethanele, uxhumano lungaphuma ngomunye umkhondo, futhi ukuhlola kwesiphequluli okwenzile akufakazi lutho nge-FTP. Lezo zintathu zingahluka, futhi umugqa welogi urekhoda eyodwa yazo kuphela. Nquma ukuthi yiluphi uxhumano olubuzayo ngaphambi kokuqhathanisa noma yini.

Lezi zinyathelo zicabanga uphenyo olugunyaziwe olunesikhathi esinqunyiwe, hhayi ukubheka ukudluliswa komunye umuntu.

1. Nquma ukuthi yiluphi uxhumano olubuzayo

I-FTP isebenzisa izixhumano ezimbili. Uxhumano lokulawula luthwala imiyalo nezimpendulo, kuthi uxhumano lwedatha luthathe ifayela ngokwalo. Umcimbi wokungena ungowokuqala, umcimbi wokudlulisela ungowesibili, ngakho isikhathi esisodwa kulogi singaba nokubonwa okuvela emizileni emibili ehlukene yenethiwekhi. Bhala ukuthi ikheli lingowamuphi umcimbi ngaphambi kokuthola iziphetho kulo.

Lokhu kwehlukanisa kunomphumela onengqondo. Umugqa wokungena nomugqa wokudlulisela ovela esikhathini esisodwa bangathwala amakheli amabili ahlukene omthombo, ngakho ukucaphuna noma yiliphi njenge ”kheli leklayenti” wukuqagela ukuthi yiluphi uxhumano olulufundayo. Hlola uhlobo lomcimbi ngaphambi kokufanisa ikheli nanoma yini.

2. Landela uxhumano lokulawula

Qalisa iklayenti ngemiphumela yokulungisa iziphambeko ivuliwe, noma thatha isithombe eklayentini ngenkathi ixhumana, futhi qaphela i-peer eliyifinyelela ngempela. Uma i-VPN ivuliwe futhi iklayenti lihanjiswa ngayo, iseva ibona ikheli lokuphuma le-VPN esikhundleni sekheli le-laptop kwinethiwekhi yokufinyelela.

Uma iklayenti lidlula ithanele, iseva ibona ikheli lokufinyelela futhi ikheli layo lengxenye ye-VPN alibonakali emoyeni. Yingakho ikheli lethanele le-laptop ngokuvamile liyincane kakhulu inani eliwusizo esithombeni: likhona ngaphakathi kwethanele kuphela. Sebenzisa i-ss noma ukuthwebula amaphakethe ukuqinisekisa umthombo okhombiswa yiklayenti, esikhundleni sokufunda kusikrini sokuhlela.

Imiyalo emibili ihlanganisa okuningi:

ss -tnp state established "( sport = :21 or dport = :21 )"
tcpdump -ni any tcp port 21

Eyokuqala ibala amaphoyinti okugcina endawo nele-peer okusetshenziswe isitaki sakho. Eyesibili ikhombisa amakheli abhalwe emoyeni, okuseduze nombono weserva kodwa kusagcina kungxenye yakho, ngakho ilogi yeserva noma ukuthwebula kwayo kuphela okukhombisa lokho iseva ekurekhodile.

3. Hlola ukuthi uxhumano lwedatha luyafana yini

Kumodi ye-passive iseva itshela iklayenti ukuthi lixhumane kuphi, kuthi kumodi ye-active iseva ixhumana emuva ekhelini elinikezwe yiklayenti. Zombili izimodi zingathumela uxhumano lwedatha endaweni ehlukile kuxhumano lokulawula uma ukuhumusha noma i-proxy kusendleleni. Qinisekisa imodi kwilogi yeklayenti, bese uhlola ukuthi uxhumano lwedatha lusebenzise indlela efanayo yini.

Ukudlulisela okurekhodwe kusuka ekhelini elihlukile kunelokungena kuwukubonwa kwangempela hhayi irekhodi elonakele, futhi ngokuvamile kusho okuthile ngendlela.

4. Cela umqhubi irekhodi elincane

Nika umqhubi weserva isikhathi sesikhathi kanye nesimo sayo sesikhathi, i-akhawunti, umsebenzi nendawo ekuyiwa kuyo. Buza ukuthi yiluphi uxhumano olwakhiqiza indawo yekheli, nokuthi umxhumanisi othembekile uyashintsha yini incazelo yalo.

Funda isakhiwo sangempela saleso seva esikhundleni sokucabanga ukuthi wonke umkhiqizo urekhoda iklayenti lokuqala, i-peer yokulawula ne-peer yedatha ngokwahlukana, ngoba amanye afingqa sonke isikhathi emugqeni owodwa. Gcina neprotocol icacile: i-SFTP iyiprothokholi esekelwe ku-SSH hhayi i-FTP kwelinye imbobo, futhi i-FTPS yengeza i-TLS ku-FTP, ngakho ubunikazi besevisi kulogi buncike kulokho okukusebenzisile.

5. Qinisekisa ngaphambi kokuhlobanisa

Ikheli lokuphuma lingasebenzela amakhasimende amaningi, futhi i-akhawunti eyodwa ingasetshenziswa emithonjeni eminingana evunyelwe, ngakho ikheli negama lomsebenzisi akubonisi into eyodwa. Ukurekhoda kuyinqubomgomo yeserva: i-VPN ishintsha umthombo okhombiswa uxhumano, kodwa ayisusi igama le-akhawunti, igama lefayela noma umsebenzi owenziwe yisevisi eyamukelayo. Hlobanisa kuphela lokho okukhonjiswa yirekhodi bese uphawula okunye njengokungaziwa. Incazelo ye-FTP ye-WinSCP iyisihlahla esifushane semodeli yezixhumano ezimbili uma udinga ukuchazela omunye umuntu.

Izigameko ezimbili ezijwayelekile zikhombisa ukuthi kungani lokho kubalulekile. Ihhovisi lingathumela wonke umsebenzisi ngokusebenzisa ikheli elilodwa lokuphuma, ngakho abantu abayikhulu bakhiqiza inani elilodwa kulogi. Okuhlukile kwenzeka kaningi ngokufanayo: i-akhawunti eyodwa ixhumana kusuka kulayini wasekhaya nakulayini wasehhovisi ngesonto elifanayo, futhi zombili izinto ezirekhodiwe zichaza umuntu ofanayo.