IIS Manager kude: hlola ikheli lika-WMSVC ngokwalo kuqala

Isayithi yakho iphendula ku-443 ngomhubhe, futhi i-IIS Manager ayikwazi ukuxhumana neseva. Lezi ziphumo ezimbili aziphikisani, ngoba isayithi kanye nendawo yokugcina yokuphatha kude kungabalaleli ababili abanokucushwa okubili kanye namasethi amabili emithetho yokufinyelela. Okokuphatha kungokwe-Web Management Service, i-WMSVC, futhi inekheli layo, iphothi, isitifiketi kanye nemikhawulo ye-IPv4. Hlola leyo ndawo yokugcina ngaphambi kokuthinta ngisho umzila owodwa.

Abalaleli ababili, izinkinga ezimbili ezahlukene

Isicelo esiya kusayithi sifinyelela ekuxhumekeni kwe-HTTP.sys yaleyo sayithi, okuchazwa ngokwesayithi nangokweprotocol kukucushwa kwe-applicationHost. Isicelo esivela ku-IIS Manager sifinyelela ku-WMSVC, esiphendula ngokuzenzakalela nge-HTTPS ku-TCP 8172 futhi sicushwa ezingeni leseva. Akukho okukuxhumekeni kwesayithi okushintsha lapho i-WMSVC ilalela khona, futhi akukho ku-WMSVC okushintsha ikheli isayithi eliphendula kulo. Zabelana ngomshini owodwa kanye nendawo yokugcina izitifiketi eyodwa, futhi ukufana kuphela lapho.

Ngakho-ke i-Test-NetConnection ephumelelayo kuphothi 443 isho ukuthi umlaleli wesayithi uyafinyeleleka, futhi akusho lutho ngokuphatha.

Thola ikheli i-WMSVC eboshelwe kulo ngempela

Buza iseva ukuthi ilalela ini manje, hhayi ukuthi kwacushwa ini eminyakeni edlule. I-Get-NetTCPConnection -LocalPort 8172 -State Listen iphrinta ikheli lasendaweni, futhi inani le-0.0.0.0 noma le-:: lisho wonke amakheli, kuyilapho ikheli elithile lisho lona kuphela. Uma ukwalulwa kwekhasi leseva kushintshiwe, umlaleli osaboshelwe ekhelini elihoxisiwe yiso kanye isiphambeko esibanjwa yilolu hlolo.

Inani elicushiwe likhona ekhasini le-Management Service le-IIS Manager kunodi yeseva, futhi ngemuva kwalo ku-administration.config kusikhombisi sokucushwa se-inetsrv. Qhathanisa kokubili: okushiwo yifayela, nokuxhumene nesokhethi ngempela.

Bese usebenzisa i-Test-NetConnection -ComputerName iis-admin.example.com -Port 8172 -InformationLevel Detailed kusuka kuklayenti ye-VPN ethintekile futhi ufunde ikheli elixazululiwe kanye nekheli lomthombo elikhethiwe. Impendulo ye-DNS ehlukile ku-VPN ivamile ngokwanele ukuba ingasuswa ekuqaleni. Gcina lelo gama lomsingathi kanye nephothi ngqo kuthikithi, ngoba ukuqhathanisa kamuva negama elihlukile akufakazi lutho ngoshintsho olwenze.

Funda ikheli lomthombo elibonwa yiseva

Imikhawulo ye-IPv4 ye-WMSVC ihlolwa ngokwekheli elifika kuseva, okungelona njalo ikheli ilaphuthophu yakho ecabanga ukuthi inalo. Uma iphuli ye-VPN ihunyushwa endaweni ethile emzileni, iseva ibona ikheli elihunyushiwe futhi uhlu lwemvume olwakhiwe ngekheli langaphakathi leklayenti luzolwenqaba. Lokho kunqaba kubonakala njengokwehluleka kokuxhumana ohlangothini lweklayenti, yingakho kuvame ukuxilongwa ngokungalungile njengenkinga yomzila.

Sebenzisa umphumela onemininingwane wokuhlolwa kwe-TCP, kanye nethebula yokuxhumana yeseva ngokwayo, ukubona ukuthi yiliphi ikheli lomthombo elafika ngempela ngaphambi kokuhlela uhlu lwemikhawulo.

Shintsha ukuxhumeka njengoshintsho lwesevisi

I-WMSVC kufanele imiswe ngaphambi kokuhlelwa kocusho lwayo, ngakho-ke hlela lokhu njengoshintsho olunomunye umzila wokuphatha okhona, njengokufinyelela kwekhonsoli noma iseshini ekude engathembeli ku-IIS Manager. Misa isevisi, sebenzisa ushintsho lwekheli, iphothi noma isitifiketi, bese uyivusa futhi uqinisekise ukuthi umlaleli usuthuthukile. Noma ubani omunye osebenzisa ukuphatha kwe-IIS kude ulahlekelwa iseshini yakhe ngaleso sikhathi. Tshela abanye abaphathi ngaphambi kokuba iwindi livulwe; ukuthola lokhu phakathi nokushintsha yikho okwenza abantu ababili baqale bahlele umlaleli ofanayo.

Ukukhetha wonke amakheli kuyindlela esemthethweni, kodwa kuthathe njengesinqumo sokufinyelela hhayi indlela emfushane. Ukwandisa umlaleli ngesikhathi uhlu lwemikhawulo lusavuliwe yikho okwenza indawo yokugcina yokuphatha ivele emhlabeni wonke kunethiwekhi okwakungacatshangwa muntu. Uma iseva inama-NIC amaningi, khawulela umlaleli kusixhumanisi sokuphatha, shiya umzila wedatha, futhi uqinisekise ukuthi isayithi lisaphendula ekhelini lalo.

Isitifiketi esethulwa yi-WMSVC sikhethwa ngokwehlukile kuzitifiketi zesayithi. Uma ushintsha ikheli, qinisekisa ukuthi isitifiketi sisahambisana negama lomsingathi elisetshenziswa amaklayenti, kungenjalo ukuxhumana kuzohluleka kamuva esigabeni se-TLS ngesikhalazo esingahlobene nomzila.

Hlukanisa ukufinyeleleka ekuthembeni kanye nezimvume

Uma i-TCP iphumelela, ukwehluleka okusele kulandelana: ukuthembela kwe-TLS kusitifiketi sokuphatha, bese ukuqinisekiswa kwe-Windows, bese izimvume ze-IIS Manager ezinikezwe leyo akhawunti. Ngakunye kwazo kuveza iphutha elihlukile, futhi akukho okulungiswa umzila noma umthetho we-firewall. Funda umbhalo wephutha ngokwezwi nezwi esikhundleni sokuqala kabusha isevisi.

Yenza izivivinyo ezine ngalolo hlelo, indawo yokugcina, umlaleli, ikheli lomthombo, ukuthembela, futhi ngokuvamile uzothola ukuxhumeka kwakudala ngaphambi kokuthola inkinga yenethiwekhi.