I-ike-scan ayitholi impendulo evela kusango le-IPsec elisebenzayo

Isango lisebenzela izingcingo namalaphuthophi nsuku zonke, nokho i-ike-scan ibika ukuthi akukho msingathi ophendulile. Lokho kuphuma kufundwa njengobufakazi bokuthi i-IPsec ayikho kudivayisi. Ngokuvamile kusho ukuthi idivayisi yalahla sonke isiphakamiso esisocwaningweni futhi yakhetha ukungaphenduli lutho. Ukuthula nakho kuyimpendulo, futhi iyimpendulo enolwazi oluncane kakhulu ithuluzi elingakunikeza yona.

Hamba ngemibuzo emithathu ehlukene: ingabe iphakethe lafika, ngabe sikhona isiphakamiso esavumelana, futhi ngabe okunye kwala umlingani?

Isinyathelo 1: funda isiphakamiso esithunyelwa ithuluzi

Imodi eyinhloko iqala nge-SA payload ebala izinguquko umqalisi azozamukela, futhi i-ike-scan igcwalisa lolo hlu luvela kokuzakhela okuzenzakalelayo. Isethi ezenzakalelayo yasendulo ngamabomu: i-DES ne-3DES yokubethela, i-MD5 ne-SHA1 yokuhasha, amaqembu 1 no-2 okushintshana kokhiye, okhiye ababiwe ngaphambili bokuqinisekisa. Akukho i-AES, akukho i-SHA-2, akukho iqembu 14. Isango elilungiselelwe i-AES-256 ne-SHA-256 ne-modp2048 akwabelani lutho nayo.

Ezinye izinqubo ziyaphendula ucwaningo olungavumelani ngesaziso NO-PROPOSAL-CHOSEN. Ezinye zivele zililahle, okuvamile emishinini ethatha abalingani abangaziwa njengomsindo. Noma kungunjalo, ukuskena akushicileli lutho, futhi lokho «lutho» kufana ncamashi nendlela i-UDP 500 ehlungiwe ebonakala ngayo ngaphandle, njengoba idokhumenti yephrojekthi ye-ike-scan icacisa ngesethi ezenzakalelayo.

Isinyathelo 2: nikela ngesiphakamiso sesimanjemanje esisodwa

Shintsha isethi ezenzakalelayo nge --trans. Ifomu lesibaluli lithatha izinombolo zesibaluli se-IKE ngqo: 1 yokubethela, 2 yokuhasha, 3 yokuqinisekisa, 4 yeqembu kanye no-14 yobude bokhiye lapho i-algorithm ithatha eyodwa. Okukhishwayo umugqa ongawufunda ngokuzwakalayo ekubuyekezweni koshintsho.

Ifomu lesikhundla lithwala lawo manani ngokulandelana futhi ligwema abakaki, okubalulekile lapho umyalo udlula ku-shell.

ike-scan --trans="(1=7,14=256,2=5,3=1,4=14)" 203.0.113.10

Isiphakamiso esisodwa ngephakethe siyephuza uma ubala, ngakho phinda amanani angenzeka: ukubethela 5, 7/128, 7/192, 7/256; ukuhasha 1, 2, 5, 6, 7; amaqembu 1, 2, 5, 14, 15, 19, 20, 21; ukuqinisekisa 1 kokhiye obiwe ngaphambili kanye no-3 kumasiginesha e-RSA. Shicilela umyalo ngamunye ngaphambi kokuwusebenzisa ukuze umbhalo ubonise ukuthi kwakunikwa ini futhi ngaluphi ukulandelana.

Isinyathelo 3: humusha impendulo

Impendulo ifakazela izinto ezimbili ngqo: kunomphenyi we-IKE ofinyeleleka kulelo kheli, futhi isiphakamiso esisodwa esanikezwa sasamukeleka. Ayisho lutho ngokhiye obiwe ngaphambili, isendlalelo se-L2TP noma ukuthi ikhona yini i-akhawunti yomsebenzisi. Ukuskena okuphumelelayo kuhambisana ngokuphelele nokwehluleka kwesinyathelo ngasinye esilandelayo.

Kusango olisebenzisayo, lena ingxenye ewusizo ngempela. Ukuskena kukutshela ukuthi iyiphi imibono idivayisi esayamukelayo, futhi umphumela ogcwele ezingucukweni zakudala uyitholakalo mayelana nenqubomgomo yedivayisi, hhayi isizathu sokwenza iklayenti libe buthaka.

Isinyathelo 4: humusha ukuthula

Ukuthula ubufakazi obuthaka kunalokho okubonakala. Isiphakamiso ngasinye kungenzeka saliwa, i-UDP 500 ne-4500 kungenzeka zahlungwa, umthombo kungenzeka wancishwa isivinini ngemva kokuqhuma, noma insizakalo kungenzeka ilalele ikheli elihlukile kunalelo oliskenile. Qhathanisa ilogi ye-IKE yesango neklayenti eselixhuma kakade ngemininingwane evumelekile ngaphambi kokuphetha noma yini ngalebokisi.

Ukuziphatha kokuqhuma kungena kulolo hlu ngoba ukubala kukhiqiza amaphakethe amaningi esikhathini esifushane. Isango eliphendula imizamo yokuqala bese lithula lichaza inqubomgomo yalo ye-anti-DoS, hhayi isethi yemibono yalo.

Isinyathelo 5: bhala lokho okufakazele

Bhala inhlanganisela eyamukelekile eceleni kwenguqulo ye-firmware, bese uyiqhathanisa nezinguquko ezinikezwa ngokwezenzakalelayo yiklayenti okukhathazayo. Igebe phakathi kwalezi zinhlu ezimbili iyinkinga yokulungiselela, futhi ukuskena kuyiveze nje. Uma imibono kuphela eyamukelekile iyileyo obengeke uyikhethe, ukulungiswa kungokwenqubomgomo yesango noma iphrofayela yeklayenti, hhayi ucwaningo.

Ucwaningo olungaphendulanga lutho lusaphendule okuthile: lukhombisa ukuthi iyiphi imibono le divayisi izimisele ukuyixoxa, futhi iyiphi engathanda ukuyilahla phansi.