Isixwayiso sokungena kuseva ye-VPN: funda indawo yokubheka

Iseva engemuva kwe-VPN igcina amarekhodi ayo emisebenzi yomphakathi, futhi abantu bayaqhubeka nokuwathola. Okufika emugqeni wezixwayiso akuyona into eyodwa etholakele kodwa izinto ezintathu ezingase zibe khona, futhi zisho izinto ezihlukene. Umsebenzi wokuqala ukuhlukanisa isevisi evezile kusuka kolwazi lokungena olivezile.

Dlula ezindaweni zokubheka ngokulandelana. Yima lapho ubufakazi bushintsha isigaba, ngoba isigaba esilandelayo siphendula umbuzo ohlukile.

Isigaba sokuqala: ukubanjwa kwabona ini ngempela

Ukubanjwa kwamaphakethe kubhala lokho okwakubonakala endaweni yako uqobo endleleni. Leyo ndawo ingase ibe ngaphambi kwesinqumo sokuhlunga esizayo. Iphakethe elibanjwe lifakaza ukuthi ithrafikhi yafika lapho. Alifakazi lutho ngalokho okwenzeka ngemuva.

Qaphela ne-interface. Ukubanjwa ku-adaptha yomphakathi nokubanjwa ngaphakathi kwethuneli kuchaza izindawo zokufika ezihlukene, futhi isixwayiso esicaphuna indawo engalungile siholela esiphethweni esingalungile.

I-Windows nayo ihlunga ezingxenyeni eziningana ze-stack, ngakho imodeli ehlanzekile lapho ithuluzi lokubamba likhona engxenyeni yesibili futhi i-firewall engxenyeni yesithathu ayiphili lapho ihlangana nomkhiqizo wangempela. Umbono jikelele we-Windows Filtering Platform uchaza ukuhlunga ezindaweni ze-stack, yingakho ukulandelana kokubheka kufanele kusungulwe hhayi kucatshangwe.

Isigaba sesibili: irekhodi lokunqatshwa lisungula ini

Irekhodi lokunqatshwa lithi umngcele wenqubomgomo unqabe lelo phakethe. Ubufakazi obuqinile lobu. Futhi ubufakazi obuncane, ngoba buhlanganisa isinqumo esisodwa emngceleni owodwa. Akukho okunye ku-stack okuchazwa yikho.

Qhathanisa nge-tuple nesigxivizo sesikhathi. Umthombo ofanayo, indawo yokufika efanayo, imbobo efanayo, ngaphakathi komzuzu wesibili ofanayo. Ngaphandle kwalokho kufana, isehlakalo esibonakala sifana kwelinye irekhodi sisehlakalo esinye nje, futhi ukusihlanganisa kukhiqiza indaba okungekho ongayivikela.

# what did the firewall actually drop, and when?
Get-NetFirewallProfile -PolicyStore ActiveStore | Select-Object Name, LogAllowed, LogBlocked
Get-Content "$env:systemroot\System32\LogFiles\Firewall\pfirewall.log" | Select-String 'DROP'

# correlate with a listening service on the same port
Get-NetTCPConnection -LocalPort 3389 -State Listen | Select-Object LocalAddress, OwningProcess

Imbobo evaliwe nephakethe elinqatshiwe kubonakala kufana ngaphandle futhi kuhluke ngokuphelele kulezi ziphumo ezimbili. Lowo mehluko uyisizathu sonke sokufunda irekhodi lendawo.

Isigaba sesithathu: isehlakalo sokuqinisekisa sifakaza ini

Isehlakalo sokuqinisekisa sithi ingxenye ethile yacubungula isicelo yaze yafinyelela ekuqopheni umphumela. Yiso sodwa ezigabeni ezintathu esikhuluma ngobuwena, futhi asisho lutho ngokuthi zingaki iziphakethe ezafika ngaphambi kwaso.

Funda umongo wangempela wesehlakalo. Ukungena okuhlulekile kwe-akhawunti engekho kuwumsindo ovela ekuskeneni. Ukungena okuhlulekile kwe-akhawunti yangempela enomthombo ozwakalayo kungelinye izinga eliphambili. Isikhathi sokusebenza esiphumelelayo siyingxenye ehluke ngokuphelele yesehlakalo.

Qaphela namagama e-protocol. I-RPC ne-RDP ziyizinsizakalo ezihlukene ezinamabobo ahlukene. Umtshwayeli obheka eyodwa yazo akukubandakanyi okunye. Amathuluzi afingqa umsebenzi wenethiwekhi awasho njalo ukuthi iyiphi kulezi ezimbili ekhiqize isehlakalo.

Isampula eyodwa eqhathanisiwe yeqa idashbhodi

Khetha ukuhlolwa okukodwa okuvunyelwe, kusebenzise ngamabomu, bese ukulandelela kusukela ekuqaleni kuze kube sekugcineni: ikheli lendawo yokufika ne-interface, ikheli langempela lomthombo, imbobo yesevisi, iphrofayela nomthetho we-firewall osebenzayo, kanye nomphumela wesevisi ohambisanayo. Faka noma yikuphi ukuhlelwa kwaphezulu noma i-firewall yamafu kulolo chungechunge, ngoba umthetho ovumelayo lapho ungadlula umthetho wendawo ohlanzekile.

Bese uhlukanisa izibopho ezimbili. Uma ukuphatha kufanele kube kuphela nge-VPN, kuphoqelele kokubili endleleni yomphakathi nasendleleni yethuneli kuyilapho ugcina indlela yokubuyisela evunyelwe. Ukuqapha umzamo onqatshiwe akusiwona umsebenzi ofanayo nokunquma ukuthi iseva kufanele yamukele ini.

Umthetho wendawo noma i-protocol engahlobene evinjiwe awuthathi indawo yokuthola irekhodi elibonisiwe nesinqumo esilitholile. I-VPN nayo ayithathi: ukuqondisa ithrafikhi ephumayo ngethuneli akubhali lutho ngemvume yokungena.