Amakheli obumfihlo e-IPv6 noma uhlu lwezimvume lwe-RDP: khetha ukushintshana

Ukufinyelela kwidesktop ekude kusebenze inyanga, bese uhlu lwezimvume luyeka ukuvumelana ngaphandle kwesizathu esibonakalayo. Umsingathi awuzange usuke futhi akukho lutho olwashintshwa ku-firewall. I-Windows iyaqhubeka nokwakha amakheli esikhashana e-IPv6 anezihlonzi zokuxhumana ezingahleliwe futhi iwahoxise, ngakho ikheli lomthombo iseva elibona nganoma yiluphi usuku lingaba yilelo okungekho muntu owalibhala emthethweni. Ukucisha lokho kuziphatha kulungisa ukuvumelana futhi ngasikhathi sinye kwenza umsingathi ube yisihlonzi esihlala isikhathi eside. Kala ezinye izindlela ngaphambi kokwamukela ingxenye yesibili.

Kungani umthetho wayeka ukuvumelana

I-RFC 4941 ichaza amakheli esikhashana: umsingathi wakha amakheli engeziwe anezihlonzi ezingahleliwe futhi ayawahoxisa, lokho okwenza umbukeli angakwazi ukuxhumanisa umsingathi oyedwa phakathi kwezikhathi zokuvakasha. I-Windows isebenzisa lokho kuziphatha, ngakho ikheli lomthombo layizolo akudingekile ukuthi libe ngelelamuhla. Ikheli elingabikezelwa lisakhona kusixhumi; nje akulona lelo elikhethwa ukuxhumana okuphumayo.

Yingakho ukwehluleka kubonakala kungaqhubeki, hhayi kuphelele. Umthetho uvumelana isikhathi ngemva kokwakhiwa kwekheli, uyeka ukuvumelana uma usuhoxisiwe, futhi uqala ukuvumelana futhi ngemva kokuba othile ewuhlele. Ukuqapha okuhlelwe ngekheli lomthombo kanye nokuhlolwa kwelayisensi okusekelwe ekhelini lomsingathi kuyaphuka ngesikhathi esifanayo. Umthetho osebenza ngokushesha ngemva kokuhlelwa futhi ohluleka ngemva kwamasonto amathathu ngokuvamile yilona lokhu, hhayi ukulayishwa kabusha kwe-firewall.

Inketho yokuqala: ikheli elilodwa elizinzile, ubumfihlo obuncane

Ukulungisa okuvamile kucisha zombili izindlela zokuzungeza kumsingathi: netsh interface ipv6 set privacy state=disabled store=persistent kanye netsh interface ipv6 set global randomizeidentifiers=disabled store=persistent. Engeza store=active uma ufuna ushintsho lusebenze ngaphandle kokulinda ukuqalisa kabusha, futhi wamukele ukuthi manje usenze isihlonzi sibikezeleka phakathi kwamanethiwekhi.

Yikho kanye ukubikezela okwakuhloswe ukukuvimbela yizengezo. Ikheli elilandela umsingathi kusuka ekhefi kuya ehhovisi nasekhaya liwukhiye wokuhlunga okunethezekile futhi liwukhiye wokulandelela onethezekile ngokufanayo, futhi impawu yesibili iphila isikhathi eside kunethikithi elacela eyokuqala.

Inketho yesibili: vumela isiqalo noma igama

Ukuvumela i-/64 esikhundleni sekheli eliphelele kugcina ukuzungeza kungaphazamisekile futhi kuvumelana nesimangalo esibuthakathaka kodwa esivame ukuthembeka: lo mshini usekunethiwekhi yami yasekhaya. Kuyeka ukwanela ngesikhathi leso siqalo siqukethe izingqalayithi obungeke uzivumele, okuthi ekuxhumekeni komsebenzisi ngokuvamile kube yiqoqo elincane kunalokho abantu abacabanga. Igama elishicilelwe nge-DNS eguquguqukayo lilula ukuphatha, ngoba irekhodi lilandela umsingathi futhi inqubomgomo ifundwa njengobuqobo hhayi njengebanga elikhula njalo lapho kwengezwa idivayisi.

Zombili izinketho zidinga isixazululi iseva engasithemba kanye negama elingakwazi ukwenziwa inkohliso kalula, ngakho-ke ziphathe njengesinqumo senqubomgomo mayelana nobuqobo hhayi njengoshintsho lobuhle emthethweni. Bhala ukuthi isiphi isixazululi esiphendula lelo gama, ngoba umthetho uthembekile kuphela ngokulingana nerekhodi elingemuva kwalo.

Inketho yesithathu: vumela umhubhe wabele ikheli

Uma ukuxhumana kudlula ku-VPN oyilawulayo, iseva ingakhipha ikheli emanzini ayo, futhi uhlu lwezimvume lube selubhekisela enanini elikhethwa yiseva hhayi lelo elikhethwa yiklayenti. Lokho kusebenza kahle kumaklayenti aphethwe futhi kubi kunoma yini iklayenti engayidlula, ngakho qinisekisa ukuthi yiluphi uhlangothi olunqobayo ekusetshenzisweni kwakho.

Ukususa isinqumo kude nekheli ngokuphelele, ukuya kusitifiketi sekhayenti noma kusango eliqinisekisiwe, iyinketho ekhulayo, ngoba iyeka ukuncika enanini uhlelo lokusebenza olunelungelo lokulishintsha.

Khetha ugcine izindleko zokulandelela emehlweni

Bhala izinketho ezine ngokumelene nesidingo sangempela, futhi ukhethe eyodwa esikhundleni sokuzihlanganisa. Uma usucisha ubumfihlo noma kunjalo, kunciphise kumsingathi owudingayo, bhala isizathu eceleni komthetho, futhi ucabangele ukukhetha ikheli okuzinzile-komfihlo kusuka ku-RFC 7217 lapho ipulatifomu isekela khona, ngoba igcina isihlonzi sesiqalo ngasinye ngaphandle kokudalula esisuselwe ku-hardware. Phinda unike amandla izengezo uma uhlu lwezimvume lushintshwa.

Rekhoda ushintsho eceleni komthetho olusekelayo. Ngaphandle kwalowo mbhalo, umphathi olandelayo uthola umsingathi onezengezo zobumfihlo zicishiwe futhi ngaphandle kwencazelo, bese ezivula futhi ngesikhathi sokuhlanza.