I-Nessus nge-VPN: lapho okufanele kube khona isihloli ngaphambi kokuhlola kokuqala

Isithonjana se-VPN eduze kwesiphequluli asisho lutho ngenqubo ethumela amaphakethe okuhlola. Uma ikhonkolo nesihloli kusebenza kumakamu ahlukene, umhubhe wesiphequluli uwumzila owodwa kanti umthombo wokuhlola uwumunye. Qala endaweni yokwenza, bese uphuma ngaphandle: umzila, ugunyaziso nemininingwane yokungena. Lokho kwehluka kuyisici sokuqala ohlwini ngesizathu.

Lolu uhlu lokuhlola ngaphambi kokuqala, hhayi isifundo sokuhlola. Isinyathelo ngasinye sikhiqiza iqiniso ongaliqopha emlandweni womsebenzi ngaphambi kokuba iphakethe lishiya isihloli.

Ukuhlola kokuqala: thola inqubo ethumela izinhloli

Dweba izindima ezintathu ngokucacile: isiphequluli kukhompyutha ephathekayo A, ikhonkolo yokuhlola kumkamo B kanye nomgomo oyimfihlo C. Uma u-B ephinda asebenzise injini yokuhlola, isiphequluli sidinga umzila wokuya ku-B kuphela. Uma idivayisi ehlukile yokuhlola yenza umsebenzi, leyodivayisi idinga umzila wokuya ku-C.

Browser on laptop A -> console on host B
Scanner process on B (or another appliance) -> private target C

Isiphequluli esixhunywe ku-VPN singafinyelela ikhonkolo kuyilapho isihloli esingemuva kwaso singenawo umzila wokuya ku-C. Okuhlukile nakho kungenzeka: isihloli singaphakathi kwenethiwekhi eyimfihlo kanti ikhonkolo ikude. Thola ukuthi isiphi isakhiwo osisebenzisayo ngempela ngaphambi kokushintsha noma yikuphi ukulawula kwenethiwekhi. Shono igama ledivayisi kukhwezelo yokuhlola ngaphambi kokusola inethiwekhi.

Uma isihloli sisebenza ku-A, umkamo wesiphequluli nesihloli babelana ngomongo, kodwa kuphela uma leyonguquko igcina indawo yamagama efanayo kanye nethebula yomzila efanayo. Isitsha noma i-akhawunti yesevisi kungenzeka ingadli ifa lalokho okubonwa isiphequluli esisebenzisanayo. Ikhonkolo iyindawo yokuphatha, hhayi injini yokuhlola.

Ukuhlola kwesibili: fakazela umzila ne-DNS yesihloli

Sebenzisa ukuhlola komzila kumkamo wesihloli, hhayi kukhompyutha ephathekayo. Buza i-kernel ukuthi iyiphi i-interface negedlela ezoyisebenzisa ekhelini lomgomo, bese uphinda ngegama lomkamo womgomo. Umzila okhona we-IP kanye negama elixazulula kwelinye ikheli kungamaphutha amabili ahlukene.

Qinisekisa ikheli lomthombo elizovela kumgomo. Iklayenti ye-VPN inganikeza ikheli elihlukile kunalelo elilindelwe i-firewall yomgomo, futhi idivayisi ye-NAT ingalibhala kabusha. Umnikazi womgomo udinga umthombo obonwayo, hhayi ikheli eliphrintiwe kuphrofayela ye-VPN.

Hlola nomzila wokubuya. Isihloli esifinyelela umgomo kodwa singatholi izimpendulo sinenkinga yomzila noma ye-firewall endleleni yokubuya, futhi lokho kubukeka kufana ncamashi nomgomo ongasebenzi.

Ukuhlola kwesithathu: thola imvume yobubanzi nombono

Cela umnikazi womgomo ukuthi abhale phansi izinhlelo, izinsizakalo, imvelo, umthombo nesikhathi. Nquma ukuthi ukuhlola kumelela umbono upi: umsebenzisi we-VPN wangaphandle, iklayenti langaphakathi elivunyelwe noma ingxenye ethile yesihloli.

Umzila oyimfihlo awusona isigunyazo sokuhlola amanethiwekhi aseduze. Gcina uhlu lwemigomo lulincane, bhala izinhlelo ezikhishiwe futhi uvumelane ngezimo zokumisa kanye nomuntu ongayeka ukusebenza. Isihloli sihlola ngokuzimisela konke esingakufinyelela, yingakho ububanzi kufanele bucace.

Bhala umthombo ogunyaziwe kulo mismo umbhalo. Uma umthombo obonwa isihloli uhlukile kunalowo ogunyaziwe, ukusebenza akumeleli umbono okuvunyelwene ngawo ngisho uma uhlu lwemigomo lulungile.

Ukuhlola kwesine: hlanganisa imininingwane yokungena nokujula kokuhlola

Ukuhlola kokufinyeleleka nokuhlola okuqinisekisiwe kuyizivivinyo ezihlukene. Impendulo yembobo ifakazela ukuthi okuthile kuphendulile; ayifakazeli ukuthi ukuhlola okunemininingwane yokungena kwenziwe noma ukuthi uhlelo luvumele i-akhawunti.

Sebenzisa imininingwane yokungena ekhethekile kuphela uma ububanzi okuvunyelwene ngabo budinga ukuhlola okuqinisekisiwe. Qinisekisa izimvume nenqubo yokukhiya ye-akhawunti, bese unquma ukuthi okutholakele kuzogcinwa futhi kwabiwe kanjani ngaphambi kokuba ukuhlola kukukhiqize.

Uma imininingwane yokungena yehluleka, ungashintsheli ngokuthula ekusebenziseni okungaqinisekisiwe futhi ungabizi umbiko ngokuthi ukuhlola okuhleliwe. Umphumela uyisivivinyo esihlukile esinencazelo ehlukile, futhi lowo mehluko ungowombiko.

Ukuhlola kwesihlanu: gcina uhlelo, bese uqala ngamabomu

Emgudwini wokusebenza wokuhlola we-Nessus, ukukhetha isifanekiso, ukuhlela izilungiselelo kanye nokugcina noma ukuqala ukuhlola kuyizinyathelo ezihlukene. Sebenzisa lokho kwehlukanisa ukubuyekeza uhlu lwemigomo, umthombo neshejuli ngaphambi kokuba noma yikuphi ukuxhumana kuqale.

Ngaphambi kokugunyaza ukuqala, hlola ukuthi i-VPN ivumela muphi umthombo, ithwala kuphi ukuxhumana nokuthi ilulama kanjani uma umhubhe unqamuka. Ungandisi ukufinyelela kwe-firewall ngenxa nje yokuthi ukuxhumana kwangaphambili kwehlulekile; thola ungqimba olwenqabile bese ulungisa lolo ngqimba.

Ngemva kokusebenza, bhala umkamo wesihloli, umthombo obonwayo, uhlu lwemigomo kanye nanoma yikuphi ukuhlola okungakwazanga ukuqedwa. Umbiko owenziwe kusuka komunye umthombo noma ngaphandle kwemininingwane yokungena okuhlosiwe awumeleli uhlelo lokuqala, futhi ukusho lokho kuyingxenye yokulethwa.

Hoxisa ukufinyelela komsebenzi bese uphatha imiphumela egciniwe ngokwenqubo okuvunyelwene ngayo. Uhlu lokuhlola luphela kuphela uma ubufakazi buhambisana nomzila owugunyazile, hhayi uma ukuhlola kusanda kubuyisa imiphumela.