Ukuskena okuyingcambu kwe-Nmap kwehluleka nge-VPN kodwa uxhumano lwe-sT luyasebenza?

Ikhasi lilayishwa ngomhubhe ngesikhathi ukuskena kwamachweba kubika ukuthi umphathi akekho, futhi umcabango wokuqala ukuthi i-VPN ivimbela okuthile. Ngokuvamile ayivimbeli lutho olusha. Izivivinyo zombili zicela amandla ahlukene kusistimu yokusebenza, futhi eyodwa kuphela edinga ukufinyelela kwamaphakethe angcambu. Thola ukuthi yiliphi ikhono elehlulekile ngaphambi kokuthinta umhubhe.

Hlukanisa ikhono nomhubhe

Uhlelo lokusebenza oluvamile lucela i-kernel ukuthi ivule uxhumano lwe-TCP, futhi i-kernel yenza ukuxhawula ngaphandle kwelungelo elikhethekile. Ukuskena okuyingcambu kwakha amaphakethe ngokwako, okudinga isokhethi eyingcambu noma idrayiva yokubamba kuye ngeplathifomu. Le yimibuzo yemvume nedrayiva, futhi ikhona noma i-VPN ixhunyiwe noma cha.

Lo mehluko uchaza ukungalingani okuvamile. curl iyaphumelela ngoba indlela yesokhethi iyasebenza, kuyilapho ukuskena kwe-SYN kwehluleka ngoba inqubo ayikwazi ukuvula isokhethi eyingcambu kusikhombimsebenzisi somhubhe. Kubuye kuchaze isimo esiphambene, lapho ukuskena okuyingcambu kubika ukuthi kuhlungiwe ngoba indlela ilahla uphenyo kuyilapho indlela yohlelo lokusebenza ihlala inhle.

Ayikho imiphumela emibili echaza insizakalo ekude. Yomibili ichaza indlela eyodwa ngaphansi kwendlela yokusebenza eyodwa, ngakho hlanganisa indlela nomphetho.

Qalisa ukuhlolwa koxhumano kumphathi oyedwa ogunyaziwe

Khetha umphathi oyedwa umsebenzi wakho owumbozayo, bese usebenzisa imodi engadingi ukufinyelela okuyingcambu. Ithagethi yesibonelo lapha yi-198.51.100.24, indawo yemibhalo ebekelwe lolu hlobo lwesibonelo.

Umugqa owodwa, umphathi oyedwa, ichweba elilodwa, akukho sigaba sokuthola:

nmap -sT -Pn -p 443 --unprivileged 198.51.100.24

-sT ikhetha uxhumano oluphelele lwe-TCP, ngakho ihamba indlela efanayo ye-kernel esetshenziswa uhlelo lokusebenza futhi ayidingi idrayiva yokubamba. -Pn yeqa ukutholwa komphathi; i-nmap isenza ukuxazululwa kwengqimba yokuxhumana kumathagethi esigabeni sasendaweni, ngakho le fulegi akuyona isithembiso sethrafikhi yokuqala enguziro. --unprivileged itshela i-nmap ukuthi icabange ukuthi ayinawo amalungelo angcambu noma okulalela, okushintsha indlela futhi akunikezi lutho.

Funda ifulegi ngalinye njengoshintsho olulodwa, hhayi njengokulungisa

Thatha inketho ngayinye njengesitatimende mayelana nendlela. Akukho ku--sT, -Pn noma --unprivileged okwengeza umzila, okuvula isivikelo somlilo esikude noma okuqinisekisa isitifiketi. Ukuskena koxhumano kuphinda kuqedele ukuxhawula kwangempela okulotshwa insizakalo, ngakho ukuhlola okugunyaziwe nokuskena okungagunyaziwe kubonakala kufana kusuka kuseva ngaphandle kobubanzi nesivinini. Ukuqongelela izinketho kuze kushintshe okukhiphayo yiyona ndlela yokuqopha inkinga yendlela njengokutholakele kwenethiwekhi.

Lapho okukhiphayo kuthi kuvaliwe, okuthile kuphendule ngokusetha kabusha, futhi lokho kuwukutholakele okuhlukile kunokuthula. Lapho okukhiphayo kuthi kuhlungiwe, idivayisi ilahle uphenyo noma impendulo yalo, futhi i-VPN ingase ibe ngeyingozi. Bhala amazwi anembile, ngoba isinqumo sesigaba sokuthola nokwehluleka kwezinga lophenyo kukhombisa izingqimba ezahlukene.

Uma imodi yelungelo elikhethekile idingeka ngempela, umnikazi weplathifomu unquma ukuthi ilungelo, idrayiva nokuhlelwa kwezikhombimsebenzisi kuyasekelwa yini. Ukuphakamisa ukubiza okufanayo akushintshi indlela yako.

Ma kumphumela wezokuthutha, bese uhlola insizakalo

Ukuxhawula okuqediwe kuphendula umbuzo owodwa mayelana nekheli elilodwa, ichweba, umthombo nesikhathi. Akufakazeli ukuthi ingemuva linempilo, ngoba isilinganisi somthwalo noma ummeleli wangaphambili kungamukela uxhumano kuyilapho uhlelo lokusebenza olungemuva lumile.

Qhubeka ngeklayenti lensizakalo uqobo ukuze ubunikazi be-TLS nokuziphatha kohlelo lokusebenza kubonakale njengamaqiniso ahlukene:

openssl s_client -connect 198.51.100.24:443 -servername staging.example.net </dev/null 2>/dev/null | openssl x509 -noout -subject -dates
curl -sS -o /dev/null -w '%{http_code}\n' https://staging.example.net/health

Enye inkambiso igcina umphumela uwusizo. Bhala umyalo onembile, ikheli lomthombo elisetshenzisiwe nesikhathi, ngoba umphumela wezokuthutha ngaphandle kwaleso simo awukwazi ukuphindwa noma ukuqhathaniswa.

Uma isitifiketi sisho umphathi obungawulindelanga, ezokuthutha zasebenza futhi ukuhamba kwendlela kwakungakaze kube inkinga; ukuhluleka kusekusingathweni okubonakalayo noma ku-DNS. Uma ukuxhawula kwehluleka, bhala umugqa wephutha wasendaweni esikhundleni sokwenza ijikelezo ngomhubhe. Gcina inothi lobubanzi eceleni komphumela, ngoba umuntu olandelayo kufanele azi ukuthi iyiphi indlela eyikhiqizile.