Ukungeza umthetho wemvume we-RDP akukunciphisi ukufinyelela kwakho kwe-VPN

Umthetho wesibili, omncane wemvume uthi ukhuze umthetho obanzi esikhundleni sokuwuthatha indawo. Khawulela imithetho ekhona, bese ufakazela ikheli iseva elibonayo ngempela.

Icebo lizwakala linengqondo: shiya imvume ekhona ye-Remote Desktop injalo futhi wengeze encane yeklayenti le-VPN elilodwa okufanele libe nokufinyelela. I-Windows Firewall ayisebenzi kanjalo. Imithetho ayilona uhlu oluhleliwe lapho okungenayo okucacile kunakho konke kuwina, futhi imvume encane eceleni kwebanzi ayishintshi lutho, ngoba eyibanzi isavumela wonke umuntu ebesivele iwuvumela. Ukunciphisa insiza kusho ukuhlela imvume esevele yenza umsebenzi.

Umthetho owengezayo akuwona umthetho obalulekile

I-Windows Firewall ihlola yonke imithetho engenayo esebenzayo ezitolo zenqubomgomo ezisebenza kumshini, bese inquma ukuthi ikhona yini imvume ehambisanayo nokuthi ikhona yini imigoqo eyidlulayo. Ukwengeza umthetho kwengeza imvume; akususi futhi akucacisi imvume esezikhona.

Ngakho umbuzo awukaze ube ngukuthi wengeze ini. Umbuzo ngukuthi inqubomgomo esebenzayo iqukethe ini ngemva kokuhlanganiswa kwenqubomgomo yasendaweni, inqubomgomo yesizinda kanye nokungagwegwesi kwephrofayela. Isiteshi somsebenzi esinomthetho owodwa wasendaweni kulula ukucabanga ngaso; iseva ehlangene nesizinda ayikho lula.

Yingakho umphathi engenza ushintsho olubonakala lulungile, aluhlole kusuka kumshini ongafanele bese ephetha ngokuthi lusebenzile. Umthombo owashiywa ngaphandle awukaze uhlolwe. Ukuhlola okufakazela impumelelo kuphela akufakazeli ngisho uhhafu wenjongo yoshintsho.

Thola ukuthi yiliphi ikheli iseva elibonayo

Ngaphambi kokukhawulela noma yini, bheka iseshini eyodwa evunyelwe kumsingathi we-Windows futhi ubhale ikheli lomthombo iseva elikubikayo. Akulona njalo ikheli iklayenti elicabanga ukuthi linalo.

Uma isango le-VPN ligcina amakheli amaklayenti, iseva libona ikheli lomhubhe weklayenti, futhi umthetho okhawulelwe ngekheli unengqondo. Uma isango lihumusha, iklayenti ngalinye lifika njengekheli lesango, futhi ukukhawulela kulelo kheli kunikeza ukufinyelela kukho konke iklayenti elingemuva kwalo. Khona-ke umthetho unembile mayelana nento engafanele.

Lezi zakhiwo ezimbili zidinga izimpendulo ezihlukene. Eyokuqala ingavezwa emthethweni we-firewall; eyesibili kufanele iphoqelelwe lapho ubunikazi busekhona, okungukuthi ku-VPN uqobo noma esangweni eliqinisekisiwe phambi kwensiza.

Isihlungi se-firewall asikwazi ukubuyisa ubunikazi obulahlwa ukuhumusha kwenethiwekhi, noma ngabe ikheli lilotshwe ngokucophelela kangakanani.

Shintsha umnikazi womthetho osebenzayo

Hlola inqubomgomo engenayo esebenzayo futhi uthole wonke umthetho ovumela ithrafikhi ye-RDP njengamanje, kuhlanganise nemithetho igama layo elibonakalayo elingakaze likhulume ngegxobo 3389. Imithetho ekhawulelwe yinsiza nekhawulelwe uhlelo lokusebenza nayo iyabalwa, kanye nokuthutha kwe-UDP okunika amandla ukusetshenziswa kwe-RDP okuthile.

Bese uhlela imithetho ekhona ngokudlula esitolo esingumnikazi wayo. Ukuhlela kwasendaweni emthethweni okuchazwa futhi inqubomgomo yesizinda kungahlanganiswa, kunganakwa noma kubhalwe phezu kwakho, futhi kufanelekile ukwazi ukuthi yikuphi kwalokhu okwenzekayo ngaphambi kokuthembela kuwo.

Le miyalo ithola imithetho esebenzayo, ibonisa isihlungi sekheli esixhunywe kwelinye yayo futhi ibonisa kuqala ushintsho lobubanzi:

Get-NetFirewallRule -PolicyStore ActiveStore -Direction Inbound | Where-Object DisplayName -match RDP
Get-NetFirewallAddressFilter -AssociatedNetFirewallRule (Get-NetFirewallRule -Name Reviewed-RDP-TCP)
Set-NetFirewallRule -Name Reviewed-RDP-TCP -RemoteAddress 10.63.4.17 -WhatIf

Amagama emithetho lapha ayizindawo zokubamba zalokho okutholwe ukubuyekezwa, futhi ifulegi lokubona kuqala likhona ukuze iphutha lokuthayipha ekhelini lingakukhiyi ngaphandle kweseva oyihlelile.

Vimba kuqala bese uvumela iyimodeli ehlukile

Umkhuba ovela kwamanye ama-firewall ukubhala umgoqo obanzi bese ubeka imvume encane phezu kwawo. Ku-Windows umgoqo ocacile ngokuvamile unqoba imvume, ngakho lokho kuhleleka kudala insiza okungekho muntu ongayifinyelela esikhundleni sokuthi kube nokuhlukile kuklayenti elilodwa. Umphumela ukuphazamiseka okubonakala njengensiza ye-RDP ephukile. Empeleni kuyiphutha lokubaluleka, futhi isixazululo ukususa umgoqo hhayi ukwengeza enye imvume.

Gcina ukuziphatha okuzenzakalelayo kokuvimbela okungenayo kumaphrofayela asebenzayo futhi esikhundleni salokho nciphisa izimvume eziqondile. Lokho kushiya umshini unesimo esisodwa esiqondakalayo esikhundleni semithetho emibili ephikisanayo okusebenzisana kwayo kuncike emininingwaneni yokubaluleka.

Fakazela ngomthombo wesibili

Hlola kusuka kuklayenti evunyelwe nangomthombo okufanele uhluleke manje. Ukuxhumana okukodwa okuphumelelayo kufakazela kuphela ukuthi indlela evunyelwe iyasebenza; akusho lutho mayelana nokukhishwa okusanda kwenziwa.

Phinda ukuhlola nge-IPv6 uma iseva inayo inikwe amandla, ngoba inhloso ye-IPv4 kuphela ingaba khona kanye nemvume ebanzi ye-IPv6 okungekho muntu oyibonile.

Ekugcineni, gcina ukuqinisekisa kuhlukile ekufinyelelekeni. Ukuqinisekisa kwezinga lenethiwekhi, amalungelo e-akhawunti kanye nemikhawulo yokungena kusaquma ukuthi ubani angasebenzisa iseshini, futhi i-firewall inquma kuphela ukuthi ubani angabuza. Ukususa idivayisi kamuva kufanele kususe kokubili ukubhaliswa kwayo kwe-VPN kanye nale mvume yenethiwekhi, ngaphandle kwalokho ikheli olikhawulelayo liyoba ngelomunye umuntu ngelinye ilanga.

Izihloko ezihlobene