I-RDP iyayeka ngemva kokufaka iklayenti le-VPN? I-firewall inecala

Emizuzwini embalwa ngemva kokuba iklayenti le-VPN lomsebenzisi liqede ukufakwa, ingosi isasho ukuthi i-VM iyasebenza, i-IP yomphakathi ayikashintshi, futhi i-RDP ayiphenduli. Abantu bavame ukucabanga ukuthi i-VM iwile noma ukuthi iqembu lokuvikela inethiwekhi lishintshile, futhi kokubili ngokuvamile akulungile. Okushintshile iphrofayela ye-firewall ye-Windows okukuyo umshini, futhi umthetho we-RDP owawuhambisana ngaphambili awusahambisani. Ukulungiswa kuqala ngokuthola i-shell ngendlela engancikile ku-RDP.

I-VM iyasebenza; umthetho uyekile ukuvumelana

Imitherho ye-firewall ku-Windows ithwala isethi yamaphrofayela, futhi umthetho okhawulelwe ku-Private noma ku-Domain awunawo umphumela ngesikhathi umshini usekuphrofayela ye-Public. Izifaki ze-VPN zengeza ama-adaptha nemikhondo, futhi eziningi zazo ziqinisa i-Public njengomphumela wesibili. Isilaleli sihlala siboshelwe ku-3389 futhi amaphakethe asafika, kodwa ukungavumelani kwephrofayela kuwalahla.

Isimo samandla nokufinyeleleka kuyiqiniso elihlukile, futhi i-VM esebenzayo enepothedi evaliwe ibonakala ngaphandle njengeyiwile.

Hlola ipothedi ngaphambi kokushintsha noma yini. Umzamo wokuxhuma ku-3389 ophela ngesikhathi ngesikhathi umyalo wommeleli wesivakashi usabuyisela okukhiphayo ukhomba ku-firewall yomsingathi. Ipothedi ephendulayo kodwa i-RDP isahluleka kusho ukuthi iphutha lingaphezu kwengqimba yenethiwekhi, futhi lokhu kulungisa ngeke kuyithinte. Bhala ukuthi yikuphi kulezi zimo ezimbili oyibonile, ngoba uhlelo olusele luncike kukho.

Amasango amabili avalwa ngokuzimela

Inqubomgomo yengqalasizinda isebenza kuqala: iqembu lokuvikela inethiwekhi libona iphakethe ngaphambi kwesivakashi. Lolo hlelo lwenza ukufakwa kwe-NSG okuphelele kungabi namsizo lapho umsingathi elahla iphakethe, futhi umthetho ovulekile womsingathi ungabi namsizo lapho ingqalasizinda iwala. Zithathe njengamasango ahlukile futhi uhlole ngalinye ngokwalo.

Funda imitherho esebenzayo ye-NSG engosini noma ku-CLI, bese uyiqhathanisa nemitherho yesivakashi ngokwaso. Ungacabangi ukuthi ushintsho lokugcina olukhumbulayo yilona olwaqala ukusebenza.

Iklayenti lomsebenzisi lingafaka futhi umshayeli wesihlungi noma iswishi yokucisha evimba ithrafikhi ngaphansi kwe-firewall ye-Windows. Uma imitherho ye-firewall ibonakala ilungile kodwa ipothedi isahluleka, lolo ngqimba yilona olusolwayo olulandelayo.

Sebenzisa ummeleli wesivakashi njengendlela yokubuya

Izici ezimbili zokusebenza kude, i-Run Command ne-Custom Script Extension, zisebenza ngaphakathi kwesivakashi ngommeleli wengqalasizinda. Azikho ezidinga i-RDP, ngakho iphutha le-firewall alizithinti. Zombili zibuyisela okukhiphayo kombhalo, okuzenza zibe yisiteshi sokuxilonga nesokulungisa ngesikhathi esisodwa.

Funda iphrofayela esebenzayo nomthetho we-RDP ngaphambi kokushintsha okukodwa kwazo:

Get-NetConnectionProfile
Get-NetFirewallRule -DisplayGroup "Remote Desktop" | Select-Object Name, Enabled, Profile

Ukuvula kabusha imithetho yokungena kuleyo phrofayela kuyisinyathelo sesikhashana, akusona umgomo. Kusebenzise ukuthola isikhathi somsebenzi, bese uvala imbobo ngendlela efanele:

Set-NetFirewallProfile -Name Public -AllowInboundRules True

Leso swishi sivula yonke imithetho yokungena kuphrofayela, hhayi i-RDP kuphela. Uma usunomhlangano, shintsha ususe ngomthetho okhawulelwe bese ubuyisela izilungiselelo ozifunayo ngempela. Uma ummeleli nawo ungatholakali, ikhonsoli yochungechunge noma idiski elakhiwe kabusha kuyisiphele, futhi leso yisizathu esingokoqobo sokugcina ummeleli ephilile.

Nciphisa imbobo ngaphambi kokuvala umhlangano

Ushintsho lwephrofayela lwesikhashana luwumnyango ogcinwa uvulekile kuwo wonke umthetho wokungena wale phrofayela. Shintsha ususe ngomthetho okhawulelwe ekhelini lakho lomthombo napothedi we-RDP, bese uqinisekisa ukuthi iphrofayela ibuyele esimweni ebesihlosiwe. Kwenze lokhu ngesikhathi usanomhlangano, ngoba iphutha elilandelayo kungenzeka lingenakulungiseka kude. Gcina enye indlela yokuphatha efana ne-Bastion noma ikhonsoli yochungechunge ilungile ngesikhathi soshintsho.

Qinisekisa umphumela esiteshini sakho somsebenzi ngokuhlolwa kwepothedi, futhi ngaphakathi kwesivakashi ngohlu lwemithetho:

Test-NetConnection -ComputerName 203.0.113.25 -Port 3389
Get-NetFirewallRule -DisplayName "RDP from admin" | Get-NetFirewallPortFilter

Vula ukuloga kwe-firewall isikhathi sonke sokuhlola. Umugqa owodwa mayelana nephakethe elahliwe okhuluma ngo-3389 nephrofayela esebenzayo uphendula umbuzo ngokushesha kunokuqalisa kabusha okunye.

Vimbela isifaki esilandelayo ukuba singaphindi senze lokho

Uma lowo msingathi ungenasizathu sokusebenzisa iklayenti, sikhuphe. Iklayenti elifakiwe liyisimemo esihlala njalo sokuthi isibuyekezo esilandelayo siphinde sibhale iphrofayela, futhi umuntu olandelayo uzolungisa ukunqamuka okufanayo engosini.

Thatha isithombe sediski ngaphambi kokuvumela noma yini ukuthi ibhale kabusha izilungiselelo zenethiwekhi, futhi gcina enye indlela yokuphatha ilungile ngaphambi kokuba uyidinge.

Bhala ukuthi isifaki sashintsha ini: ama-adaptha, imikhondo, amaphrofayela e-firewall, abashayeli besihlungi kanye nezinsizakalo. Lolo rekhodi lwenza isigameko esilandelayo sibe yiphethini eyaziwayo esikhundleni sophenyo olusha. Uma i-VM idinga ithaneli eya kunsizakalo eyodwa ncamashi, beka iklayenti esiteshini sakho somsebenzi noma wakhe isixhumanisi samasayithi amabili esikhundleni sokufaka umkhiqizo wekhompyutha ephathwayo kuseva. Amaklayenti omsebenzisi aqondiswe kumakhompyutha aphathwayo, futhi iseva oyiphatha kude ayiyona leyo.