Izixhumanisi zesikhashana zohlu lwama-IP avunyelwe: okuvunyelwa ngempela yilokho

Ukuguqula ukuchofoza okukodwa kube umthetho we-firewall wesikhashana kulula, futhi kwakha uhlelo lokugunyaza olunquma ukuthi ubani angafinyelela isevisi. Likhipha ikheli hhayi umuntu, futhi umehluko lowo ubalulekile ngesikhathi abantu ababili babelana nge-NAT eyodwa. Nciphisa ububanzi bemvume, qinisekisa ngamabomu, futhi wenze ukuphela kwesikhathi kube nencazelo ngaphambi kokwakhiwa kwesixhumanisi. Isinqumo esiphambi kwakho sithi ubeka kuphi umngcele, hhayi ukuthi umngcele kufanele ube khona yini.

Nquma ukuthi imvume iphendula muphi umbuzo

Qala esidingweni. Uma umuntu oqanjiwe kufanele afinyelele isevisi futhi uhlelo seluvele luqinisekisa lowo muntu, isango eliqinisekisiwe ligcina ubunikazi endaweni yokuphoqelela futhi alidingi nhlobo ukwamukelwa kwekheli. Uma okuhlosiwe kuyi-ejenti yokwakha, imbobo yokugxuma yokuphatha noma idivayisi engeke ikwazi ukuhlanganyela ekungeneni komsebenzisi, imvume yekheli enobubanzi obulinganiselwe ingaba ukuphela kokulawula okungokoqobo okutholakalayo.

Ukukhetha ukwamukela ngekheli kuhlelo olubheke kubasebenzisi kudlulisela inkinga yangempela yokugunyaza kwenye indawo, bese ingosi ithola ifa lecala lesikhala engakaze isivale.

Nciphisa isicelo kuseva

Isiphequluli akumele sikhethe indawo okuyiwa kuyo, imbobo noma isiqalo. Ingosi ixazulula isevisi emarekhodini ayo futhi ihlola ilungelo ngokuhlolwa ohlangothini lweseva, okuyisimiso esifanayo leyo umhlahlandlela wokugunyaza we-OWASP ewusebenzisa kuso sonke isicelo. Ukukhishwa kwekheli nakho kungaphansi komngcele ovikelwe: lapho i-proxy ephambene ibika ikheli leklayenti, yamukela kuphela uchungechunge lwama-proxy olumisiwe kanye nokuphathwa kwalo okubhaliwe kwamakhanda. Ikhanda lokudlulisela elinikezwa isivakashi liyisimangalo ngemvelaphi, hhayi ubufakazi bayo.

Bese uhlola ukuthi ingosi nesevisi zibona umthombo ofanayo. Umhubhe ohlukanisiwe, ukugxuma kwe-proxy okukodwa kanye ne-IPv4 uma kuqhathaniswa ne-IPv6 kungase kunikeze izindawo ezimbili amakheli amabili ahlukene, ngakho imvume eyaqalwa ngomzila owodwa ingase ingasibambi isicelo esilandelayo.

Khombisa imvume ngaphambi kokuyifaka

Ukuvula isixhumanisi kufanele kukhombise isevisi ephakanyisiwe, umthombo oboniwe kanye nesikhathi, futhi kungakashintshi lutho okwamanje. Leso sinyathelo esisodwa siguqula isixhumanisi esisuka ku-imeyili sisuka esenzweni sibe isiphakamiso, futhi sivimbela i-bot yokubuka kuqala noma isihlungi se-imeyili ekunikezeni ukufinyelela ngokumane sisilande.

Isiqinisekiso kufanele kube isicelo esishintsha isimo esinezivikelo ezijwayelekile zamawebhusayithi ahlukene kanye nemvelaphi. Ithokheni kufanele isetshenziswe kanye kuphela futhi isetshenziswe ngendlela ye-athomu ngesikhathi kufakwa umthetho, futhi irekhodi kufanele libambe umnikazi, isevisi, ikheli, isihlonzi semvume nokuphela kwesikhathi ngaphandle kokuqopha ithokheni eluhlaza.

Ukulethwa kwethokheni kufanele kube nokunakekela okufana nomthetho uqobo. Isixhumanisi esiphelelwe yisikhathi noma esesisetshenzisiwe esisakhiqiza umthetho siwumnyango wesibili ofakwe ngokhiye ofanayo.

Ikheli labelwana ngisho ngesikhathi imvume isaphila

I-NAT yasehhovisi, i-NAT yenkampani yenethiwekhi kanye nokuphuma kwe-VPN okwabiwe ngakunye kubeka abantu abaningana ngemuva kwekheli elilodwa. Ukwamukela lelo kheli kwamukela bonke abangemuva kwalo — maqondana nomngcele olandelayo wesevisi —, kuyilapho kungafakazi lutho ngokuthi ubani ophethe i-akhawunti elethwa yisevisi.

Ukususa umthetho nakho akukona ukunqamuka kwabo bonke. Izixhumanisi ezisunguliwe, amathokheni ohlelo asegcekeni kanye nezikhathi ezinde zingaphila ngale komthetho ngamaminithi noma isikhathi eside kakhulu, ngakho ubude besikhathi obukhethayo kufanele bubonise okwenziwa yisevisi ngemva kokwamukela hhayi nje ukuthi umthetho ukhona isikhathi esingakanani.

Hlola izimo ezine, kanye nemindeni yamakheli yomibili

Imvume ilungile ngokulingana nezimo ezine eziyidlulayo: isicelo esisha esivunyelwe, umfakisicelo ongagunyaziwe, ukuphindwa kwesixhumanisi esifanayo, kanye nesicelo esifanayo ngemva kokuphela kwesikhathi.

Bese uhlola umndeni ngamunye ngokwehlukana, ngoba ikheli lomthombo elibonwa yisevisi lingase lihluke phakathi kwabo.

dig +short A service.example.com
dig +short AAAA service.example.com
curl -4 -sS -o /dev/null -w "%{http_code}\n" https://service.example.com
curl -6 -sS -o /dev/null -w "%{http_code}\n" https://service.example.com

Umphumela owusizo yisinqumo sokwamukela sesikhashana esingahlolwa ngaphansi kokugunyazwa komsebenzisi okujwayelekile, hhayi ukuvuleka okungunaphakade okuthwala igama lowo oqale wachofoza.