Yadda ake facin tashar sadarwa?
2024-09-23 13:25:09
Teburin Abubuwan Ciki
1. Menene tashar tashar sadarwa?
Tashar tashar sadarwa shine ƙarshen sadarwa wanda ke bawa na'urori damar aikawa da karɓar bayanai. Yi la'akari da shi azaman ƙofar da ke ba da damar bayanai don shiga da fita daga cikin tsarin. Na'urori, kamar kwamfutoci da sabobin, suna amfani da waɗannan tashoshin jiragen ruwa don kafa haɗin gwiwa da canja wurin bayanai akan hanyar sadarwa.
Nau'in Tashoshin Sadarwar Sadarwa
Akwai nau'ikan tashoshin sadarwa iri-iri, amma biyu na gama gari sune tashoshin Ethernet da tashoshin TCP/UDP.
Tashar jiragen ruwa na Ethernet suna ba da damar haɗin jiki tsakanin na'urori masu amfani da igiyoyin Ethernet. Ana amfani da waɗannan ko'ina a cikin gida da cibiyoyin sadarwar kasuwanci don haɗin waya.
Tashoshin TCP/UDP tashar jiragen ruwa ne na ma'ana da ake amfani da su don gano takamaiman matakai ko ayyuka a cikin watsa bayanai. TCP (Transmission Control Protocol) abin dogara ne kuma ana amfani dashi don ayyuka kamar binciken yanar gizo da imel. UDP (Masu amfani Datagram Protocol) yana da sauri amma ba abin dogaro ba, galibi ana amfani dashi don yawo da wasan kan layi.
Lambobin tashar jiragen ruwa
Aikace-aikace daban-daban suna sadarwa ta hanyar ƙayyadaddun lambobin tashar jiragen ruwa. Misali:
HTTP yana amfani da tashar jiragen ruwa 80 don zirga-zirgar yanar gizo.
HTTPS yana amfani da tashar jiragen ruwa 443 don amintaccen zirga-zirgar yanar gizo.
FTP (Ka'idar Canja wurin Fayil) galibi tana amfani da tashar jiragen ruwa 21.
Ta hanyar sanin waɗanne tashoshin jiragen ruwa ne ake amfani da su don takamaiman ayyuka, zaku iya sarrafa su da facin su yadda ya kamata.
2. Me yasa Patching Network Ports ke da Muhimmanci?
Daidaita tashoshin sadarwa na cibiyar sadarwa yana da mahimmanci don kiyaye tsaro da kwanciyar hankalin hanyar sadarwar ku. Tashar jiragen ruwa da ba a buɗe ba na iya fallasa tsarin ku zuwa ga rashin lahani da yawa.
Damuwar Tsaro
Buɗaɗɗen ko buɗe tashoshin jiragen ruwa sune makasudin gama gari na hare-hare ta yanar gizo kamar bincika tashar jiragen ruwa, inda masu satar bayanai ke bincika tsarin tashoshin jiragen ruwa masu isa, da DoS (Denial of Service) hare-haren da ke mamaye tsarin tare da zirga-zirga. Waɗannan hare-haren na iya haifar da keta bayanai, asarar sabis, ko samun dama ga mahimman bayanai mara izini.
Bugs software
Tsofaffi ko sabis na cibiyar sadarwa na iya ƙunsar kwari waɗanda maharan za su iya amfani da su. Misali, tsoffin juzu'in OpenSSL sun kasance masu rauni ga hare-hare kamar Heartbleed, wanda ya ba da damar shiga bayanan rufaffiyar mara izini. Faci na yau da kullun yana tabbatar da gyarawar waɗannan kurakuran kuma cibiyar sadarwar ku ta kasance amintacciya.
Mafi kyawun Ayyuka
Don tabbatar da tsaron tashar jiragen ruwa na cibiyar sadarwar ku, koyaushe yi amfani da tacewar wuta don ƙuntata samun dama ga ayyuka masu mahimmanci da aiwatar da tsarin gano kutse (IDS) don sa ido kan ayyukan da ake tuhuma. Daidaita waɗannan tashoshin jiragen ruwa akai-akai a matsayin wani ɓangare na ingantacciyar dabarun tsaro na iya rage haɗarin hare-hare.
Daidaita tashar jiragen ruwa na cibiyar sadarwa yana buƙatar kayan aikin software da kayan masarufi don sarrafa da saka idanu akan hanyar sadarwar ku yadda ya kamata.
Software
Kayan aikin software da yawa na iya taimaka maka saka idanu da gano mashigai masu rauni:
Wireshark shine mai nazarin ka'idojin cibiyar sadarwa mai ƙarfi wanda ke ba ku damar bincika bayanan da ke wucewa ta hanyar sadarwar ku.
Ana amfani da Nmap sosai don gano hanyar sadarwa da duba tsaro, yana ba da cikakkun bayanai game da buɗe tashoshin jiragen ruwa.
Nessus kayan aikin bincike ne na rashin lahani wanda ke taimakawa gano rauni a cikin hanyar sadarwar ku, gami da tashoshin jiragen ruwa marasa faci.
Hardware
Lokacin aiki tare da haɗin yanar gizo na zahiri, wasu kayan masarufi suna da mahimmanci:
Faci na hanyar sadarwa yana taimakawa sarrafa haɗin Ethernet da yawa, yana tabbatar da an tsara hanyar sadarwar ku kuma mai daidaitawa.
Kebul na Ethernet da masu haɗin RJ45 wajibi ne don haɗa na'urori ta hanyar tashoshin jiki.
Sauran Kayayyakin
Ƙarin kayan aikin da za su iya taimakawa sun haɗa da:
Kayan aikin bincike na hanyar sadarwa don magance al'amura.
Faci igiyoyi don haɗa na'urori kai tsaye.
A crimping kayan aiki don shirya al'ada cibiyar sadarwa igiyoyi.
Waɗannan kayan aikin da aka haɗa suna ba ku damar daidaita tashoshin sadarwa yadda ya kamata kuma tabbatar da cewa tsarin ku ya kasance amintacce kuma na zamani.
4. Jagoran mataki-mataki don daidaita tashar tashar sadarwa
Mataki 1: Gano Tashoshin Sadarwar Sadarwar Wuta
Kafin yin facin tashar jiragen ruwa, mataki na farko shine gano ko waɗanne tashoshin jiragen ruwa ne masu rauni. Wannan yana tabbatar da cewa ƙoƙarin facin ku yana da niyya da tasiri.
Amfani da Network Scanners
Ɗaya daga cikin ingantattun hanyoyin gano buɗaɗɗen tashar jiragen ruwa da masu rauni shine ta hanyar amfani da na'urar daukar hotan takardu kamar Nmap. Nmap yana duba hanyar sadarwar ku don buɗe tashoshin jiragen ruwa kuma yana ba da cikakken rahoto, yana nuna waɗanne tashoshin jiragen ruwa ne aka fallasa kuma masu yuwuwar rauni.
Don amfani da Nmap, kawai gudanar da umarni mai zuwa don bincika hanyar sadarwar ku:
nmap -sV
Wannan umarnin ya lissafa duk buɗe tashoshin jiragen ruwa, ayyukan da ke gudana akan waɗancan tashoshin jiragen ruwa, da sigar software da ake amfani da ita.
Tacewar zaɓi
Wata hanya ita ce bincika rajistan ayyukan Tacewar zaɓi. Firewalls na shigar da zirga-zirga masu shigowa da masu fita, gami da duk wani yunƙurin samun damar buɗe tashoshin jiragen ruwa. Ta hanyar bitar waɗannan rajistan ayyukan, zaku iya gano ayyukan da ake tuhuma ko maimaita ƙoƙarin haɗawa zuwa tashar jiragen ruwa masu rauni. Wannan yana da amfani musamman don gano yuwuwar yunƙurin bincikar tashar jiragen ruwa daga maharan.
Gwajin Manual
Don ƙarin hanyar hannu, zaku iya gwada tashar jiragen ruwa ta hanyar amfani da kayan aiki kamar telnet ko netstat:
Telnet: Wannan kayan aikin layin umarni yana ba ku damar gwada idan takamaiman tashar jiragen ruwa ta buɗe akan na'ura mai nisa. Misali:
Netstat: Yi amfani da wannan kayan aikin don bincika haɗin kai mai aiki da tashar jiragen ruwa akan na'urar ku:
netstat - an
Waɗannan hanyoyin suna ba ku ƙarin iko akan binciken cibiyar sadarwar ku.
Mataki 2: Zazzage Mahimman Faci ko Sabuntawa
Da zarar kun gano mashigai masu rauni, mataki na gaba shine tattara faci ko sabuntawa don gyara su.
Sabuntawar Dillali
Bincika sabuntawa daga mai siyar software da ke da alhakin sabis ɗin da ke gudana akan tashar jiragen ruwa mai rauni. Masu tallace-tallace irin su Microsoft, Cisco, da rarrabawar Linux daban-daban suna sakin sabuntawar tsaro akai-akai wanda ke magance raunin. Waɗannan sabuntawa galibi sun haɗa da faci don ayyukan cibiyar sadarwa waɗanda ƙila za a iya fallasa su ta hanyar buɗe tashoshin jiragen ruwa.
Sabunta Firmware
Kar a manta don bincika sabuntawar firmware don kayan aikin cibiyar sadarwar ku, kamar masu amfani da hanyar sadarwa, masu sauyawa, ko tacewar wuta. Tsohuwar firmware na iya samun lahani waɗanda ke barin tashoshin jiragen ruwa a buɗe ko kuma ba a daidaita su da kyau ba. Ziyarci gidan yanar gizon masana'anta don zazzage sabbin nau'ikan firmware kuma amfani da su zuwa kayan aikin ku.
Faci Software
Hakanan zaka iya zazzage faci daga tushe masu daraja kamar bayanan bayanai na CVE (Launuka na yau da kullun da faɗuwa), waɗanda ke lissafin sanannun raunin da mafitarsu. Tabbatar da tabbatar da sahihancin facin don guje wa zazzage qeta ko gurbatattun fayiloli.
Mataki na 3: Aiwatar da Faci ko Canje-canje na Kanfigareshan
Tare da mahimman faci da sabuntawa a hannu, lokaci yayi da za a yi amfani da su da daidaita saitunan cibiyar sadarwar ku.
Atomatik vs. Manual Patching
Kuna iya amfani da faci ta atomatik ko da hannu.
Faci ta atomatik yana da sauƙi, saboda yawancin tsarin aiki da fakitin software ana iya saita su don saukewa da aiwatar da sabuntawa ta atomatik. Kayan aiki kamar WSUS (Sabis na Sabunta Windows Server) da SolarWinds na iya sarrafa tsarin faci don cibiyoyin sadarwa.
Faci na hannu yana ba ku ƙarin iko amma yana buƙatar ku zazzagewa da shigar da faci da kanku. Wannan hanyar ta fi ɗaukar lokaci amma tana tabbatar da cewa kuna sane da kowane canji da aka yi ga tsarin ku.
Saita Firewalls da Routers
Baya ga facin software, yakamata ku saita tawul ɗin tawul ɗinku da masu amfani da hanyar sadarwa don rufewa ko hana damar buɗe tashoshin jiragen ruwa.
Ga jagorar mataki-by-steki mai sauƙi:
1.Access da Tacewar zaɓi dubawa: Log in to your Tacewar zaɓi ta sanyi panel.
2.Locate the open ports: Kewaya zuwa sashin da za ku iya sarrafa tashar tashar jiragen ruwa.
3.Rufe tashoshin da ba dole ba: Kashe tashar jiragen ruwa waɗanda ba sa aiki da ƙarfi ko buƙata.
4.Ƙara dokokin wuta: Ƙirƙiri dokoki waɗanda ke ba da izinin zirga-zirga daga amintattun adiresoshin IP ko wasu cibiyoyin sadarwa.
5.Save and apply settings: Da zarar kun gama, tabbatar da adanawa da gwada sabbin saitunan ku.
Tabbatar da Canje-canje
Bayan amfani da facin ko canza saiti, yana da mahimmanci don tabbatar da cewa canje-canjen sun yi tasiri. Yi amfani da kayan aikin sa ido na cibiyar sadarwa kamar Nmap ko Wireshark don sake duba hanyar sadarwar da kuma tabbatar da cewa an daidaita lahani. Nemo alamun cewa tashoshin jiragen ruwa masu rauni a baya sun kasance amintacce ko kuma a rufe.
Mataki na 4: Gwada Tashar Tashar Faci
Gwaji wani muhimmin sashi ne na tsarin faci don tabbatar da gyare-gyaren da aka yi amfani da su suna da tasiri.
Gwaje-gwajen Bayan-Patching
Bayan an yi amfani da facin, sake bincika hanyar sadarwar ku ta amfani da Nmap ko makamantan kayan aikin don tabbatar da cewa ba a fallasa tashoshin jiragen ruwa masu rauni.
Gudu:
nmap -sV
Tabbatar cewa an sabunta nau'ikan sabis ɗin kuma cewa duk wani tashar jiragen ruwa mara amfani yanzu an rufe su.
Yi amfani da Kayan Gwajin Shiga
Don ƙima mai zurfi, yi la'akari da yin amfani da kayan aikin gwajin shiga kamar Metasploit don kwaikwayi hare-hare akan hanyar sadarwar da aka fachi. Waɗannan kayan aikin suna ba ku damar tabbatar da cewa tashoshin sadarwar ku suna da tsaro da kyau daga barazanar gaske. Idan Metasploit ba zai iya yin amfani da tashar jiragen ruwa mai rauni a baya ba, yana tabbatar da cewa facin ku ya yi nasara.
Kulawar hanyar sadarwa
Rackmount PC
Ƙwararren Ƙwararren Ƙwaƙwalwa
Kwamfutoci masu ɗaukar nauyi na Masana'antu
Allunan masu karko
Laptop mai karko
PC panel panel
Rigar Hannu
Advantech Industrial PC
