Momwe mungatsegulire doko la netiweki?
2024-09-23 13:25:09
M'ndandanda wazopezekamo
1. Kodi Network Port ndi chiyani?
Doko la netiweki ndi njira yolumikizirana yomwe imathandizira zida kutumiza ndi kulandira data. Lingalirani ngati khomo lomwe limalola chidziwitso kudutsa ndi kutuluka mudongosolo. Zipangizo, monga makompyuta ndi maseva, amagwiritsa ntchito madokowa kukhazikitsa maulalo ndi kusamutsa deta pa netiweki.
Mitundu ya Network Ports
Pali mitundu yosiyanasiyana ya madoko a netiweki, koma awiri omwe amadziwika kwambiri ndi madoko a Efaneti ndi madoko a TCP/UDP.
Madoko a Ethernet amalola kulumikizana kwakuthupi pakati pa zida pogwiritsa ntchito zingwe za Efaneti. Izi zimagwiritsidwa ntchito kwambiri m'nyumba ndi mabizinesi pamalumikizidwe a waya.
Madoko a TCP/UDP ndi madoko omveka bwino omwe amagwiritsidwa ntchito kuzindikira njira kapena ntchito zinazake potumiza deta. TCP (Transmission Control Protocol) ndiyodalirika komanso imagwiritsidwa ntchito ngati kusakatula pa intaneti ndi imelo. UDP (User Datagram Protocol) ndiyofulumira koma yosadalirika, yomwe imagwiritsidwa ntchito nthawi zambiri kutsatsa komanso kusewera pa intaneti.
Nambala za Port
Mapulogalamu osiyanasiyana amalumikizana kudzera mu manambala adoko omwe adadziwika kale. Mwachitsanzo:
HTTP imagwiritsa ntchito port 80 pamayendedwe apa intaneti.
HTTPS imagwiritsa ntchito port 443 kuti ikhale yotetezeka pa intaneti.
FTP (File Transfer Protocol) nthawi zambiri imagwiritsa ntchito port 21.
Podziwa kuti ndi madoko ati omwe amagwiritsidwa ntchito pazinthu zinazake, mutha kuyang'anira ndikuwongolera bwino.
2. Chifukwa chiyani Patching Network Ports Ndikofunikira?
Kuyika ma doko a netiweki ndikofunikira kuti mukhalebe otetezeka komanso okhazikika pamanetiweki anu. Madoko osasindikizidwa amatha kuwonetsa makina anu pazovuta zambiri.
Zokhudza Chitetezo
Madoko otsegula kapena osasindikizidwa ndi omwe amakonda kuwononga ma cyberattack monga kusanthula pamadoko, pomwe achiwembu amafufuza machitidwe a madoko ofikirako, komanso kuwukira kwa DoS (Denial of Service) komwe kumadzaza machitidwe ndi magalimoto. Izi zitha kuyambitsa kuphwanya kwa data, kutayika kwa ntchito, kapena kupeza zidziwitso zachinsinsi popanda chilolezo.
Mapulogalamu Bugs
Ma netiweki akale kapena osasinthidwa akhoza kukhala ndi zolakwika zomwe zitha kugwiritsidwa ntchito ndi omwe akuwukira. Mwachitsanzo, mitundu yakale ya OpenSSL inali pachiwopsezo chowukiridwa ngati Heartbleed, zomwe zimalola mwayi wofikira ku data yobisidwa mosaloledwa. Kukhazikika pafupipafupi kumatsimikizira kuti zolakwikazi zakonzedwa ndipo netiweki yanu imakhala yotetezeka.
Zochita Zabwino Kwambiri
Kuti mutsimikizire chitetezo cha madoko anu a netiweki, nthawi zonse mugwiritseni ntchito zozimitsa moto kuti muchepetse mwayi wopezeka pazithandizo zofunika kwambiri komanso kukhazikitsa ma intrusion monitoring system (IDS) kuti muyang'anire zochitika zokayikitsa. Kuyika madoko awa pafupipafupi ngati gawo lachitetezo chokwanira kumatha kuchepetsa kwambiri chiwopsezo cha kuwukira.
Kuyika ma doko a netiweki kumafuna zida zonse zamapulogalamu ndi ma hardware kuti muzitha kuyang'anira bwino maukonde anu.
Mapulogalamu
Zida zingapo zamapulogalamu zimatha kukuthandizani kuyang'anira ndikuzindikira madoko omwe ali pachiwopsezo:
Wireshark ndi makina osanthula ma protocol amphamvu omwe amakulolani kuti muyang'ane zomwe zikuyenda pa intaneti yanu.
Nmap imagwiritsidwa ntchito kwambiri pakuzindikira ma netiweki komanso kuwunika kwachitetezo, kupereka zambiri zamadoko otseguka.
Nessus ndi chida chosakira pachiwopsezo chomwe chimakuthandizani kuzindikira zofooka mu netiweki yanu, kuphatikiza madoko omwe sanatumizidwe.
Zida zamagetsi
Mukamagwira ntchito ndi ma network akuthupi, zida zina ndizofunikira:
Mapanelo a netiweki amathandizira kuyang'anira maulumikizidwe angapo a Ethernet, kuwonetsetsa kuti maukonde anu akonzedwa komanso owopsa.
Zingwe za Efaneti ndi zolumikizira za RJ45 ndizofunikira pakulumikiza zida kudzera pamadoko akuthupi.
Zida Zina
Zida zowonjezera zomwe zingathandize ndi izi:
Zida zowunikira pa intaneti kuti zithetse mavuto.
Patch zingwe zolumikiza zida mwachindunji.
Chida crimping pokonzekera zingwe zokonda maukonde.
Zida izi zophatikizidwa zimakupatsani mwayi wolumikiza madoko a netiweki bwino ndikuwonetsetsa kuti makina anu amakhala otetezeka komanso atsopano.
4. Mtsogoleli wa Tsatanetsatane wa Patching Network Port
Khwerero 1: Dziwani Madoko Osatetezeka pa Network
Musanayambe kulumikiza doko la netiweki, gawo loyamba ndikuzindikira madoko omwe ali pachiwopsezo. Izi zimawonetsetsa kuti zoyeserera zanu zizikhala zolunjika komanso zothandiza.
Kugwiritsa ntchito Network Scanners
Njira imodzi yabwino yodziwira madoko otseguka komanso osatetezeka ndikugwiritsa ntchito makina ojambulira pa intaneti monga Nmap. Nmap imayang'ana maukonde anu kuti muwone madoko otseguka ndikupereka lipoti latsatanetsatane, kuwunikira madoko omwe ali pachiwopsezo komanso omwe angakhale pachiwopsezo.
Kuti mugwiritse ntchito Nmap, ingoyendetsani lamulo ili kuti muwone maukonde anu:
nmap -sV
Lamuloli limatchula madoko onse otseguka, ntchito zomwe zikuyenda pamadoko amenewo, ndi mtundu wa pulogalamu yomwe ikugwiritsidwa ntchito.
Zolemba za Firewall
Njira ina ndikusanthula zipika zanu za firewall. Ma firewall amalowetsamo magalimoto obwera ndi otuluka, kuphatikiza kuyesa kulikonse kolowera madoko otseguka. Mwakuwunikanso zipikazi, mutha kuzindikira zochitika zokayikitsa kapena kuyesa mobwerezabwereza kulumikizana ndi madoko omwe ali pachiwopsezo. Izi ndizothandiza kwambiri pakuwunika omwe angayesetse kuyesa ma port omwe akuwukira.
Kuyesa pamanja
Kuti mugwiritse ntchito zambiri, mutha kuyesa madoko apaintaneti pamanja pogwiritsa ntchito zida monga telnet kapena netstat:
Telnet: Chida ichi cholamula chimakulolani kuyesa ngati doko linalake latsegulidwa pamakina akutali. Mwachitsanzo:
Netstat: Gwiritsani ntchito chida ichi kuti muwone kulumikizana komwe kukuchitika komanso madoko omvera pamakina anu am'deralo:
netstat - ndi
Njirazi zimakupatsirani kuwongolera pang'onopang'ono pazowunikira pa intaneti yanu.
Khwerero 2: Tsitsani Zigamba Zofunikira kapena Zosintha
Mukazindikira madoko omwe ali pachiwopsezo, chotsatira ndikusonkhanitsa zigamba zofunika kapena zosintha kuti mukonze.
Zosintha Zamalonda
Yang'anani zosintha kuchokera kwa ogulitsa mapulogalamu omwe ali ndi ntchito zomwe zikuyenda padoko lovuta. Ogulitsa monga Microsoft, Cisco, ndi magawo osiyanasiyana a Linux nthawi zonse amatulutsa zosintha zachitetezo zomwe zimalimbana ndi zovuta. Zosinthazi nthawi zambiri zimakhala ndi zigamba zama netiweki zomwe zimatha kuwonetsedwa kudzera pamadoko otseguka.
Zosintha za Firmware
Musaiwale kuyang'ana zosintha za firmware pamanetiweki zida zanu, monga ma routers, ma switch, kapena ma firewall. Firmware yachikale imatha kukhala ndi zovuta zomwe zimasiya madoko otseguka kapena osakonzedwa bwino. Pitani patsamba la opanga kuti mutsitse mitundu yaposachedwa ya firmware ndikugwiritsa ntchito pazida zanu.
Patching Software
Mutha kutsitsanso zigamba kuchokera kumagwero odziwika bwino monga ma database a CVE (Common Vulnerabilities and Exposures), omwe amalemba zachitetezo chodziwika bwino ndi mayankho ake. Onetsetsani kuti mwatsimikizira zowona za zigambazo kuti musatsitse mafayilo oyipa kapena owonongeka.
Khwerero 3: Ikani Chigamba kapena Zosintha Zosintha
Ndi zigamba zofunika ndi zosintha zili m'manja, ndi nthawi yoti mugwiritse ntchito ndikukonza zokonda zanu pamanetiweki.
Zodziwikiratu vs. Patching Pamanja
Mutha kugwiritsa ntchito zigamba zokha kapena pamanja.
Kuyika pawokha ndikosavuta, chifukwa makina ambiri ogwiritsira ntchito ndi mapulogalamu amatha kukhazikitsidwa kuti atsitse ndikugwiritsa ntchito zosintha zokha. Zida monga WSUS (Windows Server Update Services) ndi SolarWinds zimatha kusintha njira yolumikizira ma network abizinesi.
Kuyika pamanja kumakupatsani mphamvu zambiri koma kumafuna kuti mutsitse ndikuyika zigamba nokha. Njirayi ndiyowononga nthawi koma imawonetsetsa kuti mukudziwa kusintha kulikonse komwe kumachitika pamakina anu.
Konzani ma firewall ndi ma routers
Kuphatikiza pa zigamba mapulogalamu, muyenera kusintha ma firewall anu ndi ma routers kuti atseke kapena kuletsa kulowa madoko otseguka.
Nayi kalozera wosavuta wa tsatane-tsatane:
1.Pezani mawonekedwe a firewall: Lowani ku gulu lokonzekera la firewall yanu.
2.Kupeza madoko otseguka: Yendetsani ku gawo lomwe mungathe kuyang'anira madoko.
3.Tsukani madoko osafunikira: Letsani madoko omwe sagwiritsidwa ntchito mwachangu kapena ofunikira.
4.Add malamulo a firewall: Pangani malamulo omwe amalola magalimoto kuchokera ku ma adilesi odalirika a IP kapena maukonde ena.
5.Save ndi kugwiritsa ntchito zoikamo: Mukamaliza, onetsetsani kusunga ndi kuyesa makonda anu atsopano.
Tsimikizirani Zosintha
Mukatha kugwiritsa ntchito chigamba kapena kusintha masinthidwe, ndikofunikira kutsimikizira kuti zosinthazo zayamba kugwira ntchito. Gwiritsani ntchito zida zowunikira ma netiweki monga Nmap kapena Wireshark kuti muyang'anenso netiweki ndikuwonetsetsa kuti zofooka zatsekedwa. Yang'anani zizindikiro zosonyeza kuti madoko omwe kale anali pachiwopsezo tsopano ndi otetezeka kapena otsekedwa.
Khwerero 4: Yesani Port Yokhazikika
Kuyesa ndi gawo lofunika kwambiri pakupanga zigamba kuti zitsimikizidwe kuti zokonzedwazo zikugwira ntchito.
Mayeso a Post-Patching
Chigambacho chikagwiritsidwa ntchito, yang'ananinso maukonde anu pogwiritsa ntchito Nmap kapena zida zofananira kuti muwonetsetse kuti madoko omwe ali pachiwopsezo sakuwonekeranso.
Thamangani:
nmap -sV
Onetsetsani kuti mitundu yantchitoyo yasinthidwa komanso kuti madoko aliwonse osafunikira atsekedwa.
Gwiritsani Ntchito Zida Zoyesera Zolowera
Kuti muwunike mozama, lingalirani kugwiritsa ntchito zida zoyesera zolowera ngati Metasploit kuti muyesere kuwukira pa netiweki yolumikizidwa. Zida izi zimakupatsani mwayi wotsimikizira kuti madoko anu amtaneti ali otetezedwa bwino motsutsana ndi zoopsa zenizeni. Ngati Metasploit sangathe kugwiritsa ntchito doko lomwe linali pachiwopsezo, zimatsimikizira kuti chigamba chanu chidachita bwino.
Network Monitoring
Rackmount PC
Makompyuta Ophatikizidwa
Industrial Portable Computers
Mapiritsi Olimba
Laputopu yolimba
Industrial Panel PC
Chogwirizira Chamanja Cholimba
Advantech Industrial PC
