Indlela yokudibanisa i-port yenethiwekhi?
2024-09-23 13:25:09
Isiqulatho
1. Yintoni i-Network Port?
I-port yenethiwekhi isiphelo sonxibelelwano esenza ukuba izixhobo zithumele kwaye zifumane idatha. Yicinge njengomnyango ovumela ulwazi ukuba lungene luphume kwinkqubo. Izixhobo, ezinjengeekhompyuter kunye neeseva, zisebenzisa ezi zibuko ukuseka imidibaniso kunye nokudlulisa idatha kwinethiwekhi.
Iintlobo zeZibuko zeNethiwekhi
Kukho iintlobo ngeentlobo zamazibuko womnatha, kodwa ezimbini zezona zixhaphakileyo ngamazibuko e-Ethernet kunye ne-TCP/UDP.
Amazibuko e-Ethernet avumela unxibelelwano lomzimba phakathi kwezixhobo ezisebenzisa iintambo ze-Ethernet. Ezi zisetyenziswa ngokubanzi kuthungelwano lwasekhaya kunye nolweshishini kunxibelelwano lweengcingo.
Izibuko ze-TCP/UDP zizichwephesha ezinengqiqo ezisetyenziselwa ukuchonga iinkqubo okanye iinkonzo ezithile ekuhanjisweni kwedatha. I-TCP (iProtocol yoLawulo loThutho) ithembekile kwaye isetyenziselwa imisebenzi efana nokukhangela iwebhu kunye ne-imeyile. I-UDP (iProtokholi yeDatha yoMsebenzisi) ikhawuleza kodwa ingathembekanga, ihlala isetyenziselwa ukusasaza kunye nokudlala kwi-intanethi.
Amanani ePort
Usetyenziso olwahlukeneyo lunxibelelana ngeenombolo zezibuko ezichazwe kwangaphambili. Umzekelo:
I-HTTP isebenzisa i-port 80 kwi-traffic yewebhu.
I-HTTPS isebenzisa i-port 443 kwi-traffic yewebhu ekhuselekileyo.
I-FTP (iProtocol Transfer Protocol) ihlala isebenzisa izibuko lama-21.
Ngokwazi ukuba zeziphi iizibuko ezisetyenziselwa iinkonzo ezithile, unokulawula kwaye uzifake ngokufanelekileyo.
2. Kutheni i-Patching Network Ports ibalulekile?
Ukuchwetheza izibuko zenethiwekhi kubalulekile ukugcina ukhuseleko kunye nozinzo lwenethiwekhi yakho. Amazibuko angabhalwanga angaveza inkqubo yakho kuluhlu olubanzi lobuthathaka.
Iinkxalabo zoKhuseleko
Amazibuko avulekileyo okanye angafakwanga ayinto eqhelekileyo ekujoliswe kuyo kwi-cyberattacks efana ne-port scanning, apho abahlaseli bahlola iinkqubo zamazibuko afikelelekayo, kunye ne-DoS (Denial of Service) ukuhlaselwa okugqithisa iinkqubo nge-traffic. Olu hlaselo lunokukhokelela ekwaphulwa kwedatha, ukulahleka kwenkonzo, okanye ukufikelela okungagunyaziswanga kulwazi olubuthathaka.
Iibugs zeSoftware
Iinkonzo zenethiwekhi ezindala okanye ezingapelwanga zinokuqulatha iibugs ezinokuxhatshazwa ngabahlaseli. Umzekelo, iinguqulelo eziphelelwe lixesha ze-OpenSSL zazisengozini yokuhlaselwa njengeHeartbleed, evumela ukufikelela okungagunyaziswanga kwidatha efihliweyo. Ukuchwetheza rhoqo kuqinisekisa ukuba ezi bugs zilungisiwe kwaye inethiwekhi yakho ihlala ikhuselekile.
Ezona Nkqubo zilungileyo
Ukuqinisekisa ukhuseleko lwamazibuko enethiwekhi yakho, soloko usebenzisa i-firewall ukukhawulela ukufikelela kwiinkonzo ezibalulekileyo kunye nokuphumeza iinkqubo zokubona ukungena (IDS) ukujonga imisebenzi ekrokrelayo. Ukupakisha la mazibuko rhoqo njengenxalenye yesicwangciso esibanzi sokhuseleko kunokunciphisa kakhulu umngcipheko wokuhlaselwa.
Ukuchwetheza izibuko zothungelwano kufuna zombini isoftware kunye nezixhobo zehardware ukulawula ngokufanelekileyo nokubeka iliso kwinethiwekhi yakho.
Isoftware
Izixhobo ezininzi zesoftware zinokukunceda ubeke iliso kwaye uchonge amazibuko asemngciphekweni:
IWireshark sisihlalutyi seprothokholi yenethiwekhi enamandla ekuvumela ukuba uhlole idatha edlula kwinethiwekhi yakho.
I-Nmap isetyenziswa ngokubanzi ukufunyanwa kwenethiwekhi kunye nophicotho lokhuseleko, inika ulwazi oluneenkcukacha malunga namazibuko avulekileyo.
I-Nessus sisixhobo sokuskena sesichengeni esinceda ekuchongeni ubuthathaka kuthungelwano lwakho, kuquka namazibuko angabhalwanga.
Hardware
Xa usebenza ngoqhagamshelo lwenethiwekhi ebonakalayo, ihardware ethile ibalulekile:
Iiphaneli zeepetshi zenethiwekhi zinceda ukulawula uqhagamshelo lwe-Ethernet ezininzi, ukuqinisekisa ukuba inethiwekhi yakho icwangcisiwe kwaye iyakaleka.
Iintambo ze-Ethernet kunye nezixhumi ze-RJ45 ziyimfuneko ekudibaniseni izixhobo ngokusebenzisa izibuko ezibonakalayo.
Ezinye izixhobo
Izixhobo ezongezelelweyo ezinokunceda ziquka:
Inethiwekhi yokuxilonga izixhobo zokusombulula imiba.
Patch iintambo zokudibanisa izixhobo ngokuthe ngqo.
Isixhobo se-crimping sokulungiselela iintambo zenethiwekhi yesiko.
Ezi zixhobo zidityanisiwe zikuvumela ukuba uqhoboshe izibuko zenethiwekhi ngokufanelekileyo kwaye uqinisekise ukuba inkqubo yakho ihlala ikhuselekile kwaye isexesheni.
4. ISikhokelo seNyathelo ngeNyathelo sokuPatching i-Network Port
Inyathelo loku-1: Chonga iZibuko zeNethiwekhi ezisesichengeni
Ngaphambi kokuba ubambe i-port yenethiwekhi, inyathelo lokuqala kukuchonga ukuba zeziphi izibuko ezisengozini. Oku kuqinisekisa ukuba iinzame zakho zokubamba zijolise kwaye ziyasebenza.
Ukusebenzisa iNetwork Scanners
Enye yezona ndlela zisebenzayo zokuchonga izibuko ezivulekileyo nezisemngciphekweni kukusebenzisa izikena zothungelwano ezifana neNmap. I-Nmap ihlola inethwekhi yakho kumazibuko avulekileyo kwaye ibonelela ngengxelo eneenkcukacha, iqaqambisa ukuba zeziphi izibuko eziveziweyo nezinokuba sengozini.
Ukusebenzisa iNmap, sebenzisa lo myalelo ulandelayo ukuskena inethiwekhi yakho:
nmap -sV
Lo myalelo udwelisa onke amazibuko avuliweyo, iinkonzo ezisebenza kula mazibuko, kunye noguqulelo lwesoftware esetyenziswayo.
Firewall Logs
Enye indlela kukuhlalutya i-firewall logs zakho. Iifirewall zingena kwitrafikhi engenayo nephumayo, kuquka naziphi na iinzame zokufikelela kumazibuko avulekileyo. Ngokuphonononga ezi logs, unokuchonga umsebenzi okrokrelayo okanye iinzame eziphindaphindiweyo zokuqhagamshela kumazibuko asesichengeni. Oku kuluncedo kakhulu ekuboneni iinzame zokukhangela izibuko ezinokwenzeka ngabahlaseli.
Uvavanyo lweManuwali
Ukufumana indlela yokujonga ngakumbi, unokuvavanya izibuko zenethiwekhi ngesandla usebenzisa izixhobo ezifana ne-telnet okanye i-netstat:
I-Telnet: Esi sixhobo somgca womyalelo sikuvumela ukuba uvavanye ukuba izibuko elithile livuliwe kumatshini okude. Umzekelo:
I-Netstat: Sebenzisa esi sixhobo ukujonga imidibaniso esebenzayo kunye namazibuko okuphulaphula kumatshini wakho wasekhaya:
netstat -an
Ezi ndlela zikunika ulawulo lwegranular ngaphezulu koxilongo lwenethiwekhi yakho.
Inyathelo 2: Khuphela iiPatches eziyimfuneko okanye uHlaziyo
Nje ukuba uchonge amazibuko asemngciphekweni, inyathelo elilandelayo kukuqokelela amabala ayimfuneko okanye uhlaziyo lokuwalungisa.
Uhlaziyo lomthengisi
Khangela uhlaziyo oluvela kumthengisi wesoftware onoxanduva lwenkonzo esebenza kwizibuko elisengozini. Abathengisi abanjengoMicrosoft, iCisco, kunye nokuhanjiswa kweLinux okwahlukeneyo rhoqo bakhupha uhlaziyo lokhuseleko olulungisa ubuthathaka. Olu hlaziyo luhlala lubandakanya iipetshi zeenkonzo zenethiwekhi ezinokuvezwa ngamazibuko avulekileyo.
Uhlaziyo lweFirmware
Ungalibali ukujonga uhlaziyo lwe-firmware yehardware yenethiwekhi yakho, efana neerotha, iiswitshi, okanye iifirewall. I-firmware yakudala inokuba nobuthathaka obushiya izibuko zivuliwe okanye ziqwalaselwe ngendlela engafanelekanga. Ndwendwela iwebhusayithi yomenzi ukukhuphela iinguqulelo ze-firmware zamva nje kwaye uzisebenzise kwihardware yakho.
Ukuchwetheza iSoftware
Unako kwakhona ukukhuphela iipetshi kwimithombo ehloniphekileyo efana ne-CVE yogcino-lwazi (i-Common Vulnerabilities and Exposures), edwelisa ubuthathaka obaziwayo kunye nezisombululo zabo. Qinisekisa ukuba uqinisekisa ubunyani beepetshi ukunqanda ukukhuphela iifayile ezinobungozi okanye ezonakalisiweyo.
Inyathelo 3: Faka iPatch okanye uTshintsho loLungiselelo
Ngamapetshi ayimfuneko kunye nohlaziyo olusesandleni, lixesha lokuzisebenzisa kwaye uqwalasele useto lwakho lwenethiwekhi.
Okuzenzekelayo vs. UkuPatching ngesandla
Unokufaka iipetshi ngokuzenzekelayo okanye ngesandla.
Ukuchwetheza okuzenzekelayo kulula, njengoko uninzi lweenkqubo zokusebenza kunye neepakethe zesoftware zinokuqwalaselwa ukukhuphela kunye nokusebenzisa uhlaziyo ngokuzenzekelayo. Izixhobo ezifana ne-WSUS (IiNkonzo zoHlaziyo lweSeva yeWindows) kunye neSolarWinds zinokuzenza ngokuzenzekelayo inkqubo yokuchwetheza kuthungelwano lweshishini.
Ukuchwetheza ngesandla kukunika ulawulo olungaphezulu kodwa kufuna ukuba ukhuphele kwaye uzifakele iipetshi ngokwakho. Le ndlela ithatha ixesha elininzi kodwa iqinisekisa ukuba uyalwazi lonke utshintsho olwenziwe kwinkqubo yakho.
Qwalasela iiFirewall kunye neeRouters
Ukongeza kwisoftware yokuchwetheza, kufuneka uqwalasele iifirewall zakho kunye neerotha ukuvala okanye ukuthintela ukufikelela kumazibuko avulekileyo.
Nali inyathelo ngenyathelo isikhokelo esilula:
1.Fikelela kwi-firewall interface: Ngena kwiphaneli yoqwalaselo lwefirewall yakho.
2.Khangela amazibuko avulekileyo: Hamba uye kwicandelo apho unokulawula ukufikelela kwizibuko.
3.Vala amazibuko angeyomfuneko: Khubaza amazibuko angasebenziyo okanye ayimfuneko.
4.Yongeza imithetho ye-firewall: Yenza imithetho evumela kuphela i-traffic esuka kwiidilesi ze-IP ezithembekileyo okanye uthungelwano oluthile.
5.Gcina kwaye usebenzise iisetingi: Wakuba ugqibile, qiniseka ukuba uyagcina kwaye uvavanye useto lwakho olutsha.
Qinisekisa Utshintsho
Emva kokufaka ipatch okanye ukutshintsha ulungelelwaniso, kubalulekile ukuqinisekisa ukuba utshintsho luye lwasebenza. Sebenzisa izixhobo zokubeka iliso kuthungelwano ezifana neNmap okanye iWireshark ukuphinda uskena umsebenzi wothungelwano kwaye uqinisekise ukuba ubuthathaka buchongiwe. Jonga imiqondiso yokuba amazibuko awayekade esemngciphekweni ngoku akhuselekile okanye avaliwe.
Inyathelo 4: Vavanya iPort ePatched
Uvavanyo yinxalenye ebalulekileyo yenkqubo yokuchwetheza ukuqinisekisa ukuba izilungiso ezisetyenzisiweyo ziyasebenza.
Iimvavanyo zePost-Patching
Emva kokuba isiqwenga sisetyenzisiwe, phinda uskena inethiwekhi yakho usebenzisa i-Nmap okanye izixhobo ezifanayo ukuqinisekisa ukuba amazibuko asesichengeni awasavezwa.
Baleka:
nmap -sV
Qinisekisa ukuba iinguqulelo zenkonzo zihlaziyiwe kwaye nawaphi na amazibuko angeyomfuneko avaliwe ngoku.
Sebenzisa iZixhobo zoVavanyo lokuNgena
Kuvavanyo olunzulu, cinga ukusebenzisa izixhobo zovavanyo lokungena njengeMetasploit ukulinganisa uhlaselo kwinethiwekhi ekhutshiweyo. Ezi zixhobo zikuvumela ukuba uqinisekise ukuba izibuko zakho zenethiwekhi zikhuselekile ngokufanelekileyo ngokuchasene nezoyikiso zehlabathi lokwenyani. Ukuba i-Metasploit ayinakuxhaphaza izibuko ebekade lisengozini, iqinisekisa ukuba isiziba sakho siphumelele.
Network Monitoring
I-PC yeRackmount
Embedded Computing
IiKhompyutha eziphathwayo zoShishino
Amacwecwe aMagingxigingxi
ILaptop eRhagedle
Ipaneli yePC yoShishino
I-Handheld Emagingxigingxi
I-Advantech Industrial PC
