Unganamathisela kanjani imbobo yenethiwekhi?
2024-09-23 13:25:09
Okuqukethwe
1. Yini Imbobo Yenethiwekhi?
Imbobo yenethiwekhi iyindawo yokuxhumana evumela amadivayisi ukuthi athumele futhi amukele idatha. Kucabange njengomnyango ovumela ulwazi ukuthi lungene luphume ohlelweni. Amadivayisi, njengamakhompyutha namaseva, asebenzisa lezi zimbobo ukuze asungule ukuxhumana nokudlulisa idatha ngenethiwekhi.
Izinhlobo zamachweba wenethiwekhi
Kunezinhlobo ezahlukene zamachweba enethiwekhi, kodwa ezimbili ezivame kakhulu izimbobo ze-Ethernet kanye nezimbobo ze-TCP/UDP.
Izimbobo ze-Ethernet zivumela ukuxhumana okubonakalayo phakathi kwamadivayisi asebenzisa izintambo ze-Ethernet. Lezi zisetshenziswa kabanzi kuwo womabili amanethiwekhi asekhaya nawebhizinisi ekuxhumekeni kwezintambo.
Izimbobo ze-TCP/UDP ziyizimbobo ezinengqondo ezisetshenziselwa ukukhomba izinqubo ezithile noma amasevisi ekudlulisweni kwedatha. I-TCP (Transmission Control Protocol) ithembekile futhi isetshenziselwa imisebenzi efana nokuphequlula iwebhu kanye ne-imeyili. I-UDP (User Datagram Protocol) iyashesha kodwa ithembekile kancane, ivame ukusetshenziselwa ukusakaza nokudlala ku-inthanethi.
Izinombolo Zechweba
Izinhlelo zokusebenza ezahlukene zixhumana ngezinombolo zembobo ezichazwe ngaphambilini. Ngokwesibonelo:
I-HTTP isebenzisa imbobo engu-80 kuthrafikhi yewebhu.
I-HTTPS isebenzisa imbobo engu-443 ukuthola ithrafikhi yewebhu evikelekile.
I-FTP (i-File Transfer Protocol) ivamise ukusebenzisa i-port 21.
Ngokwazi ukuthi yiziphi izimbobo ezisetshenziselwa izinsizakalo ezithile, ungaphatha futhi uzipekeshe ngempumelelo.
2. Kungani Ukuhlanganisa Izimbobo Zenethiwekhi Kubalulekile?
Ukupeyisha izimbobo zenethiwekhi kubalulekile ekugcineni ukuphepha nokuzinza kwenethiwekhi yakho. Izimbobo ezinganamathiselwe zingaveza isistimu yakho kubungozi obahlukahlukene.
Ukukhathazeka Kwezokuphepha
Izimbobo ezivuliwe noma ezingapakishiwe ziyimpokophelo evamile yokuhlasela kwe-inthanethi njengokuskena kwembobo, lapho izigebengu ze-inthanethi ziphenya amasistimu ezimbobo ezifinyelelekayo, kanye nokuhlasela kwe-DoS (Denial of Service) okweqa amasistimu ngethrafikhi. Lokhu kuhlasela kungaholela ekwephulweni kwedatha, ukulahlekelwa isevisi, noma ukufinyelela okungagunyaziwe kulwazi olubucayi.
Isoftware Bugs
Amasevisi enethiwekhi amadala noma angakopishiwe angase aqukathe iziphazamisi ezingase zisetshenziswe abahlaseli. Isibonelo, izinguqulo eziphelelwe yisikhathi ze-OpenSSL bezisengozini yokuhlaselwa okufana ne-Heartbleed, evumela ukufinyelela okungagunyaziwe kudatha ebethelwe. Ukuchibiyela okuvamile kuqinisekisa ukuthi lezi ziphazamisi zilungisiwe futhi nenethiwekhi yakho ihlala ivikelekile.
Izindlela Ezinhle Kakhulu
Ukuze uqinisekise ukuvikeleka kwezimbobo zenethiwekhi yakho, hlala usebenzisa izindonga zokuvikela ukuze ukhawulele ukufinyelela kumasevisi abalulekile futhi usebenzise amasistimu okuthola intrusion (IDS) ukuze ugade imisebenzi esolisayo. Ukupeyisha lezi zimbobo njalo njengengxenye yesu elibanzi lokuvikela kunganciphisa kakhulu ingcuphe yokuhlaselwa.
Ukupeyisha izimbobo zenethiwekhi kudinga kokubili amathuluzi esofthiwe nawehadiwe ukuze uphathe kahle futhi ugade inethiwekhi yakho.
Isofthiwe
Amathuluzi esofthiwe amaningana angakusiza ukuthi ugade futhi uhlonze izimbobo ezisengozini:
I-Wireshark iyisihlaziyi sephrothokholi yenethiwekhi enamandla ekuvumela ukuthi uhlole idatha edlula kunethiwekhi yakho.
I-Nmap isetshenziswa kakhulu ekutholweni kwenethiwekhi nokuhlola ukuphepha, ihlinzeka ngolwazi oluningiliziwe mayelana nezimbobo ezivulekile.
I-Nessus iyithuluzi lokuskena lokuba sengozini elisiza ukukhomba ubuthakathaka kunethiwekhi yakho, okuhlanganisa nezimbobo ezingapeyishiwe.
Izingxenyekazi zekhompuyutha
Lapho usebenza ngoxhumo lwenethiwekhi ebonakalayo, ihadiwe ethile ibalulekile:
Amaphaneli okuchibiyela enethiwekhi asiza ukuphatha ukuxhumana okuningi kwe-Ethernet, aqinisekise ukuthi inethiwekhi yakho ihlelekile futhi iyalinganiswa.
Izintambo ze-Ethernet nezixhumi ze-RJ45 ziyadingeka ekuxhumeni amadivaysi ngokusebenzisa izimbobo ezibonakalayo.
Amanye Amathuluzi
Amathuluzi engeziwe angasiza afaka:
Amathuluzi enethiwekhi okuxilonga ukuxazulula izinkinga.
Patch izintambo zokuxhuma amadivayisi ngokuqondile.
Ithuluzi le-crimping lokulungiselela izintambo zenethiwekhi ngokwezifiso.
Lawa mathuluzi ehlanganisiwe akuvumela ukuthi upeke izimbobo zenethiwekhi kahle futhi uqinisekise ukuthi isistimu yakho ihlala ivikelekile futhi isesikhathini samanje.
4. Isinyathelo ngesinyathelo Umhlahlandlela Wokunamathisela Imbobo Yenethiwekhi
Isinyathelo 1: Khomba Izimbobo Zenethiwekhi Ezisengozini
Ngaphambi kokuchibiyela imbobo yenethiwekhi, isinyathelo sokuqala ukukhomba ukuthi yiziphi izimbobo ezisengozini. Lokhu kuqinisekisa ukuthi imizamo yakho yokuchibiyela iqondiswe futhi iyasebenza.
Ukusebenzisa Izikena Zenethiwekhi
Enye yezindlela ezisebenza kahle kakhulu zokukhomba izimbobo ezivulekile nezisengozini ukusebenzisa izikena zenethiwekhi njenge-Nmap. I-Nmap iskena inethiwekhi yakho ukuze ithole izimbobo ezivulekile futhi inikeze umbiko onemininingwane, egqamisa ukuthi yiziphi izimbobo ezidaluliwe futhi ezingaba sengozini.
Ukusebenzisa i-Nmap, vele usebenzise umyalo olandelayo ukuze uskene inethiwekhi yakho:
nmap -sV
Lo myalo ubala zonke izimbobo ezivuliwe, amasevisi asebenza kulawo machweba, kanye nenguqulo yesofthiwe esetshenziswayo.
Izingodo ze-Firewall
Enye indlela ukuhlaziya izingodo zakho ze-firewall. Ama-firewall angena kuthrafikhi engenayo naphumayo, okuhlanganisa noma yimiphi imizamo yokufinyelela izimbobo ezivulekile. Ngokubuyekeza lawa malogi, ungakwazi ukuhlonza umsebenzi osolisayo noma imizamo ephindaphindiwe yokuxhuma kuzimbobo ezisengozini. Lokhu kubalulekile ikakhulukazi ekuboneni imizamo yokuskena imbobo engaba khona ngabahlaseli.
Ukuhlola Mathupha
Ukuze uthole indlela yokusebenzisana, ungahlola izimbobo zenethiwekhi usebenzisa amathuluzi afana ne-telnet noma i-netstat:
I-Telnet: Leli thuluzi lomugqa womyalo likuvumela ukuthi uhlole uma imbobo ethile ivuliwe emshinini oqhelile. Ngokwesibonelo:
I-Netstat: Sebenzisa leli thuluzi ukuze uhlole ukuxhumana okusebenzayo nezimbobo zokulalela emshinini wangakini:
netstat -an
Lezi zindlela zikunikeza ukulawula okuyimbudumbudu okwengeziwe kokuxilonga inethiwekhi yakho.
Isinyathelo sesi-2: Landa Amapheshi Adingekayo noma Izibuyekezo
Uma usuhlonze izimbobo ezisengozini, isinyathelo esilandelayo ukuqoqa amapeshi adingekayo noma izibuyekezo ukuze uzilungise.
Izibuyekezo Zomthengisi
Hlola izibuyekezo ezivela kumthengisi wesofthiwe onesibopho sesevisi esebenza endaweni esengozini. Abathengisi abanjengoMicrosoft, iCisco, kanye nokusatshalaliswa okuhlukahlukene kweLinux njalo bakhipha izibuyekezo zokuphepha ezibhekana nobungozi. Lezi zibuyekezo ngokuvamile zihlanganisa amapeshi ezinsizakalo zenethiwekhi ezingase zidalulwe ngezimbobo ezivulekile.
I-Firmware Updates
Ungakhohlwa ukubheka izibuyekezo ze-firmware zezingxenyekazi zekhompuyutha zenethiwekhi yakho, njengamarutha, amaswishi, noma izindonga zokuvikela. I-firmware ephelelwe yisikhathi ingaba sengozini eshiya izimbobo zivuliwe noma zingalungiselelwe ngendlela engafanele. Vakashela iwebhusayithi yomkhiqizi ukuze ulande izinguqulo zakamuva ze-firmware futhi uzisebenzise ku-hardware yakho.
I-Patching Software
Futhi ungadawuniloda amapeshi emithonjeni enedumela elihle njengezizindalwazi ze-CVE (Ukuba Sengozini Okujwayelekile Nokuchayeka), eklelisa ubungozi obaziwayo nezisombululo zabo. Qiniseka ukuthi uqinisekisa ubuqiniso bamapeshi ukuze ugweme ukulanda amafayela anonya noma awonakele.
Isinyathelo sesi-3: Faka Ipheshi noma Izinguquko Zokuhlela
Ngamapeshi adingekayo nezibuyekezo esandleni, yisikhathi sokuzisebenzisa futhi ulungiselele izilungiselelo zenethiwekhi yakho.
Okuzenzakalelayo vs. Ukupeyishwa Mathupha
Ungasebenzisa amapeshi ngokuzenzakalelayo noma ngokwenza.
Ukuchibiyela okuzenzakalelayo kulula, njengoba amasistimu okusebenza amaningi namaphakheji esofthiwe angalungiselelwa ukulanda futhi asebenzise izibuyekezo ngokuzenzakalelayo. Amathuluzi afana ne-WSUS (Izinkonzo Zokuvuselela Iseva yeWindows) kanye ne-SolarWinds angakwazi ukuzenzela inqubo yokuchibiyela yamanethiwekhi ebhizinisi.
Ukupeshiswa mathupha kukunikeza ukulawula okwengeziwe kodwa kudinga ukuthi uzilande futhi uzifakele amapeshi. Le ndlela idla isikhathi esiningi kodwa iqinisekisa ukuthi uyalwazi lonke ushintsho olwenziwa ohlelweni lwakho.
Lungiselela ama-firewall nama-routers
Ngaphezu kwesofthiwe yokuchibiyela, kufanele ulungiselele izinqamuleli zakho namarutha ukuthi avale noma akhawulele ukufinyelela ezimbobeni ezivuliwe.
Nansi inkomba elula yesinyathelo nesinyathelo:
1.Finyelela isixhumi esibonakalayo sohlelo lokuvikela: Ngena ngemvume kuphaneli yokumisa yohlelo lwakho lokuvikela.
2.Thola izimbobo ezivuliwe: Zulazula uye esigabeni lapho ungaphatha khona ukufinyelela kwembobo.
3.Vala izimbobo ezingadingekile: Khubaza izimbobo ezingasebenzi noma ezingadingeki.
4.Engeza imithetho yohlelo lokuvikela: Dala imithetho evumela kuphela ithrafikhi evela kumakheli e-IP athembekile noma amanethiwekhi athile.
5.Gcina futhi usebenzise izilungiselelo: Uma usuqedile, qiniseka ukuthi ulondoloza futhi uhlole izilungiselelo zakho ezintsha.
Qinisekisa Izinguquko
Ngemva kokufaka isichibi noma ukushintsha izilungiselelo, kubalulekile ukuqinisekisa ukuthi izinguquko seziqalile ukusebenza. Sebenzisa amathuluzi okuqapha inethiwekhi njenge-Nmap noma i-Wireshark ukuze uskene kabusha inethiwekhi futhi uqinisekise ukuthi ubungozi bubhaciwe. Bheka izimpawu zokuthi izimbobo ezisengozini ngaphambilini manje sezivikelekile noma zivaliwe.
Isinyathelo sesi-4: Hlola Imbobo Enamathiselwe
Ukuhlola kuyingxenye ebalulekile yenqubo yokuchibiyela ukuze kuqinisekiswe ukuthi ukulungiswa okusetshenzisiwe kuyasebenza.
Ukuhlolwa Kwangemuva Kokubhaca
Ngemuva kokusetshenziswa kwepeshi, phinda uskene inethiwekhi yakho usebenzisa i-Nmap noma amathuluzi afanayo ukuze uqinisekise ukuthi izimbobo ezisengozini azisadalulwa.
Gijima:
nmap -sV
Qinisekisa ukuthi izinguqulo zesevisi zibuyekeziwe nokuthi noma yiziphi izimbobo ezingadingekile sezivaliwe.
Sebenzisa Amathuluzi Okuhlola Ukungena
Ukuze uthole ukuhlola okujulile, cabanga ukusebenzisa amathuluzi okuhlola ukungena njenge-Metasploit ukuze ulingise ukuhlasela kunethiwekhi enamathiselwe. Lawa mathuluzi akuvumela ukuthi uqinisekise ukuthi izimbobo zenethiwekhi yakho zivikeleke ngokufanelekile ezinsongweni zomhlaba wangempela. Uma i-Metasploit ingakwazi ukuxhaphaza imbobo esengozini yangaphambilini, iqinisekisa ukuthi ipheshi lakho libe yimpumelelo.
Ukuqapha Inethiwekhi
I-Rackmount PC
I-Computing Eshumekiwe
I-Industrial Portable Computers
Amathebulethi Aqinile
I-laptop eqinile
I-Industrial Panel PC
Isandla Esimangelengele
I-Advantech Industrial PC
