Momwe mungaletsere maukonde okayikitsa kuchokera ku CMD

¿Momwe mungaletsere kulumikizana kokayikitsa kwa maukonde kuchokera ku CMD? Kompyuta ikayamba kugwira ntchito pang'onopang'ono kapena mukuwona zochitika zachilendo zapaintaneti, kutsegula mwachangu ndikugwiritsa ntchito malamulo nthawi zambiri ndiyo njira yachangu yopezeranso mphamvu. Ndi malamulo ochepa chabe, mukhoza pezani ndikuletsa kulumikizana kokayikitsaOnani madoko otseguka ndikulimbitsa chitetezo chanu osayika china chilichonse.

M'nkhaniyi mupeza chiwongolero chathunthu, chothandizira kutengera zida zakubadwa (CMD, PowerShell, ndi zofunikira monga netstat ndi netsh). Muona momwe kuzindikira magawo achilendoZomwe muyenera kuyang'anira, momwe mungaletsere maukonde enieni a Wi-Fi, komanso momwe mungapangire malamulo mu Windows Firewall kapena FortiGate, zonse zimafotokozedwa momveka bwino komanso molunjika.

Netstat: ndi chiyani, ndi chiyani, ndi chifukwa chiyani imakhalabe yofunika

Dzina netstat limachokera ku "network" ndi "statistics", ndipo ntchito yake ndikupereka ndendende. ziwerengero ndi mawonekedwe olumikizana mu nthawi yeniyeni. Zaphatikizidwa mu Windows ndi Linux kuyambira 90s, ndipo mutha kuzipezanso mumakina ena monga macOS kapena BeOS, ngakhale mulibe mawonekedwe owonetsera.

Kuyiyendetsa mu kontrakitala kumakupatsani mwayi wowona maulumikizidwe omwe akugwira ntchito, madoko omwe akugwiritsidwa ntchito, maadiresi am'deralo ndi akutali, ndipo, mwachiwonekere, chithunzithunzi chowonekera bwino cha zomwe zikuchitika mu stack yanu ya TCP/IP. Kukhala ndi izi kusakatula maukonde mwachangu Zimakuthandizani kukonza, kuzindikira, ndikukweza chitetezo cha kompyuta kapena seva yanu.

Kuwunikira kuti ndi zida ziti zomwe zimalumikizana, ndi madoko ati otseguka, ndi momwe rauta yanu imapangidwira ndikofunikira. Ndi netstat, mumapezanso matebulo apanjira ndi ziwerengero ndi protocol zomwe zimakuwongolerani ngati china chake sichikuwonjezera: kuchuluka kwa magalimoto pamsewu, zolakwika, kusokonekera, kapena kulumikizana kosaloledwa.

Malangizo othandiza: Musanawunike mozama ndi netstat, tsekani mapulogalamu aliwonse omwe simukuwafuna ngakhalenso Yambitsaninso ngati nkothekaMwanjira iyi mudzapewa phokoso ndikuzindikira zomwe zili zofunika kwambiri.

Zokhudza magwiridwe antchito ndi machitidwe abwino ogwiritsira ntchito

Kuthamanga netstat pakokha sikungawononge PC yanu, koma kuigwiritsa ntchito mopitirira muyeso kapena ndi magawo ambiri nthawi imodzi kumatha kudya CPU ndi kukumbukira. Ngati mukuyendetsa mosalekeza kapena kusefa nyanja ya data, kuchuluka kwa dongosolo ndipo magwiridwe antchito angavutike.

Kuti muchepetse kukhudzidwa kwake, chepetsani ku zochitika zinazake ndikuwongolera magawo. Ngati mukufuna kuyenda mosalekeza, yang'anani zida zowunikira. Ndipo kumbukirani: Zochepa ndi zambiri pamene cholinga chake ndi kufufuza chizindikiro china.

• Chepetsani kugwiritsa ntchito nthawi yomwe mukufunadi onani malumikizidwe omwe akugwira ntchito kapena ziwerengero.
• Sefani bwino kuti muwonetse mfundo zofunika zokha.
• Pewani kukonza zochita pakanthawi kochepa kwambiri kukhutitsa chuma.
• Ganizirani zofunikira zothandizira ngati mukufuna kuwunika nthawi yeniyeni zapamwamba kwambiri.

Ubwino ndi malire ogwiritsira ntchito netstat

Netstat imakhalabe yotchuka pakati pa olamulira ndi akatswiri chifukwa imapereka Kuwonekera kofulumira kwa maulumikizidwe ndi madoko omwe amagwiritsidwa ntchito ndi mapulogalamu. Mumasekondi mutha kudziwa yemwe akulankhula ndi ndani komanso kudzera pamadoko.

Komanso facilitates kuyang'anira ndi kuthetsa mavutoKuchulukirachulukira, zolepheretsa, kulumikizana kosalekeza… zonse zimawonekera mukayang'ana ziwerengero ndi ziwerengero zoyenera.

• Kuzindikira mwachangu za maulumikizidwe osaloleka kapena kulowerera komwe kungatheke.
• Kutsata gawo pakati pa makasitomala ndi ma seva kuti apeze ngozi kapena kuchedwa.
• Kuwunika kachitidwe ndi protocol kuti akhazikitse patsogolo kusintha komwe kumakhala ndi zotsatirapo zazikulu.

Ndipo ndi chiyani chomwe sichikuchita bwino kwambiri? Sichimapereka chidziwitso chilichonse (sicho cholinga chake), kutulutsa kwake kumatha kukhala kovuta kwa ogwiritsa ntchito omwe si aukadaulo, komanso malo aakulu kwambiri kuti asayese monga dongosolo lapadera (SNMP, mwachitsanzo). Kuphatikiza apo, kugwiritsidwa ntchito kwake kukucheperachepera PowerShell ndi zida zamakono zotulutsa zomveka bwino.

Momwe mungagwiritsire ntchito netstat kuchokera ku CMD ndikuwerenga zotsatira zake

Tsegulani CMD monga woyang'anira (Yambani, lembani "cmd", dinani kumanja, Thamangani monga woyang'anira) kapena gwiritsani ntchito Terminal mu Windows 11. Kenako lembani. netstat ndikudina Enter kuti mupeze chithunzi chanthawiyo.

Mudzawona mizati yokhala ndi ndondomeko (TCP/UDP), maadiresi am'deralo ndi akutali ndi madoko awo, ndi malo omwe ali (KUMVETSERA, KUKHALA, TIME_WAIT, etc.). Ngati mukufuna manambala m'malo mwa mayina adoko, thamangani netstat -n kuti muwerenge molunjika.

Zosintha pafupipafupi? Mutha kuwauza kuti atsitsimutse masekondi aliwonse a X pakanthawi: mwachitsanzo, netstat -n 7 Idzasintha zotulutsa masekondi 7 aliwonse kuti muwone kusintha kwamoyo.

Ngati mumangokonda maulumikizidwe okhazikika, sefa zomwe zatuluka ndi findstr: netsa | findstr YAKHALASinthani kukhala KUMVETSERA, CLOSE_WAIT kapena TIME_WAIT ngati mukufuna kudziwa zigawo zina.

Zofunikira za netstat pakufufuza

Zosintha izi zimakulolani kuchepetsa phokoso ndi kuyang'ana pa zomwe mukuyang'ana:

• -a: ikuwonetsa maulalo omwe akugwira ntchito komanso osagwira ntchito komanso madoko omvera.
• -e: ziwerengero za paketi ya mawonekedwe (zolowera / zotuluka).
• -f: imatsimikiza ndikuwonetsa ma FQDN akutali (mayina oyenerera bwino).
• -n: ikuwonetsa madoko osathetsedwa ndi manambala a IP (mwachangu).
• -o: Onjezani PID ya njira yomwe imasunga kulumikizana.
• -p X: zosefera ndi protocol (TCP, UDP, tcpv6, tcpv4...).
• -q: mafunso olumikizidwa ndi madoko omvera komanso osamvera.
• -sZiwerengero zotsatiridwa ndi protocol (TCP, UDP, ICMP, IPv4/IPv6).
• -r: ndondomeko yamakono ya dongosolo.
• -t: zambiri zokhudza malumikizidwe mu download state.
• -x: Zambiri za kulumikizana kwa NetworkDirect.

Zitsanzo zothandiza pa moyo watsiku ndi tsiku

Kuti mulembe madoko otseguka ndi kulumikizana ndi PID yawo, thamangani netstat -anoNdi PID imeneyo mutha kuloza njirayo mu Task Manager kapena ndi zida monga TCPView.

Ngati mumangokonda zolumikizira za IPv4, sefa ndi protocol ndi netstat -p IP ndipo mudzasunga phokoso potuluka.

Ziwerengero zapadziko lonse lapansi ndi protocol zimachokera netstat -sPomwe ngati mukufuna ntchito zolumikizirana (zotumizidwa / zolandilidwa) zigwira ntchito netstat -e kukhala ndi manambala enieni.

Kuti mufufuze vuto ndikusintha dzina lakutali, phatikizani netstat -f ndi kusefa: mwachitsanzo, netstat -f | findstr mydomain Ingobweretsa zomwe zikufanana ndi derali.

Wi-Fi ikakhala pang'onopang'ono ndipo netstat imakhala yodzaza ndi zolumikizira zachilendo

Nkhani yachikale: kusakatula pang'onopang'ono, kuyesa liwiro komwe kumatenga nthawi kuti ayambe koma kumapereka ziwerengero zabwinobwino, ndipo mukathamanga netstat, zotsatirazi zimawonekera: maulaliki ambiri AKHALANthawi zambiri wolakwa ndi msakatuli (Firefox, mwachitsanzo, chifukwa cha njira yake yogwiritsira ntchito zitsulo zambiri), ndipo ngakhale mutatseka mazenera, njira zakumbuyo zingapitirize kusunga magawo.

Zoyenera kuchita? Choyamba, dziwani netstat -ano Dziwani ma PID. Kenako yang'anani mu Task Manager kapena ndi Process Explorer/TCPView njira zomwe zili kumbuyo kwake. Ngati kugwirizana ndi ndondomeko zikuwoneka zokayikitsa, ganizirani kuletsa adilesi ya IP kuchokera pa Windows Firewall. gwiritsani ntchito scan ya antivayirasi Ndipo, ngati chiwopsezo chikuwoneka ngati chachikulu kwa inu, chotsani zidazo kwakanthawi pamaneti mpaka zitamveka bwino.

Ngati kusefukira kwa magawo kukupitilira mutatha kukhazikitsanso msakatuli, yang'anani zowonjezera, zimitsani kwakanthawi kulumikizana, ndikuwona ngati makasitomala ena (monga foni yanu yam'manja) nawonso akuchedwa: izi zikuwonetsa vuto. vuto la network/ISP osati mapulogalamu am'deralo.

Kumbukirani kuti netstat siwoyang'anira nthawi yeniyeni, koma mutha kutengera imodzi netstat -n 5 kutsitsimutsa masekondi 5 aliwonse. Ngati mukufuna gulu lopitilira komanso losavuta, yang'anani TCPView kapena njira zina zowunikira modzipereka.

Letsani maukonde enieni a Wi-Fi kuchokera ku CMD

Ngati pali maukonde apafupi omwe simukufuna kuwona kapena kuti chipangizo chanu chiyese kugwiritsa ntchito, mutha sefa kuchokera ku consoleLamulo limakulolani lembani SSID yeniyeni ndikuwongolera popanda kukhudza gulu lazithunzi.

Tsegulani CMD ngati woyang'anira ndi kugwiritsa ntchito:

netsh wlan add filter permission=block ssid="Nombre real de la red" networktype=infrastructure

Mukatha kuyiyendetsa, netiwekiyo idzazimiririka pamndandanda wamanetiweki omwe alipo. Kuti muwone zomwe mwaletsa, yambitsani netsh wlan onetsani zosefera chilolezo=blockNdipo ngati mukunong'oneza bondo, chotsani ndi:

netsh wlan delete filter permission=block ssid="Nombre real de la red" networktype=infrastructure

Letsani ma adilesi a IP okayikitsa ndi Windows Firewall

Mukazindikira kuti adilesi ya IP yomweyi ikuyesera kuchita zinthu zokayikitsa motsutsana ndi ntchito zanu, yankho lachangu ndi pangani lamulo loletsa Zolumikizana izo. Mu graphical console, yonjezerani lamulo lachizoloŵezi, ligwiritseni ku "Mapulogalamu Onse", protocol "Aliyense", tchulani ma IP akutali kuti atseke, fufuzani "Letsani kugwirizanitsa" ndikugwiritsanso ntchito ku domain/private/public.

Kodi mumakonda makina opangira makina? Ndi PowerShell, mutha kupanga, kusintha, kapena kuchotsa malamulo osadina. Mwachitsanzo, kuti mulepheretse kuchuluka kwa magalimoto a Telnet ndikuletsa adilesi yakutali ya IP, mutha kugwiritsa ntchito malamulo Lamulo Latsopano la NetFirewall ndiyeno sinthani ndi Ikani-NetFirewallRule.

# Bloquear tráfico saliente de Telnet (ejemplo)
New-NetFirewallRule -DisplayName "Block Outbound Telnet" -Direction Outbound -Program %SystemRoot%\System32\telnet.exe -Protocol TCP -LocalPort 23 -Action Block

# Cambiar una regla existente para fijar IP remota
Get-NetFirewallPortFilter | ?{ $_.LocalPort -eq 80 } | Get-NetFirewallRule | ?{ $_.Direction -eq "Inbound" -and $_.Action -eq "Allow" } | Set-NetFirewallRule -RemoteAddress 192.168.0.2

Kuwongolera malamulo ndi magulu kapena kuchotsa malamulo oletsa ambiri, dalirani Yambitsani/Disable/Chotsani-NetFirewallRule ndi mafunso ndi wildcards kapena zosefera ndi katundu.

Njira zabwino kwambiri: Osaletsa ntchito ya Firewall

Microsoft imalangiza kuti musayimitse ntchito ya Firewall (MpsSvc). Kuchita izi kungayambitse zovuta za menyu Yoyambira, zovuta kukhazikitsa mapulogalamu amakono, kapena zovuta zina. zolakwika zoyambitsa Pa foni. Ngati, monga mwalamulo, muyenera kuletsa mbiri, chitani paziwopsezo zamoto kapena GPO kasinthidwe mulingo, koma siyani ntchitoyo ikuyenda.

Mbiri (domain/private/public) ndi zochita zosasinthika (zolola/block) zitha kukhazikitsidwa kuchokera pamzere wamalamulo kapena pa firewall console. Kusunga zosasintha izi mofotokozedwa bwino kumalepheretsa mabowo osadzifunira popanga malamulo atsopano.

FortiGate: Letsani kuyesa kwa SSL VPN kuchokera ku ma IP okayikitsa a anthu

Ngati mugwiritsa ntchito FortiGate ndikuwona kuyesa kolephera kulowa mu SSL VPN yanu kuchokera ku ma IP osadziwika, pangani dziwe la ma adilesi (mwachitsanzo, blacklisttipp) ndikuwonjezera ma IP onse otsutsana pamenepo.

Pa console, lowetsani zoikamo za SSL VPN ndi config vpn ssl zoikamo ndipo ikugwira ntchito: set source-address "blacklistipp" y set source-address-negate enableNdi chiwonetsero Mukutsimikizira kuti yagwiritsidwa ntchito. Mwanjira iyi, wina akabwera kuchokera ku ma IPs, kulumikizana kudzakanidwa kuyambira pachiyambi.

Kuti muwone kuchuluka kwa magalimoto akugunda IP ndi doko, mutha kugwiritsa ntchito zindikirani paketi ya sniffer iliyonse "host XXXX ndi port 10443" 4ndi pezani vpn ssl monitor Mumayang'ana magawo ololedwa kuchokera ku ma IP omwe sanaphatikizidwe pamndandanda.

Njira ina ndi SSL_VPN> Chepetsani Kufikira> Chepetsani mwayi wofikira kwa omwe adalandiraKomabe, zikatero kukanidwa kumachitika pambuyo polowa zidziwitso, osati nthawi yomweyo kudzera pa console.

Njira zina za netstat zowonera ndikuwunika kuchuluka kwa magalimoto

Ngati mukufuna chitonthozo chochulukirapo kapena zambiri, pali zida zomwe zimakupatsirani. zithunzi, zosefera zapamwamba komanso kujambula mozama za paketi:

• Wireshark: kugwidwa ndi kusanthula magalimoto pamagawo onse.
• ipero2 (Linux): zothandizira kuyang'anira TCP/UDP ndi IPv4/IPv6.
• Waya wa GalasiKusanthula kwa netiweki ndi kasamalidwe ka firewall komanso kuyang'ana zachinsinsi.
• Uptrends Uptime MonitorKuyang'anira malo mosalekeza ndi zidziwitso.
• Germany UX: kuyang'anira kumayang'ana kwambiri pazachuma kapena thanzi.
• Atera: RMM suite yokhala ndi kuyang'anira ndi kupeza kutali.
• CloudsharkMa analytics a pa intaneti ndi kugawana pazithunzi.
• iptraf / iftop (Linux): Kuchuluka kwanthawi yeniyeni kudzera pa mawonekedwe owoneka bwino.
• ss (Socket Statistics) (Linux): njira yamakono, yomveka bwino ya netstat.

Kutsekereza kwa IP ndi zotsatira zake pa SEO, kuphatikiza njira zochepetsera

Kuletsa ma IP ankhanza ndikomveka, koma samalani block injini zosaka botsChifukwa mutha kutaya indexing. Kuletsa mayiko kumathanso kusiya ogwiritsa ntchito ovomerezeka (kapena ma VPN) ndikuchepetsa mawonekedwe anu m'magawo ena.

Njira zowonjezera: onjezerani Ma Captcha Kuti muyimitse bots, gwiritsani ntchito kuchuluka kwa kuchuluka kuti mupewe kuzunzidwa ndikuyika CDN kuti muchepetse DDoS pogawa katunduyo pamagawo ogawidwa.

Ngati kuchititsa kwanu kumagwiritsa ntchito Apache ndipo mwatsegula geo-blocking pa seva, mutha tumizaninso maulendo kuchokera kudziko linalake pogwiritsa ntchito .htaccess ndi lamulo lolembanso (chitsanzo chachibadwa):

RewriteEngine on
RewriteCond %{ENV:GEOIP_COUNTRY_CODE} ^CN$
RewriteRule ^(.*)$ http://tu-dominio.com/pagina-de-error.html [R=301,L]

Kuti mulepheretse ma IP pa kuchititsa (Plesk), mutha kusinthanso .htaccess ndikukana maadiresi enieni, nthawi zonse ndi zosunga zobwezeretsera za fayiloyo ngati mungafunike kusintha kusintha.

Sinthani Windows Firewall mwakuya pogwiritsa ntchito PowerShell ndi netsh

Kupitilira kupanga malamulo apawokha, PowerShell imakupatsani mphamvu zonse: fotokozani mbiri yakale, pangani / sinthani / chotsani malamulo ndipo ngakhale gwirani ntchito motsutsana ndi Active Directory GPOs okhala ndi magawo osungidwa kuti muchepetse katundu pa olamulira madomeni.

Zitsanzo zofulumira: kupanga lamulo, kusintha adilesi yake yakutali, kuthandizira / kulepheretsa magulu onse, ndi chotsani malamulo oletsa m'njira imodzi. Mtundu wolunjika pa chinthu umalola zosefera zamadoko, mapulogalamu, kapena ma adilesi ndi ma chain zotsatira ndi mapaipi.

Kuwongolera magulu akutali, dalirani WinRM ndi parameters -CimSessionIzi zimakulolani kuti mulembe malamulo, kusintha, kapena kuchotsa zolemba pamakina ena osasiya konsoni yanu.

Zolakwika m'malemba? Gwiritsani ntchito -ErrorAction Silently Pitirizani kupondereza "lamulo silinapezeke" pochotsa, -Zingatani Zitati kuwoneratu ndi - Tsimikizirani Ngati mukufuna chitsimikiziro pa chinthu chilichonse. Ndi - Zolemba Mudzakhala ndi zambiri zokhudza kuphedwa.

IPsec: Kutsimikizika, kubisa, ndi kudzipatula motengera mfundo

Mukangofunika magalimoto ovomerezeka kapena obisika kuti mudutse, mumaphatikiza Malamulo a Firewall ndi IPsecPangani malamulo amayendedwe, fotokozani ma seti a cryptographic ndi njira zotsimikizira, ndikuphatikiza ndi malamulo oyenera.

Ngati mnzanu akufuna IKEv2, mutha kufotokozera mulamulo la IPsec ndikutsimikizira ndi satifiketi ya chipangizo. Izinso ndizotheka. malamulo kukopera kuchokera ku GPO kupita ku ina ndi magulu awo ogwirizana kuti apititse patsogolo ntchito.

Kuti mulekanitse mamembala a domain, tsatirani malamulo omwe amafunikira kutsimikizika kwa magalimoto omwe akubwera ndipo amafuna kuti pakhale magalimoto otuluka. Mukhozanso amafuna umembala m'magulu ndi maunyolo a SDDL, oletsa kugwiritsa ntchito / zida zovomerezeka.

Mapulogalamu osasungidwa (monga telnet) atha kukakamizidwa kugwiritsa ntchito IPsec ngati mupanga lamulo la "lolani ngati lotetezeka" ndi ndondomeko ya IPsec Pamafunika kutsimikizika ndi kubisaMomwemo palibe chomwe chimayenda bwino.

Zotsimikizika zodutsa ndi chitetezo chakumapeto

Kudutsa kotsimikizika kumalola kuchuluka kwa magalimoto kuchokera kwa ogwiritsa ntchito odalirika kapena zida kuphwanya malamulo oletsa. Zothandiza pa sinthani ndi kusanthula ma seva popanda kutsegula madoko padziko lonse lapansi.

Ngati mukuyang'ana chitetezo chakumapeto-kumapeto pamapulogalamu ambiri, m'malo mopanga lamulo lililonse, sunthani chilolezo ku IPsec wosanjikiza ndi mndandanda wamakina/magulu ogwiritsa ntchito omwe amaloledwa kusinthidwa kwapadziko lonse lapansi.

Kudziwa bwino netstat kuti muwone yemwe amalumikizana, kugwiritsa ntchito netsh ndi PowerShell kuti azitsatira malamulo, ndikukweza ndi IPsec kapena zozimitsa moto zozungulira ngati FortiGate zimakupatsani ulamuliro pamaneti anu. Ndi zosefera za CMD zochokera pa Wi-Fi, kutsekereza kwa IP kopangidwa bwino, kusamala kwa SEO, ndi zida zina mukafuna kusanthula mozama, mudzatha zindikirani kulumikizana kokayikitsa munthawi yake ndi kuwaletsa popanda kusokoneza ntchito zanu.