Mokhoa oa ho thibela likhokahano tsa marang-rang tse belaetsang ho tsoa ho CMD

¿Mokhoa oa ho thibela likhokahano tsa marang-rang tse belaetsang ho tsoa ho CMD? Ha komporo e qala ho sebetsa butle kapa o bona ts'ebetso e sa tloaelehang ea marang-rang, ho bula molaetsa oa litaelo le ho sebelisa litaelo hangata ke tsela e potlakileng ea ho fumana taolo hape. Ka litaelo tse 'maloa feela, u ka khona lemoha le ho thibela dikgokelo tse belaetsangHlahloba likou tse bulehileng 'me u matlafatse ts'ireletso ea hau ntle le ho kenya letho le eketsehileng.

Sengoliloeng sena u tla fumana tataiso e felletseng, e sebetsang e thehiloeng ho lisebelisoa tsa matsoalloa (CMD, PowerShell, le lisebelisoa tse kang netstat le netsh). U tla bona joang hlokomela linako tse makatsangKe litekanyetso life tse lokelang ho hlahlojoa, mokhoa oa ho thibela marang-rang a khethehileng a Wi-Fi, le mokhoa oa ho theha melao ho Windows Firewall kapa esita le FortiGate, kaofela li hlalositsoe ka puo e hlakileng le e tobileng.

Netstat: hore na ke eng, ke ea eng, le hore na hobaneng e lula e le senotlolo

Lebitso netstat le tsoa ho "network" le "statistics", mme mosebetsi oa eona ke ho fana ka nepo. lipalo le maemo a khokahano ka nako ea sebele. E kenyelelitsoe ho Windows le Linux ho tloha lilemong tsa bo-90, 'me u ka e fumana le lits'ebetsong tse ling tse kang macOS kapa BeOS, leha e se na sebopeho sa graphical.

Ho e tsamaisa ka har'a console ho tla u lumella ho bona likhokahano tse sebetsang, likoung tse sebelisoang, liaterese tsa lehae le tse hole, 'me, ka kakaretso, pono e hlakileng ea se etsahalang ho TCP / IP stack ea hau. Ho ba le sena sekeno sa marang-rang hanghang E u thusa ho hlophisa, ho hlahloba, le ho phahamisa boemo ba ts'ireletso ea komporo ea hau kapa seva.

Ho beha leihlo hore na ke lisebelisoa life tse hokelang, ke likou life tse butsoeng, le hore na router ea hau e hlophisitsoe joang ho bohlokoa. Ka netstat, u boetse u fumana litafole tsa litsela le lipalo ka protocol e u tataisang ha ho hong ho sa kopane: sephethephethe se feteletseng, liphoso, tšubuhlellano, kapa likhokahano tse sa lumelloeng.

Keletso e ka u thusang: Pele u etsa tlhahlobo e tebileng ka netstat, koala lits'ebetso tseo u sa li hlokeng esita le Qala hape haeba ho khonahalaKa tsela ena u tla qoba lerata 'me u tsebe ho nepahala ho seo e hlileng e leng sa bohlokoa.

Tšusumetso ho ts'ebetso le mekhoa e metle ea tšebeliso

Ho matha netstat ka boeona ho ke ke ha senya komporo ea hau, empa ho e sebelisa ka mokhoa o feteletseng kapa ka li-parameter tse ngata ka nako e le 'ngoe ho ka ja CPU le mohopolo. Haeba u e tsamaisa khafetsa kapa u sefa data e ngata, mojaro oa tsamaiso ea eketseha mme ts'ebetso e ka senyeha.

Ho fokotsa tšusumetso ea eona, fokotsa maemo a itseng 'me u lokise li-parameter hantle. Haeba o hloka ho phalla ho tsoelang pele, hlahloba lisebelisoa tse khethehileng tsa ho beha leihlo. Mme hopola: hanyane ho feta ha sepheo e le ho batlisisa letšoao le itseng.

• Fokotsa tšebeliso ho nako eo u hlileng u e hlokang ka eona sheba dikgokelo tse sebetsang kapa lipalo-palo.
• Sefa hantle ho bontša feela tlhahisoleseding e hlokahalang.
• Qoba ho hlophisa lipolao ka linako tse khutšoane haholo khorisa lisebelisoa.
• Nahana ka lisebelisoa tse ikhethileng haeba u li batla tlhokomelo ea nako ea sebele e tsoetseng pele ho feta.

Melemo le meeli ea ho sebelisa netstat

Netstat e ntse e tsebahala har'a batsamaisi le litsebi hobane e fana ka Ponahalo ea hang-hang ea likhokahano le likou tse sebelisoang ke lits'ebetso. Ka metsotsoana u ka bona hore na ke mang ea buang le mang le hore na o sebelisa likou life.

E boetse e thusa ho tlhokomelo le ho rarolla mathataTšitiso, mathata, likhokahano tse phehellang… tsohle lia totobala ha u sheba maemo le lipalo tse amehang.

• Ho lemoha kapele ya dikgokelo tse sa dumellwang kapa ho kgena ho ka etsahalang.
• Ho lateloa ha nako lipakeng tsa bareki le li-server ho fumana likotsi kapa li-latencies.
• Tekolo ya tshebetso ka protocol ho beha pele lintlafatso moo li nang le tšusumetso e kholo.

Mme ke eng e sa sebetseng hantle hakaale? Ha e fane ka data leha e le efe (eo ha se morero oa eona), tlhahiso ea eona e ka ba thata bakeng sa basebelisi bao e seng ba theknoloji, le ho libaka tse kholo haholo hore li se ke tsa sekala joalo ka sistimi e ikhethileng (ka mohlala, SNMP). Ho feta moo, tšebeliso ea eona e ntse e fokotseha molemong oa PowerShell le lisebelisoa tsa sejoale-joale tse nang le liphetho tse hlakileng haholoanyane.

Mokhoa oa ho sebelisa netstat ho tsoa ho CMD le ho bala liphetho tsa eona

Bula CMD joalo ka motsamaisi (Qala, thaepa "cmd", tobetsa ka ho le letona, Matha joalo ka molaoli) kapa sebelisa Terminal ho Windows 11. Ebe u thaepa. netstat ebe o tobetsa Enter ho fumana foto ea nako eo.

U tla bona litšiea tse nang le protocol (TCP/UDP), liaterese tsa lehae le tse hole tse nang le likou tsa tsona, le sebaka sa maemo (HO MAMELA, HO HLOMIWA, TIME_WAIT, jj.). Haeba u batla linomoro ho e-na le mabitso a port, matha netstat -n bakeng sa 'malo o tobileng haholoanyane.

Lintlafatso tsa nako le nako? U ka e bolella hore e khatholle metsotsoana e meng le e meng ea X ka nako e itseng: mohlala, netstat -n 7 E tla ntlafatsa tlhahiso metsotsoana e meng le e meng ea 7 ho bona liphetoho tse phelang.

Haeba u thahasella feela likhokahano tse thehiloeng, sefa tlhahiso ka findstr: netstat | findstr HLOKOMELAFetolela ho HO MAMELA, CLOSE_WAIT kapa TIME_WAIT ha u khetha ho tseba linaha tse ling.

Lintlha tse sebetsang tsa netstat bakeng sa lipatlisiso

Liphetoho tsena lia u lumella fokotsa lerata 'me u tsepamise maikutlo ho seo u se batlang:

• -a: e bonts'a likhokahano tse sebetsang le tse sa sebetseng le likou tse mamelang.
• -e: lipalo-palo tsa pakete ea li-interface (tse kenang / tse tsoang).
• -f: e rarolla le ho bonts'a li-FQDN tse hole (mabitso a domain a tšoanelehang ka botlalo).
• -n: e bonts'a boema-kepe bo sa rarolloang le linomoro tsa IP (kapele).
• -o: e eketsa PID ea ts'ebetso e bolokang khokahanyo.
• -p X: li-filters ka protocol (TCP, UDP, tcpv6, tcpv4...).
• -q: potso e hokahaneng le likou tsa ho mamela le tse sa mameleng.
• -sLipalopalo tse hlophiloeng ka protocol (TCP, UDP, ICMP, IPv4/IPv6).
• -r: tafole ea hona joale ea tsamaiso ea tsamaiso.
• -t: tlhahisoleseding mabapi le dikgokelo boemong ba download.
• -x: Lintlha tsa khokahano ea NetworkDirect.

Mehlala e sebetsang ea bophelo ba letsatsi le letsatsi

Ho thathamisa likou tse bulehileng le likhokahano le PID ea bona, matha netstat -anoKa PID eo u ka fetisa ts'ebetso ho Motsamaisi oa Mosebetsi kapa ka lisebelisoa tse kang TCPView.

Haeba o thahasella feela likhokahano tsa IPv4, sefa ka protocol ka netstat -p IP mme o tla boloka lerata tseleng ya ho tswa.

Lipalopalo tsa lefats'e ka protocol li tsoa ho netstat -sAthe ha o batla ts'ebetso ea li-interfaces (e rometsoeng / e amohetse) e tla sebetsa netstat -e ho ba le linomoro tse nepahetseng.

Ho fumana bothata ka ho rarolla mabitso a hole, kopanya netstat -f ka ho sefa: mohlala, netstat -f | findstr mydomain E tla khutlisa feela se lumellanang le sebaka seo.

Ha Wi-Fi e tsamaea butle 'me netstat e tletse likhokahano tse makatsang

Taba ea khale: ho bala butle, teko ea lebelo e nkang nako ho qala empa e fana ka lipalo tse tloaelehileng, 'me ha u sebelisa netstat, tse latelang lia hlaha: likhokahano tse ngata E HLOMILEHangata molato ke sebatli (Firefox, ka mohlala, ka lebaka la mokhoa oa ho sebetsana le li-sockets tse ngata), esita le haeba u koala lifensetere, mekhoa ea morao-rao e ka tsoela pele ho boloka linako.

Se o lokelang ho se etsa? Pele, ikamahanye le netstat -ano Hlokomela li-PID. Ebe u sheba ho Task Manager kapa ka Process Explorer/TCPView hore na ke lits'ebetso life tse ka morao ho eona. Haeba khokahano le ts'ebetso li bonahala li belaetsa, nahana ka ho thibela aterese ea IP ho Windows Firewall. tsamaisa sesebelisoa sa antivirus 'Me, haeba kotsi e bonahala e phahame ho uena, tlosa thepa ka nakoana ho tloha marang-rang ho fihlela e hlaka.

Haeba moroallo oa linako o tsoela pele ka mor'a ho kenya sebatli hape, hlahloba likeketso, tima ka nakoana, 'me u bone hore na bareki ba bang (joaloka sesebelisoa sa hau sa mohala) le bona ba lieha: sena se supa bothata. bothata ba marang-rang/ISP eseng software ea lehae.

Hopola hore netstat ha se sebali sa nako ea nnete, empa o ka etsisa se le seng ka sona netstat -n 5 ho khatholla metsotsoana e meng le e meng e 5. Haeba o hloka phanele e tsoelang pele le e bonolo haholoanyane, sheba TCPBona kapa mekhoa e meng e ikemiselitseng ea ho beha leihlo.

Thibela marang-rang a khethehileng a Wi-Fi ho tsoa ho CMD

Haeba ho na le marang-rang a haufi ao u sa batleng ho a bona kapa hore sesebelisoa sa hau se leke ho se sebelisa, u ka khona sefa ho tswa ho consoleTaelo e o dumella thibela SSID e khethehileng mme o e tsamaise ntle le ho ama phanele ya kerafo.

Bula CMD joalo ka motsamaisi le lisebelisoa:

netsh wlan add filter permission=block ssid="Nombre real de la red" networktype=infrastructure

Kamora ho e tsamaisa, marang-rang ao a tla nyamela lethathamong la marang-rang a teng. Ho hlahloba seo o se thibileng, qala netsh wlan show filters permit=block'Me haeba u ikoahlaea, e hlakole ka:

netsh wlan delete filter permission=block ssid="Nombre real de la red" networktype=infrastructure

Thibela liaterese tsa IP tse belaetsang ka Windows Firewall

Haeba u hlokomela hore aterese e tšoanang ea IP ea sechaba e leka ho etsa lintho tse belaetsang khahlanong le litšebeletso tsa hau, karabo e potlakileng ke theha molao o thibelang Lihokelo tseo. Ho graphical console, eketsa molao o tloaelehileng, o o sebelise ho "Mananeo 'ohle", protocol "Any", hlalosa li-IP tse hōle ho thibela, hlahloba "Thibela khokahanyo" 'me u sebelise ho domain/private/public.

O khetha ho iketsetsa? Ka PowerShell, o ka theha, oa fetola, kapa oa hlakola melao ntle le ho tobetsa. Mohlala, ho thibela sephethephethe sa Telnet se tsoang ebe o thibela aterese ea IP e hole e lumelletsoeng, o ka sebelisa melao ka New-NetFirewallRule ebe o ikamahanya le Set-NetFirewallRule.

# Bloquear tráfico saliente de Telnet (ejemplo)
New-NetFirewallRule -DisplayName "Block Outbound Telnet" -Direction Outbound -Program %SystemRoot%\System32\telnet.exe -Protocol TCP -LocalPort 23 -Action Block

# Cambiar una regla existente para fijar IP remota
Get-NetFirewallPortFilter | ?{ $_.LocalPort -eq 80 } | Get-NetFirewallRule | ?{ $_.Direction -eq "Inbound" -and $_.Action -eq "Allow" } | Set-NetFirewallRule -RemoteAddress 192.168.0.2

Ho laola melao ka lihlopha kapa ho hlakola melao ea thibelo ka bongata, itšetleha ka Thusa/Disable/Tlosa-NetFirewallRule le lipotsong tse nang le li-wildcards kapa li-filters ka thepa.

Mekhoa e metle: Se ke oa tima tšebeletso ea Firewall

Microsoft e eletsa khahlanong le ho emisa tšebeletso ea Firewall (MpsSvc). Ho etsa joalo ho ka baka mathata a Start menu, mathata a ho kenya lisebelisoa tsa sejoale-joale, kapa mathata a mang. liphoso tsa ho kenya tshebetsong Ka mohala. Haeba, joalo ka leano, o hloka ho tima li-profiles, etsa joalo maemong a firewall kapa GPO, empa tlohela ts'ebeletso e ntse e sebetsa.

Li-profiles (domain/private/public) le liketso tsa kamehla (lumella/block) li ka hlophisoa ho tsoa moleng oa taelo kapa firewall console. Ho boloka li-default tsena li hlalositsoe hantle ho thibela masoba a sa ikemisetsang ha o theha melao e mecha.

FortiGate: Thibela liteko tsa SSL VPN ho tsoa ho li-IP tsa sechaba tse belaetsang

Haeba u sebelisa FortiGate 'me u bona liteko tse hlōlehileng tsa ho kena ho SSL VPN ea hau ho tsoa ho li-IP tse sa tloaelehang, theha letamo la aterese (mohlala, blacklisttipp) 'me u kenye li-IP tsohle tse hanyetsanang moo.

Ho console, kenya litlhophiso tsa SSL VPN ka config vpn ssl setting 'me e sebetsa: seta aterese ea mohloli "blacklistipp" y seta mohloli-aterese-negate nolofalletsa. Ka file ea bontsha U netefatsa hore e sebelisitsoe. Ka tsela ena, ha motho a tsoa ho li-IP tseo, khokahano e tla hanoa ho tloha qalong.

Ho hlahloba sephethephethe se otlang IP le boema-kepe, u ka sebelisa hlahloba pakete ea sniffer efe kapa efe ea "host XXXX le port 10443" 4, le ka fumana vpn ssl monitor U hlahloba linako tse lumelletsoeng ho tsoa ho li-IP tse sa kenyelletsoeng lenaneng.

Tsela e 'ngoe ke SSL_VPN > Thibela phihlello > Fokotsa phihlello ho baamohedi ba itsengLeha ho le joalo, tabeng eo, ho hanoa ho etsahala ka mor'a ho kenya mangolo a boitsebiso, eseng hang-hang joaloka ka console.

Mekhoa e meng ho netstat bakeng sa ho shebella le ho sekaseka sephethephethe

Haeba u batla matšeliso kapa lintlha tse eketsehileng, ho na le lisebelisoa tse fanang ka eona. Grafiken, li-filters tse tsoetseng pele, le ho hapa ka botebo ea liphutheloana:

• Wireshark: ho ts'oaroa ha sephethephethe le tlhahlobo maemong ohle.
• ipeha2 (Linux): lisebelisoa tsa ho laola TCP/UDP le IPv4/IPv6.
• GlassWireTlhahlobo ea marang-rang e nang le taolo ea firewall le tsepamiso ea lekunutu.
• Uptrends Uptime MonitorTlhokomelo le tlhokomeliso ea sebaka se tsoelang pele.
• Jeremane UX: tlhokomelo e tsepamisitseng maikutlo joalo ka lichelete kapa bophelo bo botle.
• ateraRMM suite e nang le tlhahlobo le phihlello e hole.
• CloudsharkLitlhahlobo tsa webo le ho arolelana skrini.
• iptraf /iftop (Linux): Sephethephethe sa nako ea 'nete ka sebopeho se hlakileng haholo.
• ss (Socket Statistics) (Linux): mokhoa oa sejoale-joale, o hlakileng haholoanyane ho netstat.

Thibelo ea IP le phello ea eona ho SEO, hammoho le maano a ho fokotsa

Ho thibela li-IP tse mabifi hoa utloahala, empa e-ba hlokolosi ka thibela bots ea enjine ea ho batlaHobane o ka lahleheloa ke indexing. Ho thibela naha ho ka boela ha kenyelletsa basebelisi ba molao (kapa li-VPN) le ho fokotsa ponahalo ea hau libakeng tse itseng.

Mehato ea tlatsetso: eketsa Li-CAPTCHA Ho emisa bots, sebelisa sekhahla sa capping ho thibela tlhekefetso le ho beha CDN ho fokotsa DDoS ka ho aba mojaro ho pholletsa le li-node tse ajoang.

Haeba moamoheli oa hau a sebelisa Apache mme o na le geo-blocking e nolofalitsoeng ho seva, o ka khona etela hape ho tsoa naheng e itseng e sebelisang .htaccess e nang le molao oa ho ngola bocha (mohlala o akaretsang):

RewriteEngine on
RewriteCond %{ENV:GEOIP_COUNTRY_CODE} ^CN$
RewriteRule ^(.*)$ http://tu-dominio.com/pagina-de-error.html [R=301,L]

Ho thibela li-IP ho moamoheli (Plesk), o ka boela oa hlophisa .htaccess 'me u hane liaterese tse itseng, ka linako tsohle u na le bekapo ea pele ea faele haeba u hloka ho khutlisetsa liphetoho.

Laola Windows Firewall ka botebo u sebelisa PowerShell le netsh

Ntle le ho theha melao ea motho ka mong, PowerShell e u fa taolo e felletseng: hlalosa liprofaele tsa kamehla, theha/fetola/hlakola melao esita le ho sebetsa kgahlanong le Active Directory GPOs tse nang le mananeo a cached ho fokotsa mojaro ho balaoli ba domain.

Mehlala e potlakileng: ho theha molao, ho fetola aterese ea eona e hole, ho nolofalletsa / ho thibela lihlopha tsohle, le tlosa melao e thibelang ka nako e le 'ngoe. Mofuta o shebaneng le ntho o lumella ho botsisisa lihloela bakeng sa likou, lits'ebetso, kapa liaterese le liphetho tsa ketane ka liphaephe.

Ho laola lihlopha tse hole, itšetleha ka WinRM le liparamente -CimSessionSena se o lumella ho thathamisa melao, ho fetola, kapa ho hlakola likenyo mochining o mong ntle le ho siea khomphutha ea hau.

Liphoso tsa mongolo? Sebelisa -ErrorAction Ka khutso Tsoela Pele ho hatella "molao ha o fumanehe" ha o hlakola, -Haeba ho bona esale pele le -Tiisa Haeba u batla netefatso bakeng sa ntho ka 'ngoe. Ka - Ka mantsoe U tla ba le lintlha tse ling mabapi le ts'ebetso.

IPsec: Netefatso, encryption, le ho itšehla thajana ho latela leano

Ha o hloka feela sephethephethe se netefalitsoeng kapa se patiloeng hore se fete, oa kopanya Melao ea Firewall le IPsecEtsa melao ea mokhoa oa lipalangoang, hlalosa li-cryptographic sets le mekhoa ea ho netefatsa, 'me u li kopanye le melao e nepahetseng.

Haeba molekane oa hau a hloka IKEv2, o ka e hlakisa ho molao oa IPsec ka netefatso ka setifikeiti sa sesebelisoa. Sena le sona sea khoneha. kopi melao ho tloha GPO e 'ngoe ho ea ho e' ngoe le lihlopha tse amanang le tsona ho potlakisa thomello.

Ho arola litho tsa domain, sebelisa melao e hlokang netefatso bakeng sa sephethephethe se tlang mme o e hloka bakeng sa sephethephethe se tsoang. Le uena u ka khona hloka litho ka lihlopha ka liketane tsa SDDL, tse thibelang phihlello ho basebelisi / lisebelisoa tse lumelletsoeng.

Lisebelisoa tse sa ngolisoang (tse kang telnet) li ka qobelloa ho sebelisa IPsec haeba u theha "lumella haeba u sireletsehile" molao oa firewall le leano la IPsec E hloka netefatso le encryptionKa tsela eo ha ho letho le tsamaeang hantle.

Tšireletso e netefalitsoeng ea bypass le endpoint

Sebaka se netefalitsoeng se lumella sephethephethe ho tsoa ho basebelisi ba tšepahalang kapa lisebelisoa ho tlola melao e thibelang. E molemo bakeng sa ntlafatsa le ho hlahloba li-server ntle le ho bula likou lefatšeng lohle.

Haeba u batla tšireletseho ea ho qetela ho li-apps tse ngata, ho e-na le ho theha molao bakeng sa e 'ngoe le e' ngoe, tsamaisa tumello ho IPsec layer ka lethathamo la lihlopha tsa mochini/basebelisi tse lumelletsoeng ho tlhophiso ea lefats'e.

Ho tseba netstat ho bona hore na ke mang ea hokahanyang, ho sebelisa netsh le PowerShell ho kenya ts'ebetsong melao, le ho phahamisa IPsec kapa li-firewalls tse kang FortiGate ho u fa taolo ea marang-rang a hau. Ka li-filters tsa Wi-Fi tse thehiloeng ho CMD, thibelo ea IP e hlophisitsoeng hantle, litemoso tsa SEO, le lisebelisoa tse ling ha u hloka tlhahlobo e tebileng, u tla khona ho lemoha dikgokelo tse belaetsang ka nako le ho li thibela ntle le ho senya ts'ebetso ea hau.