Uluvala njani uqhagamshelo lwenethiwekhi olukrokrelayo kwi-CMD

¿Uluvala njani uqhagamshelo lwenethiwekhi olukrokrelayo kwi-CMD? Xa ikhomputha iqalisa ukusebenza kancinane okanye ubona umsebenzi womnatha ongaqhelekanga, ukuvula i-prompt yomyalelo kunye nokusebenzisa imiyalelo kudla ngokuba yeyona ndlela ikhawulezayo yokubuyisela ulawulo. Ngemiyalelo nje embalwa, unako Fumana kwaye uvale imidibaniso ekrokrisayoPhicotha amazibuko avulekileyo kwaye womeleze ukhuseleko lwakho ngaphandle kokufaka nantoni na eyongezelelweyo.

Kweli nqaku uya kufumana isikhokelo esipheleleyo, esisebenzayo esekwe kwizixhobo zemveli (CMD, PowerShell, kunye nezinto eziluncedo ezifana netstat kunye netsh). Uya kubona ukuba njani chonga iiseshoni ezingaqhelekangaZiziphi iimethrikhi zokubeka iliso, indlela yokuthintela uthungelwano oluthile lwe-Wi-Fi, kunye nendlela yokwenza imithetho kwi-Firewall yeWindows okanye nakwi-FortiGate, zonke zichazwe ngolwimi olucacileyo noluthe ngqo.

INetstat: yintoni, yeyantoni, kwaye kutheni ihlala ingundoqo

Igama elithi netstat livela kwi "network" kunye "nestatistics", kwaye umsebenzi wayo unikezela ngokuchanekileyo amanani kunye namanqanaba oqhagamshelwano ngexesha lokwenyani. Idityaniswe kwiWindows kunye neLinux ukusukela ngeminyaka yee-90s, kwaye unokuyifumana nakwezinye iinkqubo ezifana ne-macOS okanye i-BeOS, nangona ingenamzobo womzobo.

Ukuyiqhuba kwikhonsoli kuya kukuvumela ukuba ubone uqhagamshelo olusebenzayo, izibuko ezisetyenziswayo, iidilesi zasekhaya kunye nezikude, kwaye, ngokubanzi, umboniso ocacileyo wento eyenzekayo kwisitaki sakho seTCP/IP. Ukuba nale iskena senethiwekhi ngoko nangoko Ikunceda ukuba uqwalasele, uxilonge, kwaye uphakamise inqanaba lokhuseleko lwekhompyuter yakho okanye iseva.

Ukubeka iliso ukuba zeziphi izixhobo eziqhagamshelayo, zeziphi izibuko ezivulekileyo, kunye nendlela umzila wakho oqwalaselwe ngayo kubalulekile. Nge-netstat, ufumana iitafile zendlela kunye izibalo ngokweprothokholi ezikukhokelayo xa kukho into engadibanisiyo: itrafikhi egqithisileyo, iimpazamo, ukuxinana, okanye uqhagamshelwano olungagunyaziswanga.

Ingcebiso eluncedo: Phambi kokuba wenze uhlalutyo olunzulu nge-netstat, vala naziphi na izicelo ongazifuniyo kwaye Qala kwakhona ukuba kunokwenzekaNgale ndlela uya kuyinqanda ingxolo kwaye ufumane ukuchaneka kweyona nto ibalulekileyo.

Impembelelo ekusebenzeni kunye neendlela ezifanelekileyo zokusetyenziswa

Ukubaleka i-netstat ngokwayo akuyi kwaphula iPC yakho, kodwa ukuyisebenzisa kakhulu okanye ngeeparamitha ezininzi ngaxeshanye kunokutya i-CPU kunye nememori. Ukuba uyayiqhuba ngokuqhubekayo okanye ucofe ulwandle lwedatha, umthwalo wenkqubo uyenyuka kunye nokusebenza kunokuba nzima.

Ukunciphisa impembelelo yayo, yinciphise kwiimeko ezithile kwaye ulungise kakuhle iiparamitha. Ukuba ufuna ukuhamba okuqhubekayo, vavanya izixhobo zokubeka iliso ezithe ngqo. Kwaye khumbula: Okungaphantsi kuninzi xa injongo ikukuphanda uphawu oluthile.

• Nciphisa ukusetyenziswa kumaxesha xa uyifuna ngokwenene Jonga imidibaniso esebenzayo okanye izibalo.
• Hlunga ngokuchanekileyo ukubonisa kuphela ulwazi oluyimfuneko.
• Kuphephe ukucwangcisa ukubulawa ngamaxesha amafutshane kakhulu ukuba hluthisa izibonelelo.
• Cinga ngezixhobo ezizinikeleyo ukuba uyafuna ukubeka esweni ngexesha langempela phambili ngakumbi.

Izinto eziluncedo kunye nezithintelo zokusebenzisa i-netstat

I-Netstat ihlala idumile phakathi kwabalawuli kunye neengcali kuba inika Ukubonakala kwangoko koqhagamshelo kunye namazibuko asetyenziswa zizicelo. Ngemizuzwana uyakwazi ukubona ukuba ngubani othetha nabani kwaye ngawaphi amazibuko.

Ikwaququzelela i ukubeka iliso kunye nokusombulula ingxakiUkuxinana, imiqobo, uqhagamshelo oluzingisileyo… konke kuyacaca xa ujonga ubume obufanelekileyo kunye nezibalo.

• Ukufunyanwa ngokukhawuleza yoqhagamshelo olungagunyaziswanga okanye ungenelelo olunokwenzeka.
• Ukulandelwa kweseshoni phakathi kwabaxhasi kunye neeseva ukufumana iingozi okanye ixesha elide.
• Uvandlakanyo lokusebenza ngeprothokholi yokubeka phambili uphuculo apho banempembelelo enkulu.

Kwaye yintoni engenzi kakuhle kangaka? Ayiboneleli ngayo nayiphi na idatha (ayiyonjongo yayo leyo), imveliso yayo inokuba nzima kubasebenzisi abangengobuchwephesha, kwaye iindawo ezinkulu kakhulu zokungalinganisi njengenkqubo ekhethekileyo (i-SNMP, umzekelo). Ngaphezu koko, ukusetyenziswa kwayo kuye kwancipha ngokuthanda I-PowerShell kunye nezinto eziluncedo zale mihla ezineziphumo ezicacileyo.

Uyisebenzisa njani i-netstat esuka kwi-CMD kwaye ufunde iziphumo zayo

Vula i-CMD njengomlawuli (Qala, chwetheza “cmd”, cofa ekunene, Sebenzisa njengomlawuli) okanye usebenzise iTheminali ngaphakathi Windows 11. Emva koko chwetheza i-netstat kwaye ucinezele u-Enter ukufumana ifoto yomzuzu.

Uza kubona iikholamu kunye neprotocol (TCP/UDP), iidilesi zasekhaya kunye nezikude kunye namachweba azo, kunye nomhlaba wesimo (UKUMAMELA, KUSEKWE, TIME_WAIT, njl.). Ukuba ufuna amanani endaweni yamagama ezibuko, sebenzisa netstat -n ukufunda ngokuthe ngqo.

Uhlaziyo ngamaxesha? Ungayixelela ukuba ihlaziye yonke imizuzwana engu-X ngexesha lokuphumla: umzekelo, netstat -n 7 Iza kuhlaziya imveliso rhoqo ngemizuzwana ye-7 ukujonga utshintsho oluphilayo.

Ukuba unomdla kuphela kuqhagamshelo olusekiweyo, hluza imveliso nge findstr: netstat | findstr IYASEKWATshintshela ku-MAMELA, CLOSE_WAIT okanye TIME_WAIT ukuba ukhetha ukubona ezinye iidolophu.

Iiparamitha eziluncedo ze-netstat zophando

Ezi zilungisi ziyakuvumela ukunciphisa ingxolo kwaye ugxile kule nto uyikhangelayo:

• -a: ibonisa uqhagamshelwano olusebenzayo nolungasebenziyo kunye namazibuko okuphulaphula.
• -e: izibalo zepakethe yojongano (ezingenayo/ephumayo).
• -f: isombulula kwaye ibonise ii-FQDN ezikude (amagama e-domain afaneleke ngokupheleleyo).
• -n: ibonisa izibuko ezingasonjululwanga kunye neenombolo ze-IP (ngokukhawuleza).
• -o: yongeza i-PID yenkqubo egcina uxhulumaniso.
• -p X: izihluzi ngeprotocol (TCP, UDP, tcpv6, tcpv4...).
• -q: umbuzo unxulunyaniswa nokuphulaphula kunye namazibuko angamameliyo.
• -sIinkcukacha-manani zihlelwe ngokweprotocol (TCP, UDP, ICMP, IPv4/IPv6).
• -r: itheyibhile yangoku yendlela yenkqubo.
• -t: ulwazi malunga noqhagamshelwano kwimeko yokukhuphela.
• -x: Iinkcukacha zoqhagamshelwano lwe-NetworkDirect.

Imizekelo esebenzayo kubomi bemihla ngemihla

Ukudwelisa amazibuko avulekileyo kunye noqhagamshelo kunye ne-PID yabo, sebenzisa netstat -anoNgaloo PID unokunqumla-ireferensi inkqubo kuMphathi woMsebenzi okanye ngezixhobo ezifana ne-TCPView.

Ukuba unomdla kuphela kuqhagamshelo lwe-IPv4, hluza ngeprothokholi nge netstat -p IP kwaye uya kugcina ingxolo endleleni yokuphuma.

Izibalo zehlabathi ngeprotocol zivela netstat -sNgelixa ufuna umsebenzi wojongano (oluthunyelwe/ olufunyenweyo) luyakusebenza netstat -e ukuba namanani achanekileyo.

Ukulandelela ingxaki ngesisombululo segama elikude, dibanisa netstat -f ngokucoca: umzekelo, netstat -f | findstr mydomain Iya kubuyisela kuphela into ehambelana nelo thambeka.

Xa i-Wi-Fi icotha kwaye i-netstat izele luqhagamshelwano olungaqhelekanga

Imeko eqhelekileyo: ukukhangela kancinane, uvavanyo lwesantya oluthatha ixesha ukuqalisa kodwa lunike amanani aqhelekileyo, kwaye xa uqhuba i-netstat, kuvela oku kulandelayo: ezininzi zoqhagamshelo ZISEKWENgokuqhelekileyo unobangela sisikhangeli (Firefox, umzekelo, ngenxa yendlela yokuphatha iisokethi ezininzi), kwaye nokuba uvala iifestile, iinkqubo zangasemva zingaqhubeka nokugcina iiseshoni.

Kwenziwe ntoni? Okokuqala, zichonge netstat -ano Qaphela ii-PIDs. Emva koko jonga kuMphathi woMsebenzi okanye ngeNkqubo yoMhloli/TCPView zeziphi iinkqubo ezisemva kwayo. Ukuba uqhagamshelo kunye nenkqubo ibonakala ikrokrisa, cinga ngokuvalela idilesi ye-IP kwiWindows Firewall. sebenzisa i-antivirus scan Kwaye, ukuba umngcipheko ubonakala uphezulu kuwe, qhawula okwethutyana izixhobo kwinethiwekhi de kube kucace.

Ukuba isikhukula seeseshini siyaqhubeka emva kokufaka kwakhona isikhangeli, jonga izandiso, ukhubaze okwethutyana ungqamaniso, kwaye ubone ukuba abanye abathengi (njengesixhobo sakho esiphathwayo) nabo bayacotha: oku kukhomba ingxaki. inethiwekhi/ISP ingxaki kunokuba isoftware yendawo.

Khumbula ukuba i-netstat ayisosijongi sexesha lokwenyani, kodwa ungalinganisa enye nayo netstat -n 5 ukuhlaziya yonke imizuzwana emi-5. Ukuba ufuna iphaneli eqhubekayo kwaye efanelekileyo ngakumbi, jonga Jonga iTCP okanye ezinye iindlela zokubeka iliso ezizinikele ngakumbi.

Vala uthungelwano oluthile lwe-Wi-Fi olusuka kwi-CMD

Ukuba kukho iinethiwekhi ezikufutshane ongafuniyo ukuzibona okanye isixhobo sakho sizame ukusisebenzisa, unako zihluze kwi consoleUmyalelo uyakuvumela vala i-SSID ethile kwaye uyilawule ngaphandle kokuchukumisa indawo yolawulo yomzobo.

Vula i-CMD njengomlawuli kunye nokusetyenziswa:

netsh wlan add filter permission=block ssid="Nombre real de la red" networktype=infrastructure

Emva kokuyiqhuba, loo nethiwekhi iya kunyamalala kuluhlu lweenethiwekhi ezikhoyo. Ukujonga oko ukuvimbileyo, qalisa netsh wlan bonisa izihluzi imvume=bhlokoKwaye ukuba uyazisola, yicime nge:

netsh wlan delete filter permission=block ssid="Nombre real de la red" networktype=infrastructure

Vimba iidilesi ze-IP ezikrokrelekayo ngeWindows Firewall

Ukuba uqaphela ukuba kwaedilesi ye-IP yoluntu izama izenzo ezikrokrisayo ngokuchasene neenkonzo zakho, impendulo ekhawulezayo yile yenza umgaqo othintela Ezo ziqhagamshelo. Kwi-graphical console, yongeza umgaqo wesiko, uwusebenzise kuyo "Zonke iinkqubo", iprotocol "Nayiphi na", cacisa ii-IP ezikude ukuvala, khangela "Vala uxhulumaniso" kwaye usebenzise kwi-domain/private/public.

Ngaba ukhetha ukuzenzela? NgePowerShell, unokwenza, uguqule, okanye ucime imithetho ngaphandle kokucofa. Umzekelo, ukuvala itrafikhi yeTelnet ephumayo kwaye emva koko uthintele idilesi ye-IP evumelekileyo, ungasebenzisa imithetho nge Umthetho we-NetFirewall oMtsha kwaye emva koko ulungelelanise ne Seta-NetFirewallRule.

# Bloquear tráfico saliente de Telnet (ejemplo)
New-NetFirewallRule -DisplayName "Block Outbound Telnet" -Direction Outbound -Program %SystemRoot%\System32\telnet.exe -Protocol TCP -LocalPort 23 -Action Block

# Cambiar una regla existente para fijar IP remota
Get-NetFirewallPortFilter | ?{ $_.LocalPort -eq 80 } | Get-NetFirewallRule | ?{ $_.Direction -eq "Inbound" -and $_.Action -eq "Allow" } | Set-NetFirewallRule -RemoteAddress 192.168.0.2

Ukulawula imigaqo ngamaqela okanye ukucima imithetho yokuthintela ngobuninzi, thembele Yenza/Khubaza/Susa-NetFirewallRule kunye nemibuzo kunye wildcards okanye izihluzo ngeempawu.

Eyona ndlela ilungileyo: Musa ukuvala inkonzo yeFirewall

UMicrosoft ucebisa ukuba ungayeki inkonzo yeFirewall (MpsSvc). Ukwenza njalo kunokubangela imiba yemenyu yokuQala, iingxaki zokufakela usetyenziso lwangoku, okanye ezinye iingxaki. iimpazamo zokuvula Ngefowuni. Ukuba, njengombandela womgaqo-nkqubo, kufuneka ukhubaze iiprofayili, yenza njalo kwi-firewall okanye inqanaba lokumisela i-GPO, kodwa ushiye inkonzo isebenza.

Iiprofayili (i-domain/yabucala/yoluntu) kunye nezenzo ezingagqibekanga (vumela/ibhlokhi) zingasetwa ukusuka kumgca womyalelo okanye i-firewall console. Ukugcina oku kungagqibekanga kuchazwe kakuhle kuthintela imingxuma enganyanzelekanga xa usenza imithetho emitsha.

I-FortiGate: Vimba iinzame ze-SSL VPN ezivela kwii-IP zoluntu ezikrokrelayo

Ukuba usebenzisa i-FortiGate kwaye ubone iinzame zokungena ezingaphumelelanga kwi-SSL VPN yakho kwii-IP ezingaqhelekanga, yenza idili yedilesi (umzekelo, blacklistipp) kwaye wongeze zonke ii-IP eziphikisanayo apho.

Kwikhonsoli, faka useto lwe-SSL VPN nge cwangcisa i-vpn ssl kwaye iyasebenza: seta umthombo-idilesi "blacklistipp" y cwangcisa umthombo-idilesi-yala yenza ukubaNge umboniso Uyaqinisekisa ukuba isetyenzisiwe. Ngale ndlela, xa umntu evela kwezo IPs, uxhulumaniso luya kwaliwa kwasekuqaleni.

Ukujonga i-traffic ebetha loo IP kunye ne-port, ungasebenzisa xilonga ipakethe yesniffer nayiphi na "ihostele i-XXXX kunye ne-port 10443" 4kunye fumana vpn ssl esweni Ujonga iiseshoni ezivunyelweyo kwii-IP ezingafakwanga kuluhlu.

Enye indlela SSL_VPN > Nciphisa uFikelelo > Nciphisa ukufikelela kubabuthi abathileNangona kunjalo, kuloo meko ukukhatywa kwenzeka emva kokufaka iziqinisekiso, kungekhona ngokukhawuleza njenge-console.

Iindlela ezizezinye kwi-netstat zokujonga kunye nokuhlalutya itrafikhi

Ukuba ujonge intuthuzelo ngakumbi okanye iinkcukacha, kukho izixhobo ezibonelela ngayo. Iigraphics, izihluzi eziphambili, kunye nokubanjwa okunzulu yeepakethe:

• I-Wireshark: ukuthathwa kwetrafikhi kunye nohlalutyo kuwo onke amanqanaba.
• iploute2 (Linux): izixhobo zokulawula i-TCP/UDP kunye ne-IPv4/IPv6.
• I-GlassWireUhlalutyo lwenethiwekhi kunye nolawulo lwe-firewall kunye nokugxila kubumfihlo.
• Uptrends Uptime MonitorUkubeka iliso rhoqo kunye nezilumkiso.
• eJamani UX: ukubeka iliso kugxininise kwimiqobo efana nezezimali okanye impilo.
• I-Atera: I-RMM suite enokubekwa kweliso kunye nokufikelela kude.
• CloudsharkUhlalutyo lwewebhu kunye nokwabelana ngesikrini.
• iptraf / iftop (Linux): Itrafikhi yexesha lokwenyani nge-interface enembile kakhulu.
• ss (Socket Statistics) (Linux): indlela yangoku, ecacileyo engenye ye-netstat.

Ukuvalwa kwe-IP kunye nefuthe layo kwi-SEO, kunye nezicwangciso zokunciphisa

Ukuthintela ii-IPs ezinobundlobongela kunengqiqo, kodwa qaphela block injini yokukhangela botsKuba ungaphulukana nesalathisi. Ukuvalwa kwelizwe kunokungabandakanyi abasebenzisi abasemthethweni (okanye iiVPNs) kunye nokunciphisa ukubonakala kwakho kwimimandla ethile.

Amanyathelo awongezelelweyo: yongeza Ii-CAPTCHA Ukuyeka i-bots, sebenzisa i-rate capping ukukhusela ukusetyenziswa kakubi kunye nokubeka i-CDN yokunciphisa i-DDoS ngokusabalalisa umthwalo kwiindawo ezisasazwayo.

Ukuba umninimzi wakho usebenzisa i-Apache kwaye une-geo-blocking enikwe amandla kumncedisi, unako phinda undwendwele ukusuka kwilizwe elithile usebenzisa .htaccess kunye nomgaqo wokubhala kwakhona (umzekelo oqhelekileyo):

RewriteEngine on
RewriteCond %{ENV:GEOIP_COUNTRY_CODE} ^CN$
RewriteRule ^(.*)$ http://tu-dominio.com/pagina-de-error.html [R=301,L]

Ukuvala ii-IPs kwi-hosting (Plesk), unokuhlela kwakhona ukufikelela kwi-.ht kwaye yala iidilesi ezithile, rhoqo ngokhuseleko lwangaphambili lwefayile xa ufuna ukubuyisela utshintsho.

Lawula iWindows Firewall ngobunzulu usebenzisa iPowerShell kunye netsh

Ngaphandle kokudala imithetho yomntu ngamnye, iPowerShell ikunika ulawulo olupheleleyo: chaza iinkangeleko ezihlala zikhona, yenza / uguqule / ucime imigaqo kwaye usebenze ngokuchasene ne-Active Directory GPOs kunye neeseshoni ezigciniweyo zokunciphisa umthwalo kubalawuli besizinda.

Imizekelo ekhawulezayo: ukudala umgaqo, ukutshintsha idilesi yayo ekude, ukuvumela / ukukhubaza amaqela onke, kunye susa imithetho yokuthintela kwelinye icala. Imodeli ejolise kwinto ivumela ukubuza izihluzi zamazibuko, usetyenziso, okanye iidilesi kunye neziphumo zekhonkco ngemibhobho.

Ukulawula amaqela akude, thembele I-WinRM kunye neeparamitha -CimSessionOku kukuvumela ukuba udwelise imithetho, uguqule, okanye ucime amangeniso kwabanye oomatshini ngaphandle kokushiya ikhonsoli yakho.

Iimpazamo kwizikripthi? Sebenzisa -Isenzo semposiso ngokuthule Qhubeka ukucinezela "umthetho awufunyanwanga" xa ucima, -Ungathini ukuba ukujonga kuqala kunye -Qinisekisa Ukuba ufuna isiqinisekiso ngento nganye. Nge -Verbose Uya kuba neenkcukacha ezithe kratya malunga nokuphunyezwa.

IPsec: Uqinisekiso, uguqulelo oluntsonkothileyo, kunye nokwahlukaniswa okusekwe kumgaqo-nkqubo

Xa ufuna kuphela itrafikhi eqinisekisiweyo okanye efihliweyo ukuze udlule, uyadibanisa I-Firewall kunye nemithetho ye-IPsecYenza imithetho yendlela yokuthutha, uchaze iiseti ze-cryptographic kunye neendlela zokuqinisekisa, kwaye uzidibanise nemithetho efanelekileyo.

Ukuba iqabane lakho lifuna i-IKEv2, ungayichaza kumgaqo we-IPsec ngoqinisekiso ngesatifikethi sesixhobo. Oku kunokwenzeka. ikopi imithetho ukusuka kwi-GPO ukuya kwenye kunye neeseti ezinxulumene nazo ukukhawulezisa ukuthunyelwa.

Ukwahlula amalungu e-domain, sebenzisa imigaqo efuna ukuqinisekiswa kwetrafikhi engenayo kwaye ifune i-traffic ephumayo. Unako kwakhona zifuna ubulungu ngokwamaqela ngamatyathanga e-SDDL, ethintela ukufikelela kubasebenzisi/izixhobo ezigunyazisiweyo.

izicelo ezingafihlwanga (ezifana ne telnet) zinganyanzelwa ukuba zisebenzise IPsec ukuba wenza "ukuvumela ukuba ukhuselekile" umthetho womlilo kunye nenkqubo ye IPsec Funa uqinisekiso kunye noguqulelo oluntsonkothileyoNgaloo ndlela akukho nto ihamba ngokucacileyo.

Ungqinisiso lokugqitha kunye nokhuseleko lwendawo yokugqibela

I-bypass eqinisekisiweyo ivumela i-traffic evela kubasebenzisi abathembekileyo okanye izixhobo ukuba zikhuphe imithetho yokuthintela. Iluncedo kwi ukuhlaziya kunye neeseva zokuskena ngaphandle kokuvula amazibuko kwihlabathi liphela.

Ukuba ujonge ukhuseleko oluphelayo ukuya esiphelweni kuzo zonke ii-apps ezininzi, endaweni yokwenza umgaqo wento nganye, hambisa ugunyaziso kwi-IPsec umaleko ngoluhlu lomatshini/amaqela abasebenzisi avunyelweyo kuqwalaselo lwehlabathi.

Ukubamba i-netstat ukubona ukuba ngubani oqhagamshelayo, osebenzisa i-netsh kunye ne-PowerShell ukunyanzelisa imithetho, kunye nokulinganisa nge-IPsec okanye i-firewall ejikelezayo efana ne-FortiGate ikunika ulawulo lwenethiwekhi yakho. Ngezihluzi ze-Wi-Fi ezisekelwe kwi-CMD, i-IP eyilwe kakuhle, izilumkiso ze-SEO, kunye nezixhobo ezizezinye xa ufuna uhlalutyo olunzulu, uya kukwazi Fumana unxibelelwano olukrokrisayo ngexesha kwaye ubathintele ngaphandle kokuphazamisa ukusebenza kwakho.