Ungakuvimba kanjani ukuxhumeka kwenethiwekhi okusolisayo ku-CMD

¿Ungakuvimba kanjani ukuxhumeka kwenethiwekhi okusolisayo kusuka ku-CMD? Uma ikhompuyutha iqala ukusebenza kancane noma ubona umsebenzi wenethiwekhi ongajwayelekile, ukuvula umyalo futhi ukusebenzisa imiyalo ngokuvamile kuyindlela eshesha kakhulu yokuthola kabusha ukulawula. Ngemiyalelo embalwa nje, ungakwazi thola futhi uvimbele ukuxhumana okusolisayoHlola izimbobo ezivulekile futhi uqinise ukuphepha kwakho ngaphandle kokufaka noma yini eyengeziwe.

Kulesi sihloko uzothola umhlahlandlela ophelele, osebenzayo osuselwe kumathuluzi omdabu (i-CMD, i-PowerShell, nezinsiza ezifana ne-netstat ne-netsh). Uzobona ukuthi kanjani bona izikhathi ezingajwayelekileImaphi amamethrikhi okufanele uwaqaphe, uvinjwa kanjani amanethiwekhi athile e-Wi-Fi, kanye nendlela yokudala imithetho ku-Windows Firewall noma i-FortiGate, konke kuchazwe ngolimi olucacile noluqondile.

I-Netstat: ukuthi iyini, ngeyani, nokuthi kungani ihlala ingukhiye

Igama elithi netstat livela “kunethiwekhi” kanye “nezibalo”, futhi umsebenzi walo unikezwa ngokuqondile. izibalo kanye nezimo zokuxhuma ngesikhathi sangempela. Ihlanganiswe ne-Windows ne-Linux kusukela ngeminyaka yawo-90, futhi ungayithola nakwamanye amasistimu afana ne-macOS noma i-BeOS, nakuba ingenayo i-graphical interface.

Ukuyiqhuba kukhonsoli kuzokuvumela ukuthi ubone ukuxhumana okusebenzayo, izimbobo ezisetshenziswayo, amakheli endawo nakude, futhi, ngokuvamile, ukubuka konke okucacile kokuthi kwenzakalani kusitaki sakho se-TCP/IP. Ukuba nalokhu ukuskena kwenethiwekhi ngokushesha Ikusiza ukuthi ulungiselele, uhlonze, futhi ukhuphule izinga lokuvikeleka lekhompyutha yakho noma iseva.

Ukuqapha ukuthi imaphi amadivayisi axhumekayo, yiziphi izimbobo ezivuliwe, nokuthi irutha yakho imiswa kanjani kubalulekile. Nge-netstat, uphinda uthole amathebula omzila kanye izibalo ngephrothokholi ezikuqondisayo uma okuthile kungahlanganisi: ithrafikhi eningi, amaphutha, ukuminyana, noma ukuxhumana okungagunyaziwe.

Ithiphu eliwusizo: Ngaphambi kokwenza ukuhlaziya okujulile nge-netstat, vala noma yiziphi izinhlelo zokusebenza ongazidingi ngisho Qala kabusha uma kungenzekaNgale ndlela uzogwema umsindo futhi uthole ukunemba kulokho okubaluleke ngempela.

Umthelela ekusebenzeni kanye nemikhuba engcono kakhulu yokusetshenziswa

Ukusebenzisa i-netstat ngokwayo ngeke kwephule i-PC yakho, kodwa ukuyisebenzisa ngokweqile noma ngamapharamitha amaningi ngesikhathi esisodwa kungadla i-CPU nenkumbulo. Uma uyiqhuba ngokuqhubekayo noma uhlunga ulwandle lwedatha, umthwalo wesistimu uyakhula nokusebenza kungase kuhlupheke.

Ukuze unciphise umthelela wayo, yikhawulele ezimeni ezithile futhi ulungise kahle amapharamitha. Uma udinga ukugeleza okuqhubekayo, hlola amathuluzi okuqapha aqondile. Futhi khumbula: Okuncane okuningi lapho inhloso kuwukuphenya uphawu oluthile.

• Khawulela ukusetshenziswa ezikhathini lapho ukudinga khona ngempela buka ukuxhumana okusebenzayo noma izibalo.
• Hlunga kahle ukuze ubonise ulwazi oludingekayo kuphela.
• Gwema ukuhlela ukubulawa ngezikhathi ezimfushane kakhulu gcwalisa izinsiza.
• Cabangela izinsiza ezizinikele uma uzifuna monitorización en tiempo real ethuthuke kakhulu.

Izinzuzo kanye nemikhawulo yokusebenzisa i-netstat

I-Netstat isalokhu idumile phakathi kwabalawuli nochwepheshe ngoba iyahlinzeka Ukubonakala okusheshayo kokuxhumana kanye nezimbobo ezisetshenziswa izinhlelo zokusebenza. Ngemizuzwana ungabona ukuthi ubani okhuluma nobani futhi ngaziphi izimbobo.

Iphinde kusiza the ukuqapha kanye nokuxazulula izinkingaUkuminyana, izingqinamba, ukuxhumana okuqhubekayo… konke kuvela obala uma ubheka izimo nezibalo ezifanele.

• Ukutholwa ngokushesha yokuxhumana okungagunyaziwe noma ukugxambukela okungenzeka.
• Ukulandelela isikhathi phakathi kwamaklayenti namaseva ukuze kutholwe ukuphahlazeka noma ukubambezeleka.
• Ukuhlolwa kokusebenza ngephrothokholi yokubeka phambili ukuthuthukiswa lapho kunomthelela omkhulu kakhulu.

Futhi yini engenzi kahle kangaka? Ayinikezi nganoma iyiphi idatha (leyo akuyona inhloso yayo), okukhiphayo kungaba yinkimbinkimbi kubasebenzisi abangebona abezobuchwepheshe, futhi izindawo ezinkulu kakhulu ukuthi zingakalwa njengohlelo olukhethekile (i-SNMP, isibonelo). Ngaphezu kwalokho, ukusetshenziswa kwayo kuyehla ngokuvuna I-PowerShell nezinsiza zesimanje eziningi ezinemiphumela ecace kakhudlwana.

Ungayisebenzisa kanjani i-netstat evela ku-CMD futhi ufunde imiphumela yayo

Vula i-CMD njengomlawuli (Qala, thayipha okuthi “cmd”, chofoza kwesokudla, Qalisa njengomlawuli) noma sebenzisa Itheminali ku-Windows 11. Bese uthayipha netstat bese ucindezela u-Enter ukuze uthole isithombe sesikhathi.

Uzobona amakholomu anephrothokholi (i-TCP/UDP), amakheli endawo nesilawuli kude anezimbobo zawo, kanye nenkambu yesimo (UKULALELA, KUMISWE, TIME_WAIT, njll.). Uma ufuna izinombolo esikhundleni samagama echweba, sebenzisa netstat -n ukufunda okuqondile.

Izibuyekezo ngezikhathi ezithile? Ungayitshela ukuthi ivuselele njalo imizuzwana engu-X ngesikhathi esithile: isibonelo, i-netstat -n 7 Izobuyekeza okukhiphayo njalo ngemizuzwana engu-7 ukuze ibuke izinguquko ezibukhoma.

Uma unentshisekelo kuphela ekuxhumekeni okumisiwe, hlunga okukhiphayo nge-findstr: netha | findstr ImisiweShintshela ku-LISTENING, CLOSE_WAIT noma TIME_WAIT uma ukhetha ukuthola ezinye izifunda.

Amapharamitha e-netstat awusizo ophenyo

Lezi zilungisi ziyakuvumela reducir el ruido futhi ugxile kulokho okufunayo:

• -a: ibonisa ukuxhumana okusebenzayo nokungasebenzi kanye nezimbobo zokulalela.
• -e: izibalo zephakethe lesixhumi esibonakalayo (ezingenayo/ephumayo).
• -f: ixazulula futhi ibonise ama-FQDN akude (amagama esizinda afaneleke ngokugcwele).
• -n: ibonisa imbobo engaxazululiwe nezinombolo ze-IP (ngokushesha).
• -o: Engeza i-PID yenqubo egcina uxhumano.
• -p X: izihlungi ngephrothokholi (TCP, UDP, tcpv6, tcpv4...).
• -q: umbuzo oxhumene nezimbobo zokulalela nezingalaleli.
• -sIzibalo eziqoqwe ngephrothokholi (TCP, UDP, ICMP, IPv4/IPv6).
• -r: ithebula lomzila lamanje lesistimu.
• -t: ulwazi mayelana nokuxhumeka esimweni sokulanda.
• -x: Imininingwane yokuxhumeka kwe-NetworkDirect.

Izibonelo ezisebenzayo zokuphila kwansuku zonke

Ukufaka kuhlu izimbobo ezivulekile noxhumo nge-PID yabo, sebenzisa netstat -anoNgaleyo PID ungakwazi ukweqa inqubo kusiphathi Somsebenzi noma ngamathuluzi afana ne-TCPView.

Uma unentshisekelo kuphela ekuxhumekeni kwe-IPv4, hlunga ngephrothokholi nge netstat -p IP futhi uzogcina umsindo endleleni yokuphuma.

Izibalo zomhlaba wonke ngephrothokholi zivela netstat -sNakuba uma ufuna umsebenzi wezinkundla zokuxhumana (ezithunyelwe/ezamukelwe) izosebenza i-netstat -e ukuze ube nezinombolo eziqondile.

Ukuze ulandelele inkinga ngokulungiswa kwegama lesilawuli kude, hlanganisa i-netstat -f ngokuhlunga: isibonelo, netstat -f | findstr mydomain Izobuyisela kuphela lokho okufana naleso sizinda.

Uma i-Wi-Fi ihamba kancane futhi i-netstat igcwele ukuxhumana okungajwayelekile

Ikesi yakudala: ukuphequlula okunensayo, ukuhlolwa kwesivinini okuthatha isikhathi ukuqalisa kodwa okunikeza izibalo ezivamile, futhi uma usebenzisa i-netstat, okulandelayo kuyavela: inqwaba yokuxhumana IYAMISWANgokuvamile icala liyisiphequluli (i-Firefox, isibonelo, ngenxa yendlela yokuphatha amasokhethi amaningi), futhi noma uvala amawindi, izinqubo zangemuva zingaqhubeka nokugcina izikhathi.

Okufanele ngikwenze? Okokuqala, zihlobanise ne netstat -ano Qaphela ama-PID. Bese uhlola Isiphathi Somsebenzi noma nge-Process Explorer/TCPBuka ukuthi yiziphi izinqubo ezingemuva kwayo. Uma ukuxhumana nenqubo kubonakala kusolisa, cabanga ukuvimba ikheli le-IP ku-Windows Firewall. sebenzisa i-antivirus scan Futhi, uma ingozi ibonakala iphezulu kuwe, nqamula okwesikhashana okokusebenza kunethiwekhi kuze kube yilapho kucaca.

Uma izikhathi eziningi ziqhubeka ngemva kokufaka kabusha isiphequluli, hlola izandiso, vimbela okwesikhashana ukuvumelanisa, futhi ubone ukuthi ingabe amanye amakhasimende (afana neselula yakho) nawo ayanensa: lokhu kukhomba inkinga. inkinga yenethiwekhi/ISP esikhundleni sesofthiwe yendawo.

Khumbula ukuthi i-netstat ayiyona imonitha yesikhathi sangempela, kodwa ungakwazi ukulingisa eyodwa ngayo i-netstat -n 5 ukuze uvuselele njalo ngemizuzwana emi-5. Uma udinga iphaneli eqhubekayo futhi elula kakhulu, bheka TCPView noma ezinye izindlela zokuqapha ezizinikele.

Vimba amanethiwekhi athile e-Wi-Fi ku-CMD

Uma kukhona amanethiwekhi aseduze ongafuni ukuwabona noma ukuthi idivayisi yakho izame ukuwasebenzisa, ungakwazi zihlunge kusukela kukhonsoliUmyalo uyakuvumela vimba i-SSID ethile futhi uyiphathe ngaphandle kokuthinta iphaneli yezithombe.

Vula i-CMD njengomlawuli kanye nokusebenzisa:

netsh wlan add filter permission=block ssid="Nombre real de la red" networktype=infrastructure

Ngemva kokuyiqalisa, leyo nethiwekhi izonyamalala ohlwini lwamanethiwekhi atholakalayo. Ukuze uhlole lokho okuvimbile, qalisa netsh wlan show filters permit=blockFuthi uma uzisola, yisuse ngokuthi:

netsh wlan delete filter permission=block ssid="Nombre real de la red" networktype=infrastructure

Vimba amakheli e-IP asolisayo nge-Windows Firewall

Uma uthola ukuthi ikheli le-IP lomphakathi elifanayo lizama izenzo ezisolisayo ngokumelene nezinsizakalo zakho, impendulo esheshayo ithi dala umthetho ovimbayo Lokho kuxhumana. Ku-graphical console, engeza umthetho wangokwezifiso, uwusebenzise "Kuzo zonke izinhlelo", iphrothokholi "Noma iziphi", cacisa ama-IP akude ozowavimba, hlola "Vimba ukuxhumeka" futhi usebenzise kusizinda/esiyimfihlo/esidlangalaleni.

Ingabe ukhetha ukuzenzela? Nge-PowerShell, ungakha, uguqule, noma ususe imithetho ngaphandle kokuchofoza. Isibonelo, ukuvimba ithrafikhi ye-Telnet ephumayo bese ukhawulela ikheli le-IP elikude elivunyelwe, ungasebenzisa imithetho nge New-NetFirewallRule bese ulungisa nge Setha-NetFirewallRule.

# Bloquear tráfico saliente de Telnet (ejemplo)
New-NetFirewallRule -DisplayName "Block Outbound Telnet" -Direction Outbound -Program %SystemRoot%\System32\telnet.exe -Protocol TCP -LocalPort 23 -Action Block

# Cambiar una regla existente para fijar IP remota
Get-NetFirewallPortFilter | ?{ $_.LocalPort -eq 80 } | Get-NetFirewallRule | ?{ $_.Direction -eq "Inbound" -and $_.Action -eq "Allow" } | Set-NetFirewallRule -RemoteAddress 192.168.0.2

Ukuze uphathe imithetho ngamaqembu noma ususe imithetho yokuvimbela ngobuningi, thembela kuyo Nika amandla/Khubaza/Susa-NetFirewallRule kanye nemibuzo ngama-wildcards noma izihlungi ngezakhiwo.

Izindlela ezingcono kakhulu: Ungayeki ukuvala isevisi ye-Firewall

I-Microsoft yeluleka ngokumelene nokumisa isevisi ye-Firewall (MpsSvc). Ukwenza kanjalo kungabangela izinkinga zemenyu yokuqala, izinkinga zokufaka izinhlelo zokusebenza zesimanjemanje, noma ezinye izinkinga. amaphutha okuqalisa Ngocingo. Uma, ngokomgomo, udinga ukukhubaza amaphrofayili, kwenze lokho ku-firewall noma ileveli yokumisa ye-GPO, kodwa ushiye isevisi isebenza.

Amaphrofayili (isizinda/esiyimfihlo/esidlangalaleni) kanye nezenzo ezizenzakalelayo (vumela/vimba) angasethwa emugqeni womyalo noma kukhonsoli yokuvikela umlilo. Ukugcina lokhu okumisiwe kuchazwe kahle kuvimbela izimbobo ngokuzenzakalelayo lapho udala imithetho emisha.

I-FortiGate: Vimba imizamo ye-SSL VPN kuma-IP omphakathi asolisayo

Uma usebenzisa i-FortiGate futhi ubona imizamo yokungena ehlulekile ye-SSL VPN yakho kusuka kuma-IP ongawajwayele, dala indawo yokubhukuda (ngokwesibonelo, blacklistipp) bese wengeza wonke ama-IP angqubuzanayo lapho.

Ku-console, faka izilungiselelo ze-SSL VPN nge lungiselela ukulungiselelwa kwe-vpn ssl futhi kuyasebenza: setha ikheli lomthombo elithi “blacklistipp” y setha umthombo-ikheli-phika amandla. Con un show Uyaqinisekisa ukuthi isetshenzisiwe. Ngale ndlela, uma othile evela kulawo ma-IP, uxhumano luzonqatshwa kusukela ekuqaleni.

Ukuhlola ithrafikhi eshaya leyo IP nechweba, ungasebenzisa xilonga iphakethe le-sniffer noma iyiphi i-“host XXXX ne-port 10443” 4, y con thola i-vpn ssl monitor Uhlola izikhathi ezivunyelwe kuma-IPs angafakiwe ohlwini.

Enye indlela SSL_VPN > Khawulela ukufinyelela > Khawulela ukufinyelela kubasingathi abathileNokho, kuleso simo ukwenqatshwa kwenzeka ngemva kokufaka iziqinisekiso, hhayi ngokushesha njenge-console.

Ezinye izindlela ze-netstat zokubuka nokuhlaziya ithrafikhi

Uma ufuna ukunethezeka okwengeziwe noma imininingwane, akhona amathuluzi akunikezayo. ihluzo, izihlungi ezithuthukisiwe kanye nokuthwebula okujulile yamaphakheji:

• I-Wireshark: ukubanjwa kwethrafikhi nokuhlaziya kuwo wonke amazinga.
• imv2 (Linux): izinsiza zokuphatha i-TCP/UDP kanye ne-IPv4/IPv6.
• I-GlassWireUkuhlaziywa kwenethiwekhi ngokuphathwa kwe-firewall nokugxila kubumfihlo.
• I-Uptrends Uptime MonitorUkuqapha kwesayithi okuqhubekayo kanye nezixwayiso.
• I-UX yaseJalimane: ukuqapha kugxile ekumeni okufana nezezimali noma ezempilo.
• Atera: I-RMM suite enokuqapha nokufinyelela kude.
• CloudsharkIzibalo zewebhu nokwabelana ngesithombe-skrini.
• iptraf / iftop (Linux): Ithrafikhi yesikhathi sangempela nge-interface enembile kakhulu.
• ss (Izibalo Zesokhethi) (Linux): enye yesimanje, ecace kakhudlwana ye-netstat.

Ukuvinjwa kwe-IP kanye nomthelela wayo ku-SEO, kanye namasu okunciphisa

Ukuvimba ama-IP anolaka kunengqondo, kodwa qaphela vimba ama-bots enjini yokuseshaNgoba ungase ulahlekelwe ukukhomba. Ukuvinjwa kwezwe kungase futhi kungafaki abasebenzisi abasemthethweni (noma ama-VPN) futhi kunciphise ukubonakala kwakho ezifundeni ezithile.

Izinyathelo ezihambisanayo: engeza CAPTCHAs Ukuze umise ama-bots, sebenzisa i-rate capping ukuze uvimbele ukuhlukumeza futhi ubeke i-CDN ukuze unciphise i-DDoS ngokusabalalisa umthwalo kuwo wonke ama-node asabalalisiwe.

Uma ukusingathwa kwakho kusebenzisa i-Apache futhi une-geo-blocking enikwe amandla kuseva, ungakwazi qondisa kabusha ukuvakasha kusuka ezweni elithile usebenzisa i-.htaccess enomthetho wokubhala kabusha (isibonelo esijwayelekile):

RewriteEngine on
RewriteCond %{ENV:GEOIP_COUNTRY_CODE} ^CN$
RewriteRule ^(.*)$ http://tu-dominio.com/pagina-de-error.html [R=301,L]

Ukuvimba ama-IP ekusingatheni (Plesk), ungahlela futhi .htaccess futhi unqabele amakheli athile, ngaso sonke isikhathi ube nesipele sangaphambili sefayela uma kwenzeka udinga ukubuyisela izinguquko.

Phatha i-Windows Firewall ngokujulile usebenzisa i-PowerShell ne-netsh

Ngaphandle kokudala imithetho ngayinye, i-PowerShell ikunikeza ukulawula okuphelele: chaza amaphrofayili azenzakalelayo, dala/guqula/susa imithetho futhi usebenze ngokumelene nama-Active Directory GPO anezikhathi ezigcinwe kunqolobane ukuze unciphise umthwalo kuzilawuli zesizinda.

Izibonelo ezisheshayo: ukudala umthetho, ukushintsha ikheli laso elikude, ukunika amandla/ukukhubaza wonke amaqembu, kanye susa imithetho yokuvimba ngesinye isikhathi. Imodeli egxile entweni ivumela ukubuza izihlungi zezimbobo, izinhlelo zokusebenza, noma amakheli kanye nemiphumela yokuhlanganisa ngamapayipi.

Ukuze uphathe amaqembu akude, thembela kuwo WinRM kanye namapharamitha -CimSessionLokhu kukuvumela ukuthi ubhale imithetho, uguqule, noma ususe okufakiwe kweminye imishini ngaphandle kokushiya ikhonsoli yakho.

Amaphutha emibhalweni? Sebenzisa -Isenzo Sephutha ButhuleQhubeka ukucindezela "umthetho ongatholakali" lapho ususa, -Kuthiwani uma ukuhlola kuqala futhi -Qinisekisa Uma ufuna ukuqinisekiswa kwento ngayinye. Nge -Izwi Uzoba nemininingwane eyengeziwe ngokubulawa.

IPsec: Ukuqinisekisa, ukubethela, nokuhlukaniswa okusekelwe kunqubomgomo

Uma udinga kuphela ithrafikhi eqinisekisiwe noma ebethelwe ukuze udlule, uyahlanganisa Imithetho ye-Firewall ne-IPsecDala imithetho yemodi yokuthutha, chaza amasethi e-cryptographic nezindlela zokuqinisekisa, futhi uzihlanganise nemithetho efanele.

Uma uzakwethu edinga i-IKEv2, ungayicacisa kumthetho we-IPsec ngokufakazela ubuqiniso ngesitifiketi sedivayisi. Lokhu kungenzeka futhi. kopisha imithetho ukusuka kwenye i-GPO ukuya kwenye kanye namasethi ayo ahlobene nawo ukuze kusheshiswe ukuthunyelwa.

Ukuze uhlukanise amalungu esizinda, sebenzisa imithetho edinga ukuqinisekiswa kwethrafikhi engenayo futhi ikudinga kuthrafikhi ephumayo. Ungakwazi futhi zidinga ubulungu ngamaqembu ngamaketanga e-SDDL, akhawulela ukufinyelela kubasebenzisi/amadivayisi agunyaziwe.

Izinhlelo zokusebenza ezingabetheliwe (ezifana ne-telnet) zingaphoqeleka ukusebenzisa i-IPsec uma udala umthetho othi "vumela uma uvikelekile" kanye nenqubomgomo ye-IPsec Idinga ukuqinisekiswa nokubethelaNgaleyo ndlela akukho okuhamba kahle.

I-bypass eqinisekisiwe kanye nokuphepha kwephoyinti lokugcina

Ukudlula okugunyazwe kuvumela ithrafikhi evela kubasebenzisi abathembekile noma amadivayisi ukuthi akhiphe imithetho yokuvimbela. Iwusizo for buyekeza futhi uskene amaseva ngaphandle kokuvula amachweba emhlabeni wonke.

Uma ufuna ukuvikeleka kokugcina kuzo zonke izinhlelo zokusebenza eziningi, esikhundleni sokudala umthetho wento ngayinye, hambisa ukugunyazwa kusendlalelo se-IPsec ngohlu lwamaqembu omshini/abasebenzisi avunyelwe ekucushweni komhlaba jikelele.

Ukwenza kahle i-netstat ukuze ubone ukuthi ubani oxhumayo, usebenzisa i-netsh ne-PowerShell ukuze kusetshenziswe imithetho, kanye nokukala nge-IPsec noma ngodonga lwama-firewall njenge-FortiGate kukunikeza ukulawula inethiwekhi yakho. Ngezihlungi ze-Wi-Fi ezisekelwe ku-CMD, ukuvinjwa kwe-IP okuklanywe kahle, izinyathelo zokuphepha ze-SEO, namanye amathuluzi lapho udinga ukuhlaziywa okujulile, uzokwazi thola ukuxhumana okusolisayo ngesikhathi futhi uwavimbe ngaphandle kokuphazamisa ukusebenza kwakho.