Knocking Port: Mafi kyawun tsaro da zaka iya samu akan kwamfutarka ko sabarka (Depaddamarwa + Kanfigareshan)

Bugun tashar jiragen ruwa (cikin Turanci tashar tashar jirgin ruwa) Tabbas aiki ne da yakamata dukkanmu masu kula da sabobin su sani sosai, anan nayi bayani dalla-dalla menene wannan kuma yadda za'a aiwatar da saita shi 😉

A yanzu haka wadanda muke sarrafa sabar suna da damar SSH zuwa wannan sabar, wasu mun canza tsoho tashar jiragen ruwa na SSH kuma baya amfani da tashar jiragen ruwa 22 wasu kuma kawai suna barin shi kamar haka (wani abu da ba a ba da shawara ba), duk da haka sabar ta ba da damar samun damar SSH ta wasu tashar jiragen ruwa kuma wannan ya riga ya zama 'yanayin rauni'.

con Knocking tashar jirgin ruwa zamu iya cimma wadannan:

1. Ba a kunna damar SSH ta kowace tashar jiragen ruwa. Idan muna da SSH da aka saita don tashar 9191 (misali) wannan tashar (9191) za'a rufe ta ga kowa.
2. Idan wani yana son samun damar sabar ta hanyar SSH, a bayyane yake, ba za su iya ba, tunda tashar tashar 9191 a rufe take ... amma, idan muka yi amfani da 'sihiri' ko haɗakar ɓoye, za a buɗe wannan tashar, misali:

1. Na buga zuwa tashar jiragen ruwa 7000 na saba
2. Na sake yin wata waya don shigar da 8000 na sabar
3. Na sake yin wata waya don tashar 9000 na sabar
4. Sabar tana gano cewa wani yayi hadadden sirrin (tabo tashar jiragen ruwa 7000, 8000 da 9000 a wannan tsari) kuma zai bude tashar 9191 don SSH ya nemi shiga (zai bude shi ne kawai don IP din da akayi hada shi lambar tashar mai gamsarwa).
5. Yanzu don rufe SSH kawai nakan buga tashar 3500
6. Zan sake yin wata waya don tashar jirgin ruwa ta 4500
7. Kuma a ƙarshe wani waya zuwa tashar 5500
8. Yin wannan wani haɗin haɗin sirri wanda uwar garken ya gano zai sake rufe tashar 9191 kuma.

A wasu kalmomin, bayyana wannan har ma da sauƙin ...

con Knocking tashar jirgin ruwa uwar garkenmu na iya samun takamaiman mashigai, amma idan sabar ta gano hakan daga X IP an yi haɗin tashar tashar jiragen ruwa daidai (sanyi da aka riga aka bayyana a cikin fayil ɗin sanyi) zai aiwatar da wasu umarni akan kanta a bayyane (umurnin Har ila yau an bayyana a cikin fayil ɗin daidaitawa).

Shin ba a fahimta ba? 🙂

Yadda ake girka daemon don Port Knocking?

Ina yin shi tare da kunshin kokd, wanda zai bamu damar ta hanya mai sauki, mai sauqi da sauri don aiwatarwa da daidaitawa Knocking tashar jirgin ruwa.

Sanya kunshin: knockd

Yadda ake tsara Knocking Port da knockd?

Da zarar an girka sai mu ci gaba don daidaita shi, saboda wannan za mu gyara (azaman tushen) fayil ɗin /etc/knockd.conf:

nano /etc/knockd.conf

Kamar yadda kake gani a cikin wannan fayil ɗin tuni akwai tsoho sanyi:

 Bayyana saitunan tsoho abu ne mai sauki.

- Na farko, UseSyslog yana nufin cewa don yin rikodin aiki (log) za mu yi amfani da shi / var / log / syslog.
- Na biyu, a cikin sashe [bude SSH] A nan ne bayyanannun umarnin buɗe SSH za su tafi, da farko muna da jerin tashoshin jiragen ruwa (haɗakar sirrin) waɗanda aka saita ta tsohuwa (tashar jiragen ruwa 7000, tashar jiragen ruwa 8000 kuma a ƙarshe tashar 9000). Babu shakka za'a iya canza tashoshin jiragen ruwa (a gaskiya ina ba da shawarar hakan) haka kuma ba lallai ne su zama 3 ba, suna iya zama ƙasa ko ƙasa da hakan, ya dogara da ku.
- Na uku, seq_timeout = 5 yana nufin lokacin jira don asirin haɗin tashar jirgin ruwa da zai faru. Ta hanyar tsoho an saita shi daƙiƙa 5, wannan yana nufin cewa da zarar mun fara aiwatar da ƙwanƙwasa tashar jiragen ruwa (ma'ana, lokacin da muka buga zuwa tashar 7000) muna da matsakaicin 5 seconds don gama daidai jerin, idan sakan 5 ya wuce kuma mu basu gama buga tashar jirgin ruwa ba to kawai zai zama kamar dai jerin ba su da inganci.
- Bedroom, umurnin ba ya buƙatar bayani mai yawa. Wannan zai zama kawai umarnin da sabar zata aiwatar lokacin da ta gano haɗin da aka bayyana a sama. Umurnin da aka saita ta tsohuwa, abin da yake yi shi ne bude tashar jiragen ruwa 22 (canza wannan tashar don tashar SSH ɗin ku) kawai ga IP ɗin da ya yi madaidaicin haɗin tashar jiragen ruwa.
- Na Biyar, tcpflags = syn Ta wannan layin ne muke tantance nau'in fakiti wanda sabar zata gane tana da inganci ga tashar buga lamba.

Sannan akwai sashin da zai rufe SSH, cewa tsoffin daidaito ba komai bane face jerin jerin tashoshin jiragen sama da ke sama amma a akasin hakan.

Anan akwai daidaitawa tare da wasu gyare-gyare:

 Yadda ake farawa daemon knockd?

Don fara shi dole ne mu fara gyara (azaman tushen) fayil ɗin / sauransu / tsoho / bugawa:

nano /etc/default/knockd

A can za mu canza layin lamba 12 wanda ke cewa: «START_KNOCKD = 0»Kuma canza 0 zuwa 1, zamu sami:«START_KNOCKD = 1«

Da zarar an gama wannan yanzu kawai zamu fara shi:

service knockd start

Kuma voila, an saita shi kuma yana aiki.

Knocking Port da buga ƙwanƙwasa da gudu!

Kamar yadda kake gani a tsarin daidaitawar da ta gabata, idan aka yi ƙwanƙwasa tashar jiragen ruwa zuwa tashar 1000, sannan zuwa 2000 kuma a ƙarshe zuwa 3000 sai tashar 2222 (my SSH) za ta buɗe, da kyau a nan kuma wata kwamfutar da ke aiwatar da ƙwanƙwasa tashar:

Da zarar na danna [Shigar] akan Knock No.1, akan No.2 kuma a ƙarshe akan No.3 tashar zata buɗe, ga log ɗin:

Kamar yadda kake gani, yayin buga tashar 1000, mataki na 1 an yi rijista, sannan 2000 zata kasance mataki na 2 kuma a karshe 3 tare da 3000, lokacin yin wannan umarnin da na ayyana a cikin .conf ana aiwatar dashi kuma hakane.

Sannan rufe tashar jirgin kawai zai iya buga 9000, 8000 kuma a karshe 7000, ga log ɗin:

Kuma da kyau anan bayanin amfani ya ƙare 😀

Kamar yadda kake gani, Knocking na Port yana da ban sha'awa da amfani, saboda duk da cewa bawai kawai muke so mu bude tashar jirgin ruwa ba bayan wani hadadden tashoshin jiragen ruwa, umarni ko umarnin da sabar zai aiwatar zai iya bambanta, ma'ana ... maimakon bude tashar jirgin ruwa zamu iya shelanta kashe wani tsari, dakatar da aiki kamar apache ko MySQL, da sauransu ... iyaka shine tunanin ku.

Da kyau kuma ya zuwa yanzu labarin… Ni ba masani bane a cikin wannan lamarin amma ina so in sanar da ku wannan aikin mai ban sha'awa.

Gaisuwa 😀