Ukunkqonkqoza izibuko: Olona khuseleko lubalaseleyo onokuba nalo kwikhompyuter yakho okanye kwiseva (Ukuthunyelwa + Ukucwangciswa)

Ukuhamba kumazibuko (ngesiNgesi ukunkqonkqoza kwizibukoNgaphandle kwamathandabuzo isenzo sokuba sonke esilawula iiseva kufuneka sazi kakuhle, nantsi ndicacisa ngokweenkcukacha ukuba yintoni le kwaye ungayenza njani kwaye uyiqwalasele le

Okwangoku abo kuthi balawula iserver banokufikelela kwe-SSH kuloo seva, abanye sitshintsha isibuko esingagqibekanga seSSH kwaye ayisasebenzisi zibuko 22 kwaye abanye bayishiya nje kanjalo (into engacetyiswanga), nangona kunjalo iserver yenza ukuba ukufikelela kwe-SSH kudlule kwizibuko elithile kwaye oku sele 'kusesichengeni'.

Con Ukunkqonkqoza ePort sinokufikelela koku kulandelayo:

1. Ukufikelela kwe-SSH akuvumelekanga ngalo naliphi na izibuko. Ukuba siyiqwalasele i-SSH kwizibuko 9191 (umzekelo) izibuko (9191) liya kuvalwa kuye wonke umntu.
2. Ukuba umntu othile ufuna ukufikelela kwiserver nge-SSH, ngokuqinisekileyo ngekhe bakwazi, kuba izibuko le-9191 livaliwe ... kodwa, ukuba sisebenzisa 'umlingo' okanye indibaniselwano eyimfihlo, eso sibuko siza kuvulwa, umzekelo:

1. Ndisebenzisa umnxeba kwizibuko 7000 yeseva
2. Ndenza enye itelnet kwizibuko 8000 yeseva
3. Ndenza enye itelnet kwizibuko 9000 yeseva
4. Umncedisi ufumanisa ukuba umntu wenze indibaniselwano eyimfihlo (chukumisa amazibuko angama-7000, ama-8000 kunye nama-9000 kulandelelwano) kwaye uya kuvula izibuko 9191 ukucela ukungena ngemvume nge-SSH (iya kuyivula kuphela kwi-IP apho indibaniselwano yenziwe inombolo yezibuko kuyanelisa).
5. Ngoku ukuvala i-SSH ndibeka nje umnxeba kwi-port 3500
6. Ndiza kwenza enye umnxeba kwi-port 4500
7. Kwaye ekugqibeleni enye i-telnet kwizibuko lama-5500
8. Ukwenza olu manyano luyimfihlo olufunyanwa ngumncedisi kuya kuvala izibuko kwakhona ngo-9191.

Ngamanye amagama, ukucacisa oku ngokulula ngakumbi ...

Con Ukunkqonkqoza ePort iseva yethu inokuba namazibuko athile avaliweyo, kodwa xa iserver ikufumanisa oko ku X Umdibaniso wezibuko oluchanekileyo wenziwe (Uqwalaselo oluchazwe ngaphambili kwifayile yoqwalaselo) iya kwenza umthetho othile ngokwawo ngokucacileyo (myalelo ichazwe kwifayile yoqwalaselo).

Ngaba ayiqondakali? 🙂

Uyifaka njani i-daemon yePort Knocking?

Ndiyenza nge package ndikhatile, eya kusivumela ngendlela elula kakhulu kwaye elula kwaye ekhawulezayo yokuphumeza kunye nokumisela Ukunkqonkqoza ePort.

Faka iphakheji: knockd

Uyicwangcisa kanjani iPort Knocking nge knock?

Nje ukuba sifakelwe siyaqhubeka nokuyiqwalasela, ngenxa yoku sihlela (njengengcambu) ifayile /etc/knockd.conf:

nano /etc/knockd.conf

Njengoko ubona kule fayile sele kukho ukumiselwa okungagqibekanga:

 Ukuchaza useto olungagqibekanga kulula ngokwenene.

- Ekuqaleni, Sebenzisa iSyslog kuthetha ukuba ukurekhoda umsebenzi (i-log) esiya kuyisebenzisa / Var / log / syslog.
Okwesibini, kwicandelo [vulaSSH] Kulapho ngokucacileyo imiyalelo yokuvula i-SSH izakuya khona, okokuqala sinokulandelelana kwamazibuko (indibaniselwano eyimfihlo) emiselwe ngokungagqibekanga (izibuko 7000, izibuko 8000 kwaye ekugqibeleni izibuko 9000). Ngokucacileyo amazibuko anokutshintshwa (enyanisweni ndiyacebisa) njengokuba kungafuneki ukuba abengu-3, ​​anokuba ngaphezulu okanye ngaphantsi, kuxhomekeke kuwe.
- Isithathu, seq_kuphuma = 5 lithetha ixesha lokulinda indibaniselwano yemfihlo yezibuko ukuba yenzeke. Ngokuzenzekelayo isethwe kwimizuzwana emi-5, oku kuthetha ukuba xa siqala ukwenza izibuko elinqonqozayo (Oko kukuthi, xa sisebenzisa umnxeba kwizibuko 7000) sinemizuzwana emi-5 ubuninzi bokugqiba ulandelelwano oluchanekileyo, ukuba kudlule imizuzwana emi-5 kwaye asikayigqibi izibuko enkqonkqoza emva koko kuya kuba ngokungathi ukulandelelana bekungasebenzi.
- Isine, umyalelo ayifuni nkcazo ininzi. Oku kuya kuba ngumyalelo oya kwenziwa ngumncedisi xa efumanisa indibaniselwano echazwe apha ngasentla. Umyalelo osetelwe ngokwendalo kwinto eyenzayo kukuvula izibuko lama-22 (tshintsha eli zibuko kwi-SSH yakho) kwi-IP kuphela eyenza udibaniso oluchanekileyo lwamazibuko.
- Isihlanu, tcpflags = ukufana Ngalo mgca sichaza uhlobo lweepakethi eziza kuqatshelwa ngumncedisi njengezisebenzayo kwizibuko elinkqonkqozayo.

Ke kukho icandelo lokuvala i-SSH, ukuba ukumiselwa okungagqibekanga akukho nto ngaphandle kokulandelelana okufanayo kwamazibuko apha ngasentla kodwa ngokulandelelana.

Nalu uqwalaselo olunenye iinguqulelo:

 Uyiqala njani i-daemon ebethiweyo?

Ukuyiqala kufuneka kuqala siguqule (njengengcambu) ifayile / njl / okungagqibekanga / ukubetha:

nano /etc/default/knockd

Apho sitshintsha umgca we-12 othi: «I-START_KNOCKD = 0»Kwaye utshintshe i-0 ibe yi-1, siza kuba nayo:«I-START_KNOCKD = 1«

Nje ukuba kwenziwe oku ngoku siyakuqala ngokulula:

service knockd start

Kwaye i-voila, iqulunqiwe kwaye iyasebenza.

Izibuko lizibethe ngokunkqonkqoza kwaye libaleka

Njengoko ubona kulungelelwaniso lwangaphambili, ukuba kungqinwa izibuko kwizibuko le-1000, ukuya ku-2000 kwaye ekugqibeleni kube ngu-3000 emva koko izibuko le-2222 (i-SSH yam) liya kuvula, nantsi enye ikhompyuter eyenza izibuko:

Nje ukuba ndicinezele [Ngena] kwiNkqonkqozo yeNombolo 1, kwiNombolo 2 kwaye ekugqibeleni kwiNombolo 3 izibuko liya kuvulwa, nantsi ilog:

Njengoko ubona, xa unkqonkqoza kwizibuko le-1000, inqanaba loku-1 lalibhalisiwe, emva koko ngo-2000 liza kuba linqanaba lesi-2 kwaye ekugqibeleni liyi-3 nge-3000, xa usenza oku, umyalelo endiwubhengeze kwi .conf uyenziwa kwaye yiyo loo nto.

Emva koko ukuvala izibuko kuya kuba kukungqongqoza kuphela i-9000, i-8000 kwaye ekugqibeleni i-7000, nantsi ilog:

Kwaye nantsi inkcazo yokusetyenziswa iphela 😀

Njengoko ubona, i-Port Knocking inomdla kwaye iluncedo, kuba nangona singafuni ukuvula izibuko emva komdibaniso othile wamazibuko, umyalelo okanye i-odolo eza kwenziwa ngumncedisi inokwahluka, oko kukuthi ... endaweni Ukuvula izibuko esinokuthi sibhengeze ukubulala inkqubo, ukumisa inkonzo efana neapache okanye i-mysql, njl ... umda kukucinga kwakho.

Ewe ngoku ukuza kuthi ga ngoku inqaku… andiyongcali kulo mba kodwa bendifuna ukwabelana nani ngale nkqubo inomdla kakhulu.

Ukubulisa 😀