I-Port Knocking: Ukuphepha okuhle kakhulu ongaba nakho kukhompyutha yakho noma kuseva (Ukuthunyelwa + Ukucushwa)

Ukuhamba kwamachweba (ngesiNgisi ichweba lingqongqoza) ngokungangabazeki kuwumkhuba wokuthi sonke esiphatha amaseva kufanele sazi kahle, lapha ngichaza ngokuningiliziwe ukuthi yini lokhu nokuthi ungayisebenzisa kanjani futhi uyilungiselele kanjani le 😉

Njengamanje labo bethu abaphatha iseva banokufinyelela kwe-SSH kuleyo seva, abanye siguqula imbobo ezenzakalelayo ye-SSH futhi ayisasebenzisi itheku 22 kanti abanye bayishiya nje kanjalo (okuthile okunganconyiwe), kepha iseva inike amandla ukufinyelela kwe-SSH ngetheku elithile futhi lokhu sekuvele 'kusengozini'.

cunt I-Port Knocking singafinyelela okulandelayo:

1. Ukufinyelela kwe-SSH akunikiwe amandla nganoma iyiphi imbobo. Uma ngabe i-SSH yethulelwe i-port 9191 (ngokwesibonelo) lelo chweba (9191) lizovalwa kuwo wonke umuntu.
2. Uma othile efuna ukufinyelela kuseva nge-SSH, kusobala ukuthi ngeke bakwazi, ngoba itheku 9191 livaliwe ... kepha, uma sisebenzisa 'umlingo' noma inhlanganisela eyimfihlo, lelo chweba lizovulwa, ngokwesibonelo:

1. Ngithumela ucingo ku-port 7000 yeseva
2. Ngenza enye i-telnet ethekwini 8000 yeseva
3. Ngenza enye i-telnet ethekwini 9000 yeseva
4. Iseva ithola ukuthi othile wenze inhlanganisela eyimfihlo (thinta amachweba 7000, 8000 no-9000 ngaleyo ndlela) futhi izovula itheku 9191 ukucela ukungena ngemvume nge-SSH (izoyivula kuphela i-IP lapho inhlanganisela yenziwa khona inombolo yetheku kuyagculisa).
5. Manje ukuvala i-SSH ngivele ngisebenzise i-telnet ethekwini 3500
6. Ngizokwenza enye i-telnet ethekwini 4500
7. Futhi ekugcineni enye i-telnet ethekwini 5500
8. Ukwenza le enye inhlanganisela eyimfihlo etholwa yiseva izovala i-port 9191 futhi.

Ngamanye amagama, ukuchaza lokhu kalula kakhulu ...

cunt I-Port Knocking iseva yethu ingaba nezimbobo ezithile ezivaliwe, kepha lapho iseva ikuthola lokho kusuka ku- X I-IP inhlanganisela ethekwini eyiyo yenziwe (ukumiswa okuchazwe ngaphambilini kufayela lokumisa) izokwenza umyalo othile ngokwawo ngokusobala (umyalo kuchazwe futhi kufayela le-config).

Ngabe akuqondakali? 🙂

/ Ungayifaka kanjani i-daemon yePort Knocking?

Ngikwenza nephakeji kokd, okuzosivumela ngendlela elula kakhulu futhi elula futhi esheshayo yokusebenzisa nokuhlela I-Port Knocking.

Faka iphakheji: knockd

/ Ungayilungisa kanjani iPort Knocking nge-knockd?

Uma sekufakiwe siyaqhubeka nokuyilungiselela, ngenxa yalokhu sihlela (njengezimpande) ifayela /etc/knockd.conf:

nano /etc/knockd.conf

Njengoba ukwazi ukubona kulelo fayela sekuvele kukhona ukumiswa okuzenzakalelayo:

 Ukuchaza izilungiselelo ezizenzakalelayo kulula impela.

- Okokuqala, SebenzisaSyslog kusho ukuthi ukurekhoda umsebenzi (i-log) esizoyisebenzisa / var / log / syslog.
- Okwesibili, esigabeni [openSSH] Yilapho kusobala ukuthi imiyalo yokuvula i-SSH izohamba, okokuqala sinokulandelana kwamachweba (inhlanganisela eyimfihlo) elungiselelwe ngokuzenzakalela (itheku 7000, itheku 8000 futhi ekugcineni itheku 9000). Ngokusobala amachweba angashintshwa (empeleni ngiyayincoma) futhi njengoba kungenjalo akudingeki ukuthi abe ngu-3, ​​angaba ngaphezulu noma ngaphansi, kuya ngawe.
- Okwesithathu, seq_timeout = i-5 kusho isikhathi sokulinda ukuhlangana kwembobo eyimfihlo ukuthi kwenzeke. Ngokuzenzakalelayo kusethwe kumasekhondi ayi-5, lokhu kusho ukuthi uma sesiqale ukwenza itheku lingqongqoza (okusho ukuthi, lapho sifonela ethekwini 7000) sinemizuzwana engama-5 ukuqeda ukulandelana okulungile, uma kudlula imizuzwana emihlanu asikakaqedi ichweba lingqongqoza lapho-ke kuzovele kube sengathi ukulandelana bekungavumelekile.
- Okwesine, umyalo ayidingi incazelo eningi. Lokhu kuzoba umyalo nje ozokwenziwa yisiphakeli lapho sithola inhlanganisela echazwe ngenhla. Umyalo osethwe ngokuzenzakalela okwenzayo ukuvula i-port 22 (shintsha leli chweba letheku lakho le-SSH) kuphela ku-IP elenze ukuhlanganiswa okulungile kwamachweba.
- Okwesihlanu, tcpflags = i-syn Ngalo mugqa sichaza uhlobo lwamaphakethe isiphakeli esizowabona evumelekile ethekwini elingqongqozayo.

Bese kuthi kube khona isigaba sokuvala i-SSH, ukuthi ukumiswa okuzenzakalelayo akuyona enye into ngaphandle kokulandelana okufanayo kwamachweba angenhla kepha kulandelana okuphambene.

Nakhu ukucushwa nokunye ukuguqulwa:

 Ungaqala kanjani i-daemon eqoqiwe?

Ukuyiqala kufanele siguqule kuqala (njengezimpande) ifayela / etc / default / knockd:

nano /etc/default/knockd

Lapho siguqula umugqa wenombolo 12 othi: «START_KNOCKD = 0»Futhi ushintshe lelo 0 libe ngu-1, besizoba:«START_KNOCKD = 1«

Uma lokhu sekwenziwe manje simane sikuqale:

service knockd start

Futhi i-voila, ilungiselelwe futhi iyasebenza.

I-Port Knocking ngokungqongqoza nokusebenza!

Njengoba ukwazi ukubona ekucushweni kwangaphambilini, uma ukungqubuzana kwembobo kwenziwa ethekwini 1000, bese kufika ku-2000 futhi ekugcineni kube ngu-3000 bese kuthi i-port 2222 (i-SSH yami) ivuleke, nakhu enye ikhompyutha ekhipha itheku ingqongqoza:

Lapho sengicindezele u- [Enter] ku-Knock No.1, ku-No.2 futhi ekugcineni ku-No.3 itheku lizovuleka, nayi i-log:

Njengoba ukwazi ukubona, lapho ungqongqoza ethekwini 1000, isigaba 1 sabhaliswa, bese kuthi ngo-2000 kube isigaba 2 futhi ekugcineni kube ngu-3 no-3000, lapho wenza lokhu, umyalo engiwumemezele ku .conf uyenziwa futhi yilokho.

Ngemuva kwalokho ukuvala itheku kuzoba ukushaya u-9000, 8000 bese kuthi ekugcineni kube ngu-7000, nayi ilogi:

Futhi lapha incazelo yokusetshenziswa iphela 😀

Njengoba ukwazi ukubona, iPort Knocking iyathandeka futhi ilusizo impela, ngoba yize singafuni ukumane sivule itheku ngemuva kokuhlanganiswa okuthile kwamachweba, umyalo noma i-oda elizokwenziwa iseva lingahluka, lelo ... esikhundleni ukuvula ichweba esingamemezela ukubulala inqubo, ukumisa insiza efana ne-apache noma i-mysql, njll ... umkhawulo umcabango wakho.

Kuhle futhi kuze kube manje le ndatshana… angiyena uchwepheshe kule ndaba kodwa bengifuna ukuhlanganyela nawe le nqubo ethakazelisa kakhulu.

Sanibonani