Izinkinga zenethiwekhi ye-IP ne-DNS: ukuxilongwa okujulile nezixazululo

Informatec Digital » Izinsiza » Izinkinga zenethiwekhi ye-IP ne-DNS: ukuxilongwa okujulile nezixazululo

Uma konke kusebenza kahle, ukuphequlula i-inthanethi kubonakala njengomlingo: uthayipha ikheli, ucindezele u-Enter, bese kuthi ngemizuzwana embalwa, ikhasi livele ngokuphelele. Kodwa kuthatha i -DNS noma inethiwekhi ye-IP kuphela ukuthi iqale ukwehluleka ukuthi sisuke kumlingo siye ekuphelelweni yithemba: amawebhusayithi angeke alayishe, imidlalo eku-inthanethi ephahlazekayo, amapulatifomu evidiyo aqina, noma ngisho namakhompyutha kunethiwekhi yendawo angasakwazi ukubonana.

Ingxenye eyinkimbinkimbi ukuthi, ngokuvamile, inkinga ayikho ngesiphequluli noma uxhumano lwefayibha uqobo, kodwa ngemininingwane emincane yokucushwa njengezilungiselelo ze-IP, i-DNS, i-router, i-modem, noma i-firewall ezingalungiselelwanga kahle. Futhi ngaphezu kwakho konke, imiyalezo yamaphutha ayicacile: "Iseva ye-DNS ayiphenduli," "Iseva ye-DNS ayitholakali," "Iphutha le-DNS," "Isicelo siphelelwe yisikhathi"... Kulesi sihloko, uzobona, ngokuningiliziwe, ukuthi kwenzekani ngempela, ukuthi ungayixilonga kanjani ngamathuluzi ochwepheshe (nslookup, ipconfig, dnscmd, njll.), futhi, okubaluleke kakhulu, ukuthi ungayilungisa kanjani inethiwekhi yakho ye-IP kanye nezilungiselelo ze-DNS ukuze zingakubangeli inkinga.

Iyini ngempela i-DNS futhi ihlobene kanjani nenethiwekhi ye-IP?

I- DNS (Domain Name System) , kafushane nje, iyincwadi yamakheli ye-inthanethi. Imishini ixhumana isebenzisa amakheli e-IP, njenge- 192.0.2.1 noma i-172.217.4.46 , kodwa abantu bakuthola kulula ukuthayipha i-www.example.com noma i-google.com . I-DNS ihumusha la magama afundeka kubantu abe amakheli e-IP anezinombolo aqondwa yisiphequluli kanye nesistimu yokusebenza.

Uma ufaka i-URL kusiphequluli sakho, ithumela umbuzo we-DNS oskena ikhompyutha yakho, i-router, i-modem, inethiwekhi ye-ISP, futhi, uma kudingeka, amaseva ezimpande kanye nawagunyaziwe , kuze kube yilapho ithola ikheli le-IP elifanele. Kulapho-ke kuphela lapho uxhumano lwangempela lwe-HTTP/HTTPS luqala khona. Uma lokhu kuhumusha kuphazamiseka nganoma yisiphi isikhathi, uzoba noxhumano olubonakala lusebenza (izithonjana zenethiwekhi zizovela kahle), kodwa awekho amawebhusayithi azolayisha ngoba amagama awaxazululwa.

Kumanethiwekhi endawo noma ezinkampani, i-DNS futhi iyisici esivumela amagama afana ne- app1.corp.local noma i-file-server ukuthi axazululwe kumakheli e-IP angaphakathi. Uma kunezinkinga ngale DNS yangaphakathi, uzobhekana nezinkinga zokufinyelela amaseva, izinhlelo zokusebenza, i-imeyili, amaphrinta, noma izinsiza ezabiwe.

Okuyisisekelo sakho konke lokhu yiphrothokholi ye-IP , enekheli layo le-IP, imaski ye-subnet, i-gateway , kanye namaseva e-DNS alungiselelwe ku-adaptha yenethiwekhi noma anikezwe nge-DHCP. Ukwehluleka kunoma iyiphi yalezi pharamitha kungabangela amaphutha e-DNS, ukulahlekelwa ukuxhumana, noma ukuhamba kancane kakhulu.

Izinkinga ezivamile kumanethiwekhi e-IP ezibonakala njengamaphutha e-DNS

Imiyalezo efana nokuthi “iseva ye-DNS ayiphenduli,” “iphutha le-DNS,” noma “iseva ye-DNS ayitholakalanga” imane nje iyiphuzu elibalulekile. Ngaphansi, ngokuvamile kunenhlanganisela yokucushwa kwe-IP okungalungile, i-cache ye-DNS eyonakele, ama-router angalungiselelwe kahle, noma ukwehluleka kuseva ye-DNS uqobo.

Isimo esivame kakhulu yileso somsebenzisi osetha i-PC entsha kunethiwekhi yendawo enezintambo bese ethola ukuthi ikhompyutha eyodwa kuphela enokufinyelela i-inthanethi, i-Wi-Fi iyayeka ukusebenza, bese ijubane lehla liye engxenyeni yeshumi yalokho abakukhokhelayo. Uma ubheka kuqala, kubonakala sengathi inkinga ngomhlinzeki, kodwa uma kubhekwa kahle, kutholakale ukuthi kunezabelo ze-IP ne-DNS ezingqubuzanayo , ama-cache onakele, noma ngisho nama-port avinjiwe yi-firewall.

Izimpawu ezivame kakhulu ezihlobene nenethiwekhi ye-DNS ne-IP yilezi:

• Kubonakala sengathi kukhona ukuxhumana kodwa akukho amawebhusayithi alayishwayoIsithonjana senethiwekhi sibonisa uxhumano, kodwa akukho khasi eliphendulayo noma uxhumano oluphelelwa yisikhathi.
• Amanye amasayithi kuphela ahlulekayoUngangena kwamanye amawebhusayithi, kodwa amanye abuyisa amaphutha e-DNS noma ahluleke ukuxazulula igama.
• Ukunensa okwedluleleAmakhasi agcina elayisha, kodwa ukulungiswa kwegama ngalinye kuhamba kancane ngoba iseva ye-DNS ye-ISP yakho noma eyangaphakathi igcwele ngokweqile noma ayilungiselelwe kahle.
• Izinkinga nge-imeyili, izinhlelo zokusebenza ze-SaaS, noma i-VPNNgisho noma isiphequluli sisebenza, izinsizakalo ezithile zincike kumagama esizinda angaxazululwa kahle.
• Imishini yenethiwekhi yendawo "enyamalalayo"Amaseva noma ama-PC awakwazi ukutholakala ngamagama, noma ngabe asaphendula lapho efaka ikheli le-IP ngqo.

Ezindaweni zeseva, izimpawu ziba zimbi nakakhulu: ukungasebenzi kahle kwesevisi, ukudluliselwa kwezindawo okwehlulekayo, ukuphindaphinda okuphukile, ukudluliselwa kwe-DNS okonakele, noma izindawo zesibili eziphelelwe yisikhathi.

Ukuqinisekiswa okuyisisekelo kokucushwa kwe-IP ne-DNS kuklayenti

Ngaphambi kokuchitha isikhathi nama-router noma amaseva, kungumqondo omuhle ukuqinisekisa ukuthi izilungiselelo ze-IP kanye ne-DNS kudivayisi ethintekile ziyahambisana. Ku-Windows, indawo yokuqala iyona ejwayelekile:

ipconfig / konke

Lo myalo ukukhombisa, ku-adaptha ngayinye, ikheli le-IP elihleliwe, imaski ye-subnet, i-gateway, kanye ne-DNS . Izinto okufanele uzihlole:

• Ikheli le-IP lingelenethiwekhi elindelekile. (isibonelo, 192.168.1.x uma i-LAN yakho ingu-192.168.1.0/24).
• Imaski ye-subnet Kunengqondo (255.255.255.0 ezimweni eziningi zasekhaya).
• Isango Ngokuvamile kuba ikheli le-IP le-router (192.168.1.1, isibonelo).
• Iseva ye-DNS ikhombe ku Iyahambisana: i-router yakho, iseva ye-DNS yendawo noma i-DNS yomphakathi (i-Google 8.8.8.8, i-Cloudflare 1.1.1.1, i-OpenDNS, njll.).

Uma usola iseva ethile ye-DNS, ungayihlola ngqo nge:

i-nslookup

Isibonelo:

uhlelo lokusebenza lwe-nslookup1 10.0.0.1

Uma lowo mbuzo ubuyisa "Iphutha Leseva," "Umbuzo Unqatshiwe," "Isicelo Siphelelwe Isikhathi," noma "Akukho Mpendulo Evela Ku-Server ," uyazi ukuthi kukhona okungahambi kahle ngaleyo seva ye-DNS (noma ayifinyeleleki kunethiwekhi yakho). Uma iphendula ngekheli le-IP elifanele, inkinga ingaba ngeklayenti, indlela yenethiwekhi, noma i-firewall ephakathi.

Kumaseva e-Windows asebenza njengamaseva e-DNS, futhi kungumqondo omuhle ukususa i-cache yesisombululo ukuze ulahle idatha ephelelwe yisikhathi:

• Ikhonsoli yomyalo (umphathi): dnscmd /clearcache
• I-PowerShell (umphathi): Sula i-DnsServerCache

Izimbangela ezivamile zamaphutha “e-DNS server engaphenduli”

Kunezimo eziningana eziphindaphindwayo njalo kokubili ezinkundleni zasekhaya kanye nezobungcweti. Ukuziqonda kuzokusiza ukuthi uqonde ngqo emsukeni wenkinga ngaphandle kokuchitha isikhathi.

Isilondolozi se-DNS esonakele noma esiphelelwe yisikhathi ohlelweni lokusebenza

Ikhompyutha yakho igcina i -DNS cache yendawo equkethe ukubheka kwakamuva kwe-DNS ukuze kusheshiswe ukuphequlula. Uma le cache yonakala noma igcina amarekhodi aphelelwe yisikhathi (ngenxa yezinguquko zokubamba, ukufuduka, izinguquko ze-DNS zone, njll.), uzobona amaphutha lapho ufinyelela izizinda ezisebenza kahle kwamanye amadivayisi.

Ku-Windows ungakulungisa lokhu ngokusebenzisa umyalo olandelayo ku-command prompt ngamalungelo omlawuli:

ipconfig / flushdns

Ku-macOS, okufana okujwayelekile yilokhu:

I-sudo dscacheutil -flushcache; Isudo killall -HUP mDNSResponder

Kumadivayisi eselula, ngokuvamile ukuqala kabusha idivayisi noma ukuguqula imodi yendiza ivule futhi ivale kwanele ukuphoqa ukusulwa kwezinqolobane zenethiwekhi.

Ukulungiselelwa kwe-router noma i-modem okungalungile

I-router yakho ne-modem zisebenza njengesango phakathi kwe-LAN yakho ne-inthanethi . Uma izilungiselelo zazo ze-DNS zingalungile (isibonelo, ukukhomba iseva engasekho, noma ngama-forwarder achazwe ngokungalungile), kuzovela amaphutha asakazekile kuwo wonke amadivayisi kunethiwekhi.

Amaphutha ajwayelekile okucushwa:

• Amaseva e-DNS ahlelwe ngesandla ngendlela engafanele ku-router, ezuzwe njengefa ezivivinyweni ezindala.
• I-DHCP iletha i-DNS yangaphakathi engasasebenzi noma lokho kusebenza kuphela engxenyeni yenethiwekhi.
• Imithetho yezihlungi noma yomlilo ku-router ezivimba imbobo engu-53 UDP/TCP kumaseva athile e-DNS.

Kulezi zimo, indawo enhle yokuqala ukuqala kabusha imodemu kanye ne-router (kuzicime, ulinde imizuzwana engama-30-60 bese uzivula futhi) futhi, uma inkinga iqhubeka, hlola ukucushwa noma ubuyisele kuzilungiselelo zasefekthri bese uphinde ulungiselele kusukela ekuqaleni.

Ukuphazamiseka okuvela ku-firewall, i-antivirus, noma i-VPN

Ama-firewall, izixazululo ze-antivirus, kanye nama-VPN aklanyelwe ukuvikela, kodwa izilungiselelo ezinolaka kakhulu zingagcina zivimbele imibuzo ye-DNS noma ziyidlulisele emihubheni enephutha . Lokhu kufaka phakathi ama-firewall esistimu yokusebenza kanye namadivayisi okuphepha kwenethiwekhi athuthukile.

Izinyathelo ezinengqondo zokuyihlola:

• Khubaza okwesikhashana i-antivirus yakho kanye ne-firewall (ukwazi ukuthi wenzani futhi ukukuvivinya nje).
• Vala noma iyiphi i-VPN Qiniseka ukuthi ixhunyiwe bese uzama ukuphequlula futhi.
• Kuma-firewall ezinkampani, hlola ukuthi i-port 53 ayihlungwa noma ayiqondiswa kabusha indlela engavamile.

Uma konke kusebenza kahle ngemva kokukhubaza lezi zinto, sekuyisikhathi sokubuyekeza imithetho, okukhishwe, kanye namaphrofayela enethiwekhi ukuze kuvunyelwe ithrafikhi ye-DNS ngaphandle kokubeka engcupheni ukuphepha.

Izinkinga zeseva ye-DNS: umthwalo, izindawo, ukuphindaphinda, kanye nokudluliselwa

Amanethiwekhi amaningi ebhizinisi aneseva eyodwa noma ngaphezulu ye-DNS enegunya futhi ephindaphindayo (isibonelo, i-Windows Server enendima ye-DNS) ephendula kokubili amagama angaphakathi kanye nemibuzo ye-inthanethi. Lapha, ububanzi bezigameko ezingaba khona bubanzi:

• Iseva ye-DNS ivaliwe noma isevisi imisiweUma isevisi ye-Windows DNS ingasebenzi, imibuzo izohluleka ngokuthi "Akukho mpendulo evela kuseva". Ungazama ukuyiqala ngokuthi net qala i-DNS.
• Iseva igcwele ngokweqile noma indawo imisiwe okwesikhashanaAmaphutha anjengokuthi “Iphutha Leseva” noma “Umbuzo Wenqatshiwe” angabonisa ukuthi Indawo imisiwe noma iseva isemkhawulweni wayoBuyekeza amalogi emicimbi (Uhlelo Lokusebenza, Uhlelo kanye “ne-DNS Server”) kanye nethebhu Ejwayelekile yendawo.
• Ukuphindaphinda okuphukileUma iseva idlulisela imibuzo kwamanye amaseva e-DNS (ithebhu yabadluliseli), noma yiziphi izinkinga kulolo chungechunge (ukuphelelwa yisikhathi, idatha engalungile, ukuqondiswa okungalungile) kungabangela amaphutha okuxazulula kwangaphandle.
• Ukuthunyelwa kwe-DNS okungalungileUma kukhona ukudluliselwa okungahleliwe kahle phakathi kwendawo yomzali nendawo yokudluliselwa (isibonelo, i-corp.contoso.com kanye ne-sub.corp.contoso.com), uzobona amaphutha lapho uzama ukuxazulula amagama avela endaweni yokudluliselwa.

Ukuze kutholakale i-recursion kanye ne-delegation, i-nslookup kwimodi yokusebenzisana ivame ukusetshenziswa , ibuza amarekhodi e-NS kanye ne-A ezingeni ngalinye, futhi ihlole i-recursion enikwe amandla noma ekhutshaziwe. Kuyindlela ethuthuke kakhulu, kodwa ibalulekile uma uphatha amaseva e-DNS agunyaziwe.

Ukudluliselwa kwendawo kanye nokuvumelanisa phakathi kwamaseva

Kuma-topology anamaseva e-DNS ayisisekelo nawesibili , amaphutha okuxazulula angenzeka ngoba indawo yesibili ayikabuyekezwa kahle. Izimpawu ezijwayelekile:

• Iseva yesibili ibuyisa idatha ephelelwe yisikhathi noma engahambisani uma iqhathaniswa neseva eyinhloko.
• Kuvela umbukeli womcimbi amaphutha okudlulisela indawo.
• Ngokuphoqa i-dnscmd /zonerefresh Inqubo ayiqedwanga kahle.

Ngakho-ke kuyalulekwa:

• Qhathanisa inombolo yochungechunge yendawo emazingeni aphansi naphezulu, futhi uqiniseke ukuthi emazingeni aphansi anenombolo yochungechunge ephezulu.
• Buyekeza i izinketho zokudlulisela indawo (Ithebhu Yokudluliselwa Kwendawo) bese uqinisekisa ukuthi okwesibili kugunyaziwe.
• Uma kukhona ukusetshenziswa okuxubile (isb., i-Windows kanye ne-BIND), hlola ukuhambisana kohlobo lokubhalisa nokuthi "ukudlulisa okusheshayo" kukhutshaziwe yini uma okwesibili kungakusekela.

Izixazululo ezisebenzayo lapho "iseva ye-DNS ingaphenduli"

Nasi uhlu oluhlelekile lwezenzo ongazilandela, kokubili kumakhompyutha amaklayenti kanye nasezindaweni zenethiwekhi zasekhaya nezenkampani, ukuze uxazulule inkinga ngendlela efanele.

1. Qala kabusha i-router/imodemu namadivayisi

Kuzwakala sengathi kuyinto evamile, kodwa ukuvala nokuqalisa kabusha okufanele kuvame ukulungisa izinkinga eziningi zenethiwekhi. Ukuqalisa kabusha kususa ama-cache, kuvuselela izikhathi ne-ISP, futhi kulungisa ukukhiya kwemishini yenethiwekhi yangaphakathi okuncane.

1. Vala ikhompyutha yakho (noma omakhalekhukhwini, amaphilisi, njll.) ngokuphelele.
2. Khipha i-router ne-modem (uma kungamadivayisi amabili ahlukene).
3. Linda okungenani imizuzwana engu-30.
4. Xhuma imodemu kanye ne-router, bese ulinda zonke izibani ukuthi ziqine.
5. Vula ikhompyutha yakho bese uzama ukuphequlula.

2. Shintsha amaseva akho e-DNS abe ngamanye awesidlangalaleni nathembekile

Uma usola ukuthi amaseva e-DNS omhlinzeki wakho awasebenzi kahle noma agcwele ngokweqile, ungalungiselela amaseva e-DNS omphakathi asebenza kahle kakhulu kukhompyutha yakho noma ku-router , njenge:

• I-Google DNS: 8.8.8.8 no-8.8.4.4
• I-Cloudflare DNS: 1.1.1.1 no-1.0.0.1
• I-OpenDNS: 208.67.222.222 no-208.67.220.220
• Enye i-DNS yezentengiselwano (I-Surfshark DNS: 194.169.169.169, njll.).

Ku-Windows, ungakwenza ngale ndlela:

1. Qhafaza I-Windows + R, kubhala ncpa.cpl bese ucindezela u-Enter.
2. Chofoza ngakwesokudla ku-inthanethi yakho (i-Ethernet noma i-Wi-Fi) bese ukhetha Ama-propiedades.
3. Khetha I-Internet Protocol version 4 (TCP / IPv4) bese ucindezela Ama-propiedades.
4. I-Marca Thola ikheli le-IP ngokuzenzakalela Uma ufuna i-router inikeze ikheli le-IP, khetha Sebenzisa amakheli we-DNS alandelayo.
5. Gcwalisa amasimu e- Kuncanyelwe iseva ye-DNS y alternativo ngamanani ofuna ukuwasebenzisa (isibonelo, 8.8.8.8 kanye no-8.8.4.4).
6. Activa Qinisekisa ukucushwa lapho uphuma bese ucindezela OK.

3. Sula i-DNS cache bese uvuselela ukucushwa kwe-IP (Windows)

Ezimweni eziningi, ikakhulukazi uma uxhumano belusebenza kahle ngaphambili, ukumane "usethe kabusha" ukucushwa kwenethiwekhi yedivayisi ngemiyalo embalwa kwanele:

1. Vula imenyu yokuqala, thayipha cmd, chofoza kwesokudla Uphawu lwesistimu bese ukhetha Qalisa njengomlawuli.
2. Thayipha imiyalo elandelayo, umugqa nomugqa (cindezela u-Enter ngemva komunye nomunye):

ipconfig / flushdns
ipconfig / ukukhululwa
ipconfig / uvuselele
Ikhathalogi yokusetha kabusha i-NETSH winsock
I-NETSH int ipv4 setha kabusha kabusha.log
I-NETSH int ipv6 setha kabusha kabusha.log

Ngemva kwalokhu, qala kabusha ikhompyutha yakho. Uzobe usususile i-DNS cache, uvuselele isivumelwano se-DHCP, bese usetha kabusha i-TCP/IP stack , elungisa amaphutha amaningi angajwayelekile.

4. Zama isiphequluli esihlukile, ikhompyutha ehlukile, kanye nokuxhumeka okunezintambo.

Ukuze kutholakale imbangela, ukuhlola okuphambene kuyasiza kakhulu :

• Uma usebenzisa i-Chrome, zama i-Firefox, i-Edge, noma esinye isiphequluli.
• Sebenzisa enye idivayisi kunethiwekhi efanayo (enye i-PC, iselula, ithebhulethi) bese uzama ukufinyelela amawebhusayithi afanayo.
• Uma usebenzisa i-Wi-Fi, xhuma i-PC yakho ku- Ikhebula le-Ethernet ngqo ku-router Futhi uma unezinkinga ze-Wi-Fi, xhumana Indlela yokulungisa izinkinga ze-Wi-Fi kwi-PC yakho.

Uma yehluleka kudivayisi eyodwa kuphela, inkinga isekucushweni kwayo, i-firewall, abashayeli, noma ngisho ne-malware . Uma yehluleka kuwo wonke amadivayisi, kufanele uhlole i-router yakho, iseva yangaphakathi ye-DNS, noma ngisho ne-ISP yakho.

5. Sebenzisa izixazululi zenethiwekhi zesistimu yokusebenza

I-Windows ne-macOS zifaka phakathi ama-wizard athola ngokuzenzakalelayo futhi alungise ukwehluleka okuningi kokuxhumeka, okuhlanganisa nezinkinga eziyisisekelo ze-DNS.

• Ku-Windows: Izilungiselelo > Inethiwekhi ne-Intanethi > Isilungisimaphutha senethiwekhi.
• Ku-macOS: Imenyu ye-Apple > Ukuxilongwa kwenethiwekhi.

Abenzi izimangaliso, kodwa bangakongela isikhathi ezindabeni ezilula , njengezixhumi ezingasebenzi, amaphrofayili enethiwekhi asetshenziswe kabi, noma amapharamitha e-IP angaguquki.

Amasu athuthukile okuxilonga izinkinga ze-DNS kumaseva

Uma uphatha iseva ye-DNS yenkampani (isibonelo, i-Windows Server enendima ye-DNS), amathuluzi ayashintsha kancane futhi izinga lemininingwane liyakhuphuka. Lapha, indlela iwukushintsha kusuka kokulula kuya kokuyinkimbinkimbi , njengoba kunjalo nangamakhasimende, kodwa ukwengeza izivivinyo ezithile kusevisi ye-DNS uqobo.

Hlola isimo sesevisi kanye namalogi emicimbi

Into yokuqala okufanele uyenze ukungena ngemvume kuseva bese uhlola:

• Ukuthi Insiza ye-DNS iyasebenza (ungayiqala ngokuthi net qala i-DNS (uma eboshiwe).
• I-Los izingodo zomcimbi kusuka ku-Application, System kanye ne-“DNS Server”, ifuna amaphutha endawo aphindaphindwayo, ukudluliselwa noma ukuphindaphinda.

Uma amaklayenti ethola "Iphutha Leseva" noma "Umbuzo Owenqatshiwe" lapho esebenzisa i-nslookup ngqo kuleyo seva, indawo ingase imiswe okwesikhashana noma iseva ngokwayo ingase ibe semkhawulweni wayo wezinsiza (i-CPU, i-RAM, idiski).

Hlola ukufinyelela nge-nslookup kusuka kumakhasimende namaseva

Ngaphezu kokuhlola kusuka kumaseva amaklayenti, kungumqondo omuhle ukuqhuba imibuzo kusuka kuseva ye-DNS uqobo kanye nakwamanye amaseva aphakathi. Isibonelo:

i-nslookup

Uma i-resolver ibuyisa ikheli le-IP elifanele, iseva iyasebenza futhi inkinga ingase ibe endleleni ephakathi kweklayenti neseva. Uma ibuya:

• “Iphutha leseva” noma “Umbuzo wenqatshiwe”: indawo emisiwe, ukungqubuzana kokucushwa noma iseva egcwele ngokweqile.
• "Isicelo kuseva siphelelwa yisikhathi": Isevisi ye-DNS imisiwe, i-firewall blocking port 53, i-interface engalungiselelwe kahle, noma iseva ilalele kuma-IP athile kuphela.

Ezindaweni ezinezingodo zomlilo ezithuthukisiwe noma amaphroksi, hlola ukuthi imbobo ye-DNS engeyona ejwayelekile ayisetshenziswa . I-nslookup isebenzisa i-UDP 53 ngokuzenzakalelayo; uma imbobo ishintshiwe, imibuzo izohluleka ngaphandle kokuthi ulungise imithetho ye-firewall bese usebenzisa izivivinyo.

Ukuxilongwa kokuphindaphinda kanye nokudluliselwa

Ukuze uhlole ukuphindaphinda, kuseva ye-DNS unga:

1. Bheka ukuthi ikhona yini abadluliseli abahleliwe (Ithebhu yabadluliseli bezakhiwo zeseva kukhonsoli ye-DNS).
2. Uma kungekho abathumeli, hlola ukuthi iseva ingakwazi yini ukubuza izimpande amaseva kusetshenziswa i-nslookup kumodi yokusebenzisana kanye nokubuza amarekhodi e-NS kusuka endaweni yempande.

Uma izimpendulo zibonisa ukuthi "Isicelo siphelelwe yisikhathi" ngisho nakumaseva ezimpande futhi iziphakamiso zezimpande zikhomba kumaseva alungile, ngokuvamile kuba khona:

• Izinkinga zokuxhumeka kwenethiwekhi eziphumayo ezivela kuseva.
• I-firewall ivimba ithrafikhi ye-DNS ephumayo.
• Isikhathi sokulinda sokubuyela emuva okunamandla ngokweqile.

Ukuze kuqinisekiswe ukuthi amalungu ahlukene, ngokuvamile:

1. Qala i-nslookup kuseva ethintekile, khubaza i-recursion (setha i-norecurse) bese uqalisa imibuzo ye-NS/A ngokumelene nezinga ngalinye lohlelo lwesizinda.
2. Phinda inqubo ngeseva ngayinye yokudlulisela, uqoqe wonke amarekhodi e-NS kanye namakheli abo e-A.
3. Thola ukuthi ngabe kukhona irekhodi le-A elingekho ku-NS, uma ngabe kukhona i-NS engasaphenduli, noma uma kukhona ukungafani phakathi kwezindawo zabazali nezindawo ezinikezwe zona.

Isixazululo sihilela ukulungisa noma ukwengeza amarekhodi afanele e-A kanye ne-NS endaweni eyinhloko, nokuqinisekisa ukuthi ukudluliselwa kukhomba kumaseva asebenzayo futhi afinyelelekayo.

Izindlela ezinhle kakhulu zokugwema izinkinga zenethiwekhi ye-IP ne-DNS zesikhathi esizayo

Uma konke sekuphinde kwasebenza, sekuyisikhathi sokubhekana nomsuka wenkinga ukuze ingaqhubeki yenzeka. Kunezindlela eziningi ezilula ezingcono kakhulu ezithuthukisa kakhulu ukuzinza.

Gcina izinhlelo, ama-router, kanye ne-firmware kusesikhathini

Abakhiqizi bavame ukulungisa amaphutha e-network stack, izinkinga ze-DNS, ukuvuza kwememori, kanye nobuthakathaka ezibuyekezweni zesistimu kanye ne-firmware. Ukushiya i-router yakho kanye nesistimu yokusebenza kungabuyekezwanga iminyaka eminingana kudinga inkinga.

Izincomo:

• Faka isicelo njalo iziqephu zokuphepha nezibuyekezo ku-Windows, macOS noma ku-Linux.
• Bheka ukuthi ukhona yini I-firmware entsha ye-router noma i-modem bese uyisebenzisa ngokulandela imiyalelo yomenzi.
• Gcina abashayeli benethiwekhi kusesikhathini esifanele, ikakhulukazi ngemva kokushintsha kwehadiwe.

Khetha amaseva e-DNS athembekile bese ulungisa kahle isofthiwe yakho yokuvikela umlilo kanye ne-antivirus.

Uma umhlinzeki wakho ekubangela inkinga, ungakhetha ukusebenzisa amaseva e-DNS omphakathi athembekile nasezingeni eliphezulu (i-Google, i-Cloudflare, i-OpenDNS, njll.) kokubili ku-router yakho nakumadivayisi. Ngesikhathi esifanayo, hlola isofthiwe yakho ye-firewall kanye ne-antivirus.

• Ungavimbi imibuzo ye-DNS ku-port 53 UDP/TCP.
• Vumela isixazululo se-IPv4 kanye ne-IPv6 uma inethiwekhi yakho iyisekela.
• Ungakuphoqi i-DNS ebethelwe noma nge-HTTPS ngokuhlola ngaphandle kokuthi wazi ukuthi wenzani.

Gada uxhumano kanye nokuzinza kwe-DNS

Ezinkampanini, kunconywa ukusebenzisa i-DNS eqhubekayo kanye nokuqapha inethiwekhi kusetshenziswa amathuluzi anjenge-PerfOps, i-DigiCert DNS Trust Manager noma ezinye izixazululo ezifanayo:

• Linganisa izikhathi zokuxazulula bese uthola ukubambezeleka okungavamile.
• Gada isikhathi sokuphumula kanye nesikhathi sokuphumula kumaseva e-DNS agunyaziwe.
• Thola izexwayiso mayelana namaphutha aphindaphindayo, ukukhuphuka kwemibuzo, noma ukuhlaselwa okungenzeka (isb., i-DDoS kusevisi ye-DNS).

Ezindaweni ezincane, ukuhlola okulula okwenziwa ngezikhathi ezithile kwanele: uku-ping ama-IP nama-domain aziwayo , ukubuyekeza ama-router logs, futhi uma amaphutha e-DNS ephindaphindwa, xhumana ne-ISP ukuze unqume izinkinga ezingeni lenethiwekhi.

Ukuhlanganiswa kokucushwa kwe -IP okulinganayo, amaseva e-DNS akhethwe kahle, ama-cache alawulwayo, amadivayisi abuyekeziwe, kanye nokuqapha okuqhubekayo kwenza umehluko omkhulu phakathi kwenethiwekhi engasebenzi njalo ngeviki kanye nenethiwekhi esebenza kahle. Ukuqonda ukuthi i-IP, i-DNS, ama-router, ama-firewall, kanye namaseva asebenzisana kanjani kukushiya uhlonyiswe kangcono ukuthola iphutha elilandelayo "leseva ye-DNS engaphenduli" ngemizuzu, esikhundleni sokuchitha amahora amaningi ubhekene nesiphequluli sakho.