- Ukudlulisela amachweba kuvumela amadivayisi angaphandle ukufinyelela izinsizakalo ezithile kunethiwekhi yangasese ngokumaka amachweba.
- Kunezindlela ezisetshenziswa ngesandla kanye nezindlela ezizenzakalelayo (njenge-UPnP) zokuphatha le thrafikhi, yize ngayinye inamazinga ahlukene okuphepha.
- Ukuvula ama-port ngokungakhethi kwandisa indawo yokuhlasela, okuveza inethiwekhi ekuhlaselweni, i-malware, kanye nokuhlaselwa kwe-DDoS.
- Ama-VPN kanye nezixazululo zokufinyelela kude ezisekelwe efwini zethulwa njengezindlela eziphephile ngokugwema ukuvezwa ngqo kwekheli le-IP lomphakathi.
Cishe uke wahlangana negama elithi "ukudlulisela i-port" ngenkathi uzama ukusetha iseva yomdlalo noma ukufinyelela i-PC yakho emsebenzini. Kulabo abangajwayelekile, kuyindlela nje yokutshela i-router yakho ukuthi ingavimbi izingcingo ezithile zangaphandle futhi izithumele ngqo kudivayisi ethile kunethiwekhi yakho yasekhaya. Empeleni, ivula indlela ethile ku-firewall yokuphepha yenethiwekhi yakho ukuze othile ovela ngaphandle akwazi ukuxhuma ngaphandle kwe-router eyivimba ngokuzenzakalelayo.
Nakuba kungase kuzwakale njengokungasho lutho ekuqaleni, kuyindlela enengqondo impela. Cabanga ngenethiwekhi yakho njengesakhiwo esinomnyango oyedwa (i-router) namakamelo amaningi (amadivayisi akho). Ngokuvamile, umnyango awuvumeli muntu ukuthi angene ongamenywanga, kodwa ngokudlulisela i-port, umnika umyalelo ocacile: "Uma umuntu ecela umnyango 80, myise ngqo egumbini leseva yewebhu." Ngale ndlela, senza izinsizakalo zangaphakathi zibonakale emhlabeni omkhulu we-inthanethi.
Isebenza kanjani ngempela le nqubo?
Ukuze sikuqonde kahle lokhu, sidinga kuqala ukukhuluma ngamachweba enethiwekhi . Cabanga ngawo njengeminyango ebonakalayo enezinombolo ephatha ithrafikhi. Uhlelo ngalunye lusebenzisa oluhlukile: ithrafikhi yewebhu evikelekile ivame ukudlula ku -port 443 , kuyilapho i-Windows Remote Desktop isebenzisa i-port 3389. Ngaphandle kwala malebula, idatha izofika kudivayisi, kodwa idivayisi ngeke yazi ukuthi izoyiletha kuluphi uhlelo.
Yilapho kungena khona i-Network Address Translation (NAT ) . I-router isebenzisa i-NAT ukuqinisekisa ukuthi wonke amadivayisi akho abelana ngekheli elilodwa le-IP lomphakathi. Ukuze kuvikelwe, i-NAT ivimba ukuxhumana okungenayo okungacelwanga. Ukudlulisela i-port kushintsha ukuziphatha kwe-NAT ngokudala umthetho ohlanganisa i-port yangaphandle nekheli elithile le-IP langasese kanye ne-port yangaphakathi, ngokusekelwe kumaphrothokholi enethiwekhi amisiwe .
Inqubo ilandela ukugeleza okuqondile kakhulu: umsebenzisi wangaphandle uthumela isicelo ekhelini lakho le-IP lomphakathi kanye nechweba elithile. I-router ithola isicelo, ibheke ithebula layo lemithetho, futhi, uma kukhona okufanayo, iqondisa kabusha iphakethe ledatha kudivayisi eqondiwe kunethiwekhi yendawo. Ekugcineni, idivayisi icubungula isicelo bese ibuyisela impendulo ngendlela efanayo.
Izinhlobo zokuqondisa kabusha kanye nezindlela ezizenzakalelayo
Akuzona zonke izindlela zokudlulisela imbobo ezifanayo. Kukhona indlela yokudlulisela imbobo yendawo , esetshenziselwa ukudlula imikhawulo yenethiwekhi noma ama-firewall ngokuxhuma kuseva ekude. Ngakolunye uhlangothi, indlela yokudlulisela imbobo ekude iyona evame kakhulu: yenza isevisi kunethiwekhi yakho yasekhaya itholakale kwi-inthanethi. Kukhona futhi indlela yokudlulisela imbobo enamandla , eguquguqukayo kakhulu futhi ivame ukusetshenziswa kuma-tunnel noma kuma-proxies ukuphatha izinsizakalo eziningi ngasikhathi sinye.
Uma ungafuni ukubhekana nokucushwa ngesandla, kunezinketho ezizenzakalelayo. I-UPnP (Universal Plug and Play) iyona elula kakhulu; ivumela amadivayisi ukuthi avule ama-port awo njengoba kudingeka. Kuvame kakhulu kuma-consoles nasezinhlelweni zokusakaza, yize kungaba yingozi ngoba ivula ama-port ngaphandle kolwazi lomsebenzisi.
Enye indlela elinganiselayo ukuqalisa i-port . Ngokungafani nokudlulisela phambili okuhleliwe, i-router ivula i-port kuphela uma ithola ukuthi idivayisi yangaphakathi iqalile ukuxhumana okuphumayo. Lapho nje ithrafikhi iphela, i-port ivaliwe , okunciphisa ithuba lokuthi umgebengu azame ukungena ngaphakathi.
Amacala okusetshenziswa kwansuku zonke avamile
Lolu hlelo lubalulekile kunoma ubani ojabulela ukudlala imidlalo ku-inthanethi . Uma ufuna ukusetha iseva ye-Minecraft noma ye-Counter-Strike, udinga ukuvula ama-port athile ukuze abangani bakho bakwazi ukujoyina umdlalo ngaphandle kwamaphutha okuxhumeka. Ngokufanayo, luyisisekelo sokuphatha amakhamera okuphepha e-IP kanye nokubhekwa kwevidiyo, okukuvumela ukuthi ubuke okuphakelayo okubukhoma kusuka kudivayisi yakho yeselula, noma ngabe ukuphi.
Esimweni sobungcweti, isetshenziselwa ukufinyelela kude kwideskithophu nge-RDP noma ukuphatha amaseva e-NAS (isitoreji esinamathiselwe kunethiwekhi) ngaphandle kwehhovisi. Futhi kuyindlela ejwayelekile uma unqume ukusetha i- home web noma iseva ye-FTP , okuvumela ithrafikhi ye-HTTP ukuthi ifinyelele emshinini wakho wendawo.
Ngisho nezinye izinhlelo zokusebenza zokwabelana ngamafayela ze-P2P, njenge-BitTorrent, zisebenza kangcono kakhulu uma ama-port evuliwe, njengoba evumela amanye ama-node ukuthi axhumane nawe ngqo, okwandisa isivinini sokulanda nokulayisha.
Izingozi zokuphepha: akusikho ukukhanya kwelanga kanye nothingo kuphela
Ukuvula ichweba, empeleni, kuwukuvula ifasitela eliya enqabeni yakho yedijithali. Ingozi esobala kakhulu ukufinyelela okungagunyaziwe ; uma idivayisi eveziwe ingenayo iphasiwedi eqinile, umhlaseli angangena ngenkani esebenzisa amandla amakhulu. Ngaphezu kwalokho, uma isofthiwe oyisebenzisayo isiphelelwe yisikhathi, noma yikuphi ukukhubazeka okungakalungiswa kuba yicala elibomvu le-malware.
Asikwazi futhi ukukhohlwa ukuhlaselwa kwe-DDoS . I-open port iyisisulu esifanele izinkulungwane zamakhompyutha e-zombie ukuze agcwalise uxhumano lwakho, okwenza inethiwekhi yakho ingasebenzi nhlobo. Ngokwandisa indawo yakho yokuhlasela , unikeza izigebengu ze-cyber izinkomba mayelana nokuthi yiziphi izinsizakalo ozifakile, okwenza kube lula ngazo ukuqalisa ukuhlaselwa okuqondiwe.
Enye inkinga ebalulekile ukuntuleka kokubethela kumaphrothokholi amadala. Uma uqondisa kabusha ichweba le-FTP elidala, iziqinisekiso zakho zihamba ngombhalo ocacile futhi zingabanjwa kalula. Okubi nakakhulu, idivayisi yakho ingagcina iyingxenye ye- botnet , esetshenziselwa ukuhlasela abanye ngaphandle kolwazi lwakho.
Indlela yokusetha i-Port Forwarding isinyathelo ngesinyathelo
Ukuze lokhu kusebenze, into yokuqala ukuthi idivayisi eqondiwe ine- I-Static IPUma ikheli le-IP lishintsha (i-DHCP), umthetho we-router uzoyeka ukusebenza. Ku-Windows, ungasebenzisa i-PowerShell enemiyalo efana ne- Get-NetIPConfiguration ukuze ubuke idatha yakho bese usetha ikheli le-IP kanye neseva ye-DNS ngesandla.
Uma usubeke ikheli le-IP, udinga ukufinyelela isikhombimsebenzisi sokuphatha se-router yakho ngesiphequluli sakho sewebhu. Bheka isigaba esithi "Port Forwarding" bese udala umthetho omusha ochaza imbobo yangaphandle (leyo ezokwamukela isicelo), ikheli le-IP langaphakathi ledivayisi, kanye nembobo yangaphakathi (leyo esetshenziswa yisevisi).
Ku-macOS, inqubo iyafana: okokuqala, unikeza ikheli le-IP kuzilungiselelo zenethiwekhi ngokushintsha kusuka ku-DHCP kuya ku-Manual, bese ulungiselela umthetho ku-router. Kubalulekile ukulondoloza izinguquko bese uqala kabusha uma i-router ikucela ukuthi uqinisekise ukuthi ithebula lokuqondisa libuyekezwa kahle.
Ezinye izindlela zanamuhla kanye nobudlelwano bazo nama-VPN
Uma ukuvula amachweba kubonakala kuyingozi kakhulu, kunezixazululo zokufinyelela kude eziphephile , ezisekelwe efwini . Amathuluzi afana ne-Splashtop asebenzisa imigudu ebethelwe kanye nokuqinisekiswa kwezinto ezimbili, okususa isidingo sokushintsha izilungiselelo ze-router futhi kunciphisa kakhulu ubungozi bakho ekuhlaselweni.
Ngakolunye uhlangothi, ukusebenzisa i -VPN (Virtual Private Network) kuyincomo engcono kakhulu. I-VPN idala umhubhe ophephile kunethiwekhi yakho; esikhundleni sokuvula imbobo eya emhlabeni wonke, uqala ngokuxhuma ku-VPN bese ufinyelela amadivayisi akho njengokungathi usekhaya. Lokhu kugwema ukudalula izinsizakalo ngqo ekhelini lakho le-IP lomphakathi.
Kuyafaneleka ukuqaphela ukuthi abanye abahlinzeki be-VPN bavumela ukudluliselwa kwe-port, okuwusizo ekugcineni ubumfihlo bekheli lakho langempela le-IP ngenkathi kusavunyelwe idatha ethile ukuthi idlule. Kodwa-ke, abanye bayakwenqabela ngokuqinile ukuqinisekisa ukuphepha okuphezulu komsebenzisi nokuvimbela amaseva abo ukuthi asetshenziswe emisebenzini enonya.
Ukuze ugweme izinkinga, kuyalulekwa ukuqhathanisa i-Port Forwarding ne- DMZ (Demilitarized Zone) . Ngenkathi i-port forwarding ivula i-port eyodwa kuphela, i-DMZ iveza yonke idivayisi ku-inthanethi, iyishiye ingavikelekile nhlobo. Ngakho-ke, i-DMZ kufanele isetshenziswe kuphela ezimweni ezimbi kakhulu futhi ngezinyathelo zokuphepha ezengeziwe eziqinile.
Ukuqonda ukudlulisela i-port kukuvumela ukuthi uguqule i-router yasekhaya ibe ithuluzi elinamandla lokuphatha amaseva, imidlalo, kanye nokuphepha, uma nje ulondoloza ibhalansi phakathi kokufinyeleleka kanye nokuvikelwa . Ukusebenzisa amaphasiwedi aqinile, ukuvuselela i-firmware njalo, kanye nokucabanga ngezinye izindlela ezifana nama-VPN kuyizinyathelo ezibalulekile zokujabulela ukuxhumana okude ngaphandle kokuguqula inethiwekhi yakho yendawo ibe yisithiyo sabaphangi.
