Nakuba kuyiqiniso ukuthi ukuphepha kwekhompyutha kuchazwa njengenqubo yokuvimbela, ukulawula, kanye nokubona ukusetshenziswa okungagunyaziwe kwanoma yiluphi uhlelo lwekhompyutha , kuncike enanini elikhulu lezinyathelo ezidingekayo ukuvikela abasebenzisi kubaphangi abasebenzisa izinsiza zedijithali ngenhloso embi.
Yingakho ukuphepha kwe-inthanethi kuvame ukuhlanganisa izindlela eziningi zokuphepha okufanele ziqondwe. Isibonelo, kubalulekile ukwazi ukuthi iyini i-ICMP Tunneling , njengoba ingenye yokuhlasela kwe-inthanethi okunamandla kakhulu futhi okusakazeke kakhulu kulo mkhakha. Ngokwemvelo yayo, isungula uxhumano oluyimfihlo.
Ngakho-ke, ukuze sifunde ukuthi ungazivikela kanjani kulo msebenzi ongekho emthethweni, kulokhu okuthunyelwe sifuna ukuchaza ukuthi iyini i-ICP Tunneling , kanye nendlela esebenza ngayo ezimweni eziningi. Sizochaza nokuthi ungasabela kanjani kulolu hlobo lokuhlaselwa kunoma iyiphi idivayisi ukuze ugweme ukuba yisisulu.
Kuyini ukuhlaselwa kwe-ICMP Tunneling futhi kusetshenziselwani?
Ngokuyisisekelo, i-ICMP tunneling ichazwa njengokungena okusetshenziselwa ukudlula ama-firewall nokwakha ukuxhumana okunzima ukukulandelela noma ukulalela . I- firewall , kulokhu, ibhekisela engxenyeni yesistimu yekhompyutha eyenzelwe ukuvimbela ukufinyelela okungagunyaziwe nokuvumela ukuxhumana okugunyaziwe kuphela.
Ngale ndlela, ukuhlaselwa kwe-ICMP Tunneling kusebenza ukudlula izinhlelo zekhompyutha ezingavimbi amaphakethe e-ICMP, ngokusekelwe kuphrothokholi yokulawula imiyalezo esetshenziswa ukuthumela imiyalezo yamaphutha ekhombisa ukuthi i-host ayitholakali . Ngaphezu kwalokho, lokhu kuhlaselwa kuvame ukusetshenziselwa ukusungula uxhumano oluyimfihlo phakathi kwemishini emibili ekude esebenzisa izicelo ze-ICMP echo kanye namaphakethe okuphendula.
Iyini indlela yokusebenza kwalolu hlobo lokuhlasela kwe-cyber?
Ngokuphathelene nendlela yokusebenza kwalezi zinhlobo zokuhlaselwa , noma kunalokho, indlela ezisebenza ngayo, sigcizelela ukuthi zisekelwe ekufakeni idatha engahleliwe ephaketheni le-echo elithunyelwa kukhompyutha ekude. Lo mshini ube usuphendula ngendlela efanayo, wethula impendulo engekho emthethweni kwelinye iphakethe le-ICMP ukuze lidluliselwe emuva.
Ngakho-ke, ngenkathi i-proxy isebenzisa amaphakethe empendulo e-echo, iklayenti empeleni lenza konke ukuxhumana okudingekayo isebenzisa amaphakethe esicelo se-ICMP echo . Ngakho-ke, ngokobuchwepheshe, kungenzeka ukuthi i-proxy isebenzisa amaphakethe esicelo se-echo, kodwa lawa maphakethe awathunyelwa kuklayenti ngoba iklayenti lingemuva kwekheli elihunyushiwe.
Ngenxa yale ndlela yokusebenza, ukuhlaselwa kwe-ICMP tunneling ngokuvamile kungasetshenziswa ukugwema imithetho ye-firewall ngokuphambukisa ithrafikhi esemthethweni . Lokhu kusho ukuthi abaphathi benethiwekhi ngeke bakwazi ukuthola lolu hlobo lwethrafikhi kunethiwekhi yabo ngaphandle kokuhlolwa okujulile kwephakethe noma ukubuyekezwa okuphelele kwelogi.
Ngingazivikela kanjani ekuhlaselweni kwe-ICMP Tunneling kunoma iyiphi idivayisi?
Njengoba kunzima kakhulu ukuvimba noma ukuvimbela ukudalwa kwemigudu ye-ICMP njengokuhlasela kwe-cyber okunamandla, ngoba i-firewall ingayisakaza njengemiyalezo yokulawula ekhishwa uhlelo lokusebenza uqobo , kuthiwa; akulula kangako ukuzivikela kulezi zinsongo.
Ngakho-ke, ukuze sizame ukugwema noma ukulwa nazo, kuzodingeka sigxile ezindleleni zokuphepha ezithile, esizisho lapha ukuvimbela ukuthuthwa kwe-ICMP:
- Kuyadingeka ukuvumela ukudlula ngobukhulu obukhulu be I-ICMP.
- Kuwusizo ukwamukela abaphathi iqiniso lokuthi sebenzisa imiyalezo ye-ICMP ngokukhululeka.
- Futhi ungakhetha yenza ubuqiniso obuqinile kanye nomthwalo obethelwe.
- Kufanele kusebenze lapho Ikhompyutha itholakala ngemuva kwe-firewall yomuntu siqu. ezingeni lesicelo.
Ngakho-ke, kubalulekile ukuqonda ukuthi kubalulekile ukuqinisekisa ukuthobela yonke le mithetho, kokubili lapho iphakethe le-ICMP lilayishwa ku-network stack nalapho lilandwa kuyo . Ngaphezu kwalokho, le nqubomgomo kufanele futhi isetshenziswe ekusebenzeni kwephrothokholi ye-ICMP ye- kernel.
