Ideskithophu Ekude NgeWindows Firewall: Isinyathelo Ngesinyathelo

Kulesi sihloko sizokhuluma nawe mayelana ideskithophu elikude ngokusebenzisa i-Firewall Windows. Dala imithetho ye-firewall ku-Windows usebenzisa i-Windows Server 2012 R2 ukuze uvumele ithrafikhi ye-RDP ne-ICMP ngokuvula iphaneli yokulawula ye-“Windows Firewall with Advanced Security”.

Ungathola lapha ngokuthayipha "i-firewall" ebhokisini lokusesha eduze nenkinobho yasekhaya bese uyikhetha ohlwini (cishe phezulu) noma ungaya kuphaneli yokulawula.

Le ndlela ihlolwe ku-Windows 7, Windows 8, Windows Server 2018, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2.

Mhlawumbe ungaba nesithakazelo: Ideskithophu Ekude Windows 10 Ayisebenzi | Izixazululo

Ingxenye 1: Uzivumela Kanjani Izinsiza Zedeskithophu Ekude ye-RDP nge-Windows Firewall

Ukuze uvumele ideskithophu ekude nge-Firewall, kufanele ulandele inqubo engezansi:

• Isinyathelo se-1: ve a Inicio.
• Isinyathelo se-2: cindezela inketho Iphaneli yokulawula.
• Isinyathelo se-3: ve a Uhlelo nokuphepha.
• Isinyathelo se-4: Iya ku IWindows firewall bese ku Ukucushwa okuthuthukile.

Nota: Ungakwazi futhi ukufinyelela iphaneli yokulawula kusukela kumenyu yokudonsela phansi ye-Windows-X

• Isinyathelo se-5: Lokhu kuzovula i-Windows Firewall enesikrini Sokuphepha Okuthuthukile. Chofoza Imithetho yokungena.

• Isinyathelo se-6: Indlela elula yokuvumela i-Ping ukunika amandla imithetho ekhona ye-ICMP.

Nika amandla imithetho ekhona ye-ICMP (PING)

Ungaskrolela phansi bese ukhetha Ukusetshenziswa okwabiwe kwamafayela namaphrinta (Isicelo se-Echo – ICMPv4-in). Chofoza kwesokudla bese ukhetha Nika amandla umthetho (qaphela ukuthi uzoba neyodwa yamanethiwekhi amaningi, ungavumela inethiwekhi yesizinda kuphela uma usendaweni yesizinda noma uvule kokubili uma ufuna ukunika amandla nakumanethiwekhi ayimfihlo.

Qaphela ukuthi kukhona i-ICMPv4 ne-ICMPv6. Uma usebenzisa (noma uhlela ukusebenzisa) i-IPv6 kunethiwekhi yakho, sikukhuthaza ukuthi “unike amandla” nemithetho ye-IPv6. Ungakha futhi umthetho kusukela ekuqaleni, kodwa uma wenza kanjalo, isenzo esizenzakalelayo kuzoba ukunika amandla yonke ithrafikhi ye-ICMP esikhundleni sokuvumela izicelo ze-echo.

Uma ufuna ukwenza lokho, dala umthetho omusha, chofoza Ukubusa okusha kuphaneli Yezenzo (ekhoneni eliphezulu kwesokudla) noma chofoza kwesokudla Umthetho wokungena bese ukhetha Ukubusa okusha. Khetha Isiko - Zonke izinhlelo. para Isivumelwano Khetha I-ICMPv4. Uma ufuna ukwenza izicelo ze-echo kuphela, uzodinga ukuchofoza ngezifiso i-, khetha Izinhlobo ezithile ze-ICMP futhi unike amandla isicelo se-echo kuphela. Chofoza Vumela ukuxhumeka.

Khetha amanethiwekhi ofuna ukuwanika amandla (ngokuvamile Isizinda) futhi ukhubaze lawo ongafuni ukuba nawo (ngokuvamile abe sesidlangalaleni). Ekugcineni, esigabeni Igama lohlanganyele, yinike igama njengokuthi (Vumela i-ping) bese uchofoza Qeda. Uma uskrolela phezulu kwemithetho yokufaka, kufanele ubone umthetho omusha lapho.

Nika amandla umthetho okhona wedeskithophu ekude (mstsc)

Ungaskrolela phansi bese ukhetha Ideskithophu Ekude (TCP-In): chofoza kwesokudla bese ukhetha Nika amandla umthetho (qaphela ukuthi uzoba neyodwa yamanethiwekhi amaningana). Unganika amandla inethiwekhi yesizinda kuphela uma usendaweni yesizinda noma uvule kokubili uma ufuna ukunika amandla namanethiwekhi ayimfihlo.

Uma ufuna ukwenza umthetho wakho mathupha, uzosebenzisa inketho ethi Okuzenzakalelayo: Ideskithophu Ekude noma uvule imbobo. I-TCP 3389. Faka futhi ulungiselele amathuluzi we-Hyper-V wokuphatha okukude. Uma unayo I-System Center Virtual Machine Manager (SCVMM) futhi ufuna ukunika amandla ukuphathwa kwalokho, indlela elula yokwenza lokho ukufaka i- SCVMM ISO noma faka i-DVD bese usebenzisa uhlelo ikhasimende. Ungakwazi ukunika amandla I-Hyper-V uma kunesidingo futhi ingakulungisela yonke imithetho ye-firewall.

Mhlawumbe ufuna ukwazi: Ungawasebenzisa Kanjani Amadeskithophu Amaningi Abonakalayo Windows 10

I-Windows Remote Desktop - Ilungiselela i-firewall yakho nerutha

Engxenyeni 1 simisa iWindows ukuthi yamukele ukuxhunywa kwedeskithophu ekude ukuze sikwazi ukungena futhi sebenzisa i-PC noma kuphi emhlabeni ngohlelo lokusebenza lwe-Microsoft Remote Desktop Connection. Engxenyeni 2, silungiselele iWindows ukuthi yamukele ukuxhumana okukude ngokusebenzisa a isiphequluli sewebhu, ngakho-ke uhlelo lweklayenti akudingeki lufakwe kukhompuyutha oxhuma kuyo.

Kodwa-ke, azikho kulezi zindlela ezizosebenza kuze kube yilapho i-firewall yakho ilungiselelwe vumela ukuxhumana okukude. Lesi sigaba sikhuluma ngalokho. Ukwengeza, ukuze uxhume ku-PC yakho nge-inthanethi, umzila wakho kufanele umiswe ngendlela efanele.

Vumela ithrafikhi idlule i-firewall yakho

Njengoba uzobe uzama ukuxhuma ku-PC yakho kusuka kunethiwekhi yendawo noma i-inthanethi, isofthiwe yakho yohlelo lokuvikela kumele imiswe ukuze kuvunyelwe ithrafikhi ukuthi idlule. Ukunika amandla isici se-Remote Desktop ku-Windows kulungiselela ngokuzenzakalelayo i-Windows Firewall ngezilungiselelo ezifanele.

Nokho, kufanele ulungiselele mathupha noma iyiphi enye isofthiwe yohlelo lokuvikela oyifakile kukhompyutha yakho. Ukuze wenze lokhu, engeza i-UDP port 3389 (esebenzisa Ideskithophu Ekude) ohlwini olugunyaziwe lwe-firewall yakho. Uma kunesidingo, thintana nosizo futhi amadokhumenti wohlelo lwe-firewall ukuthola usizo.

Kungenzeka ukushintsha izilungiselelo ze-Windows Firewall futhi ungcolise ngephutha izilungiselelo ezenziwe ngokuzenzakalelayo lapho unikwe amandla Ideskithophu ekude. Ngakho-ke, ukuze siphephe, sizoqinisekisa ukuthi ukuxhumeka kwe-Remote Desktop kungadlula.

Uma futhi usetha ukufinyelela kuwebhu a Ukuxhuma Kwedeskithophu Ekude, kufanele wengeze i-TCP port 80 (noma iyiphi imbobo oyikhethela i-IIS uma uguqule okumisiwe) ku-Windows Firewall yakho kanye nanoma yiziphi ezinye izindonga zomlilo zezinkampani zangaphandle. I-Windows ayingezi ngokuzenzakalelayo lesi sizinda ohlwini olugunyaziwe, ngakho-ke uzodinga ukuzenzela wena. Landela lezi zinyathelo ungene Windows Vista Ukuqinisekisa izilungiselelo zeWindows Firewall noma wengeze imbobo yokufinyelela kuwebhu:

• Isinyathelo se-1: chofoza inkinobho Inicio bese ukhetha Iphaneli yokulawula.
• Isinyathelo se-2: ewindini le Iphaneli yokulawula, esigabeni Sezokuphepha, chofoza isixhumanisi Vumela uhlelo ngokusebenzisa iWindows Firewall. Uma yena Ukulawulwa kwe-akhawunti yomsebenzisi ivuliwe, khetha i-akhawunti bese ufaka iphasiwedi, uma kunesidingo, bese uchofoza Qhubeka kusaziso.
• Isinyathelo se-3: en la ventana Izilungiselelo ze-Firewall IWindows evuliwe, chofoza okuthi General.
• Isinyathelo se-4: qiniseka ukuthi ibhokisi lokuhlola Vimba konke ukuxhumana okungenayo akumakiwe.
• Isinyathelo se-5: chofoza kuthebhu Ngaphandle bese uskrolela phansi ukuze uqinisekise into Ideskithophu ekude imakwe. Lokhu kuqinisekisa ukuthi iWindows Firewall ilungiselelwe ukuvumela ukuxhumana okujwayelekile kwedeskithophu yesilawuli kude.
• Isinyathelo se-6: Uma futhi ulungiselela ukufinyelela kuwebhu nge-IIS, chofoza inkinobho Engeza imbobo. Bese kungxoxo Engeza imbobo, thayipha Igama (njenge Uxhumano Lwewebhu Lwedeskithophu Ekude) bese ufaka imbobo ezenzakalelayo engu-80 noma imbobo oshintshele kuyo mathupha. ensimini Inombolo yesango, khetha i-TCP yeProtocol bese uchofoza kahle.
• Isinyathelo se-7: Lapho inqubo isiqediwe, chofoza ukwamukela.

Isetha irutha yakho

Uma i-PC yakho ingaxhumekile ngqo kwimodemu yakho ye-inthanethi futhi isebenzisa a umzila okunezintambo noma okungenantambo, kufanele ulungiselele umzila ukuze uxhume ku-Remote Desktop nge-inthanethi. Lesi silungiselelo sivumela irutha yakho yazi ukuthi iluqondise kuphi uxhumo lwe-Remote Desktop olusuka ku-inthanethi.

Ukusetha irutha yakho kuhlanganisa ukuyilungiselela ukuthi idlulisele phambili idatha engena ezimbobeni ezithile kukhompuyutha oyisethile ngoxhumo olukude lwedeskithophu. Ku-Windows XP noma i-Vista, imbobo ye-TCP 3389 (esetshenziswa i-Remote Desktop) kufanele idluliselwe ku-Remote Desktop PC.

Uma ulungiselela ukufinyelela kuwebhu, kufanele futhi udlulisele i-TCP port 80 (noma imbobo okungeyona ezenzakalelayo oyimisile) kukhompuyutha yokusingatha. Uma ungaqiniseki ukuthi uzilungiselela kanjani lezi zimbobo ukuya phambili, lezi zinyathelo kufanele zisize:

Isinyathelo se-1: finyelela isisetshenziswa sokumisa esisekelwe kuwebhu somzila wakho ngokuvula isiphequluli sakho sewebhu, uthayiphe ikheli le-IP lomzila wakho, bese ucindezela Faka. Uma ungalazi ikheli le-IP, hlola imibhalo yomzila wakho noma uhlole inani lesango elizenzakalelayo elinikezwe emininingwaneni yesimo sokuxhuma kwe-Windows.

Isinyathelo se-2: Uma uyalwa, faka igama lomsebenzisi nephasiwedi yerutha yakho. Kufanele ngabe usethe lezi zimpawu zokungena lapho usetha umzila wakho. Kodwa-ke, uma kungenjalo, ungabheka amanani azenzakalelayo emibhalweni yomzila.

Isinyathelo se-3: Thola ithebhu Iseva ebonakalayo o Ukudluliselwa kwe-port kusuka kuzikrini zokuphatha i-router.

Isinyathelo se-4: Faka imininingwane yembobo, ngembobo ngayinye odinga ukuyidlulisela phambili (okuxoxwe ngayo ezigabeni ezedlule) ngokufaka imininingwane emabhokisini ombhalo afanelekile noma ukhethe izinketho emabhokisini ohlu. Ungase udinge ukufaka igama, okungaba elereferensi yakho, njengedeskithophu yesilawuli kude noma ukufinyelela kwewebhu yedeskithophu ekude.

Kwesinye isikhathi ungakhetha ikhompuyutha (ekhonjwe igama le-PC) ofuna ukuyidlulisela ohlwini lwemenyu yokudonsela phansi, noma kungadingeka ukuthi ufake ikheli le-IP lekhompyutha. Ungathola ikheli le-IP lekhompyutha yakho ngokubheka imininingwane yesimo sokuxhuma kwe-Windows.

Okokugcina, cishe uzodinga ukufaka imbobo ofuna ukuyidlulisela phambili, enikezwe ngenhla kukho kokubili Ideskithophu Ekude kanye Nokufinyelela Iwebhu.

Isinyathelo se-5: chofoza inkinobho Gcina o Faka isicelo.

Manje udinga ukwenza isiqiniseko sokuthi izimbobo zihlala zidluliselwa kukhompyutha elungile. Uma usebenzisa amakheli e-IP aguqukayo kunethiwekhi yakho yangakini (okuyindlela ezenzakalelayo), okusho ukuthi anikezwa ngokuzenzakalelayo kumakhompyutha akho kusetshenziswa iseva ye-DHCP yomzila, uzodinga ukwenza okunye ukumisa okungeziwe.

Kufanele unikeze ikheli le-IP elimile okungenani ikhompuyutha ezosingatha uxhumo lwe-Remote Desktop. Lokhu kungenxa yokuthi ikheli le-IP osanda kulilungiselela ukudluliselwa kwembobo ngesikhathi esithile lizonikezwa enye ikhompuyutha noma ngeke lisetshenziswe uma labelwe ngokuzenzakalelayo.

Unezindlela ezimbili zokunikeza ikhompuyutha yakho ikheli le-IP laphakade. Ungakwazi ukugcinela ikheli le-IP lekhompyutha yakho kusisetshenziswa sokumisa umzila, uma umzila wakho uwusekela. Lokhu kukhethwa ukuze ungadingi ukushintsha izilungiselelo zangempela kukhompyutha yakho futhi ukuxhuma kwamanye amanethiwekhi kulula kakhulu. Nokho, uma isici singatholakali, ungakwazi njalo ukwabela ikhompuyutha yakho (i-adaptha yenethiwekhi) ngekheli le-IP elimile ku-Windows.

Bheka: Ungakhubaza kanjani i-adaptha yenethiwekhi ku Windows 10 Amaphoyinti okugcina

Pensamientos finales

Lokhu sekuphelile, manje usuyakwazi ukuvumela izinsiza zedeskithophu ezikude ze-RDP nge-Windows Firewall futhi uyazi nezilungiselelo zakho zohlelo lokuvikela kanye nomzila. Okusho ukuthi, sitshele i-firewall ku-PC esongetha uxhumo olukude ukuthi kulungile ukuvumela ukuxhumeka okungenayo embobeni efanele. Siphinde satshela umzila wakho ukuthi ungaludlulisela kuphi uxhumo olukude lwedeskithophu. Sithemba ukuthi okokufundisa kube wusizo kuwe nokuthi uzophinde usivakashele maduze.