Madzulo ena abwino a masika, pamene sindinkafuna kupita kunyumba, ndipo chikhumbo chofuna kukhala ndi moyo ndi kuphunzira chinali kuyabwa ndikuyaka ngati chitsulo chotentha, lingaliro lidawuka kuti ndisankhe chinthu chosokera chosokera pamoto wotchedwa "Ndondomeko ya IP DOS".
Pambuyo caress koyambirira ndi kuzolowerana ndi bukuli, ndidayiyika mumayendedwe Pass-ndi-Log, kuyang'ana kutulutsa kwathunthu ndi phindu lokayikitsa la izi.
Patapita masiku angapo (kotero kuti ziwerengero zidziunjike, ndithudi, osati chifukwa ndinayiwala), ndinayang'ana zipika ndipo, ndikuvina pomwepo, ndikuwomba m'manja - panali zolemba zokwanira, osasewera. Zingawoneke ngati sizingakhale zophweka - tsegulani ndondomeko yoletsa kusefukira konse, kusanthula, kuyika theka lotseguka magawo ndi chiletso kwa ola limodzi ndi kugona mwamtendere ndi kuzindikira kuti malire atsekedwa. Koma chaka cha 34 cha moyo chinagonjetsa maximalism aunyamata ndipo kwinakwake kumbuyo kwa ubongo kunamveka liwu lopyapyala: "Tiyeni tikweze zikope zathu ndikuwona ma adilesi athu okondedwa omwe adadziwika kuti ndi osefukira oopsa? Chabwino, mwa dongosolo lachabechabe. "
Timayamba kusanthula zomwe talandira kuchokera pamndandanda wazovuta. Ndimayendetsa ma adilesi kudzera mu script yosavuta Powershell ndipo maso amakhumudwa pa zilembo zodziwika bwino sakani.
Ndimasisita m'maso ndikuphethira kwa mphindi zisanu kuti ndiwonetsetse kuti sindikulingalira zinthu - ndithudi, pamndandanda wa omwe firewall amawaona ngati kusefukira koyipa, mtundu wa kuwukira ndi - udp kusefukira, ma adilesi akampani yabwino.
Ndikukanda mutu wanga, nthawi imodzi ndikukhazikitsa kujambulidwa kwa paketi pa mawonekedwe akunja kuti ndiwunikenso. Malingaliro owala amabwera m'mutu mwanga: "Zimakhala bwanji kuti china chake chili ndi kachilombo mu Google Scope? Ndipo ine ndapeza izi? Inde, izi ndi mphotho, ulemu ndi kapeti yofiyira, komanso kasino wake yemwe ali ndi blackjack ndipo, mukumvetsa ... "
Kusanthula fayilo yolandilidwa Wireshark-ohm.
Inde, kuchokera ku adilesi yochokera pakukula Google Mapaketi a UDP akutumizidwa kuchokera ku doko 443 kupita ku doko lachisawawa pa chipangizo changa.
Koma, dikirani miniti ... Apa protocol ikusintha kuchokera UDP pa Mtengo wa GQUIC.
Semyon Semenych...
Nthawi yomweyo ndikukumbukira lipoti lochokera HighLoad Alexandra Tobolya Β«UDP motsutsa TCP kapena tsogolo la network stack"().
Kumbali imodzi, kukhumudwitsidwa pang'ono kumayamba - palibe zopambana, palibe ulemu kwa inu, mbuye. Kumbali inayi, vuto ndi lomveka bwino, limakhalabe kumvetsetsa komwe kukumba komanso kuchuluka kwake.
Kulankhulana kwa mphindi zingapo ndi Good Corporation - ndipo zonse zimachitika. Poyesa kukonza liwiro la kutumiza zinthu, kampaniyo Google adalengeza protocol kumbuyo mu 2012 Mendulo, zomwe zimakulolani kuchotsa zofooka zambiri za TCP (inde, inde, inde, inde, m'nkhanizi - ΠΈ Amalankhula za njira yosinthiratu, koma, tiyeni tinene zoona, ndikufuna zithunzi ndi amphaka kuti zikweze mwachangu, osati zosintha zonsezi zachidziwitso ndi kupita patsogolo). Monga momwe kafukufuku wina wasonyezera, mabungwe ambiri tsopano akusintha njira iyi yoperekera zinthu.
Vuto pa ine ndipo, ndikuganiza, osati kwa ine kokha, chinali chakuti pamapeto pake pali mapaketi ochulukirapo ndipo chowotcha moto chimawawona ngati kusefukira kwa madzi.
Panali zochepa zothetsera:
1. Onjezani pamndandanda wopatula Ndondomeko ya DoS Kuchuluka kwa maadiresi pa firewall Google. Pongoganizira za maadiresi omwe angakhalepo, diso lake linayamba kunjenjemera mwamantha - lingalirolo linayikidwa pambali ngati lopenga.
2. Wonjezerani momwe mungayankhire udp ndondomeko ya madzi osefukira - komanso osati comme il faut, koma bwanji ngati wina woyipa alowa.
3. Letsani mafoni kuchokera pa netiweki yamkati kudzera UDP pa 443 port out.
Pambuyo powerenga zambiri za kukhazikitsa ndi kuphatikiza Mendulo Π² Google Chrome Njira yomaliza idavomerezedwa ngati chisonyezero chakuchitapo kanthu. Chowonadi ndi chakuti, okondedwa ndi aliyense kulikonse komanso mopanda chifundo (sindikumvetsa chifukwa chake, ndi bwino kukhala ndi mutu wodzikuza Firefox-ovskaya muzzle adzalandira ma gigabytes a RAM), Google Chrome poyambirira amayesa kukhazikitsa kulumikizana pogwiritsa ntchito zomwe adazipeza movutikira Mendulo, koma ngati chozizwitsa sichichitika, chimabwereranso ku njira zotsimikiziridwa monga TLS, ngakhale kuti anachita manyazi kwambiri.
Pangani cholowera cha ntchitoyo pa firewall Mendulo:
Timakhazikitsa lamulo latsopano ndikuliyika kwinakwake pamwamba pa unyolo.
Pambuyo kuyatsa lamulo mu mndandanda wa anomalies, mtendere ndi bata, kupatulapo moona njiru ophwanya.
Zikomo aliyense chifukwa cha chidwi chanu.
Zogwiritsidwa ntchito:
1.
2.
3.
4.
Source: www.habr.com