{"id":33073,"date":"2019-10-31T21:50:35","date_gmt":"2019-10-31T18:50:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-rabotaet-blokirovka-dostupa-k-stranitsam-rasprostranyayushhim-zapreshhennyj-kontent-teper-rkn-proveryaet-i-poiskoviki\/"},"modified":"2019-10-31T21:50:35","modified_gmt":"2019-10-31T18:50:35","slug":"kak-rabotaet-blokirovka-dostupa-k-stranitsam-rasprostranyayushhim-zapreshhennyj-kontent-teper-rkn-proveryaet-i-poiskoviki","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kak-rabotaet-blokirovka-dostupa-k-stranitsam-rasprostranyayushhim-zapreshhennyj-kontent-teper-rkn-proveryaet-i-poiskoviki","title":{"rendered":"Ako funguje blokovanie pr\u00edstupu na str\u00e1nky, ktor\u00e9 \u0161\u00edria zak\u00e1zan\u00fd obsah (teraz RKN kontroluje aj vyh\u013ead\u00e1va\u010de)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrahabr.ru\/company\/cloud4y\/blog\/347964\/\"><img decoding=\"async\" alt=\"Ako funguje blokovanie pr\u00edstupu na str\u00e1nky, ktor\u00e9 \u0161\u00edria zak\u00e1zan\u00fd obsah (teraz RKN kontroluje aj vyh\u013ead\u00e1va\u010de)\" src=\"\/wp-content\/uploads\/2019\/05\/ebde45e6db873a913ec334d16f2ca236.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Sk\u00f4r ne\u017e prejdeme k opisu syst\u00e9mu, ktor\u00fd je zodpovedn\u00fd za filtrovanie pr\u00edstupu oper\u00e1tormi siet\u00ed, zd\u00f4raznime, \u017ee teraz sa Roskomnadzor za\u010dne zaobera\u0165 aj kontrolou \u010dinnosti vyh\u013ead\u00e1vac\u00edch syst\u00e9mov. <\/p>\n<p>Na za\u010diatku roka bola schv\u00e1len\u00e1 smernica o kontrole a zoznam opatren\u00ed na zabezpe\u010denie dodr\u017eiavania po\u017eiadaviek oper\u00e1torov vyh\u013ead\u00e1vac\u00edch syst\u00e9mov na zastavenie zverej\u0148ovania inform\u00e1ci\u00ed o internetov\u00fdch zdrojoch, na ktor\u00e9 je pr\u00edstup obmedzen\u00fd na \u00fazem\u00ed Ruskej feder\u00e1cie.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"http:\/\/publication.pravo.gov.ru\/Document\/View\/0001201801160014\">Prisl\u00fachaj\u00faci pr\u00edkaz<\/a><\/noindex> Roskomnadzoru z 7. novembra 2017 \u010d. 229 bol zaregistrovan\u00fd v Ministerstve spravodlivosti Ruska.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Pr\u00edkaz bol prijat\u00fd v r\u00e1mci realiz\u00e1cie ustanoven\u00ed \u010dl\u00e1nku 15.8 feder\u00e1lneho z\u00e1kona zo 27.07.2006 \u010d. 149-FZ \"O inform\u00e1ci\u00e1ch, informa\u010dn\u00fdch technol\u00f3gi\u00e1ch a ochrane inform\u00e1ci\u00ed\", ktor\u00fd ur\u010duje <b>povinnosti pre vlastn\u00edkov VPN slu\u017eieb, \"anonymiz\u00e1torov\" a oper\u00e1torov vyh\u013ead\u00e1vac\u00edch syst\u00e9mov na obmedzenie pr\u00edstupu k inform\u00e1ci\u00e1m<\/b>, ktor\u00fdch \u0161\u00edrenie je v Rusku zak\u00e1zan\u00e9.<\/p>\n<p>Kontroln\u00e9 opatrenia sa vykon\u00e1vaj\u00fa na mieste s\u00eddla kontroln\u00e9ho org\u00e1nu bez spolupr\u00e1ce s oper\u00e1tormi vyh\u013ead\u00e1vac\u00edch syst\u00e9mov.<\/p>\n<p><img decoding=\"async\" alt=\"Ako funguje blokovanie pr\u00edstupu na str\u00e1nky, ktor\u00e9 \u0161\u00edria zak\u00e1zan\u00fd obsah (teraz RKN kontroluje aj vyh\u013ead\u00e1va\u010de)\" src=\"\/wp-content\/uploads\/2019\/05\/112eb8b85d9ece46b03ab037d6e5fa11.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Informa\u010dn\u00fd syst\u00e9m je ch\u00e1pan\u00fd ako FGIS informa\u010dn\u00fdch zdrojov informa\u010dno-telekomunika\u010dn\u00fdch siet\u00ed, na ktor\u00e9 je pr\u00edstup obmedzen\u00fd.<\/i><\/p>\n<p>Na z\u00e1klade v\u00fdsledkov podujatia sa vyhotovuje protokol, ktor\u00fd obsahuje najm\u00e4 inform\u00e1cie o softv\u00e9ri pou\u017e\u00edvanom na zis\u0165ovanie t\u00fdchto faktov, ako aj \u00fadaje potvrdzuj\u00face, \u017ee konkr\u00e9tna str\u00e1nka (str\u00e1nky) webu bola v \u010dase kontroly v informa\u010dnom syst\u00e9me viac ako 24 hod\u00edn.<\/p>\n<p>Protokol sa posiela oper\u00e1torovi vyh\u013ead\u00e1vac\u00edch syst\u00e9mov prostredn\u00edctvom informa\u010dn\u00e9ho syst\u00e9mu. V pr\u00edpade nes\u00fahlasu s protokolom m\u00e1 oper\u00e1tor pr\u00e1vo v priebehu troch pracovn\u00fdch dn\u00ed predlo\u017ei\u0165 svoje n\u00e1mietky Roskomnadzoru, ktor\u00fd tie\u017e presk\u00fama n\u00e1mietky po\u010das troch pracovn\u00fdch dn\u00ed. Na z\u00e1klade pos\u00fadenia n\u00e1mietok oper\u00e1tora prijme ved\u00faci kontroln\u00e9ho org\u00e1nu alebo jeho z\u00e1stupca rozhodnutie o za\u010dat\u00ed konania o spr\u00e1vnom delikte.<\/p>\n<h3>Ako je v s\u00fa\u010dasnosti usporiadan\u00fd syst\u00e9m filtrovania pr\u00edstupu pre oper\u00e1torov siet\u00ed<\/h3>\n<p>\nV Rusku plat\u00ed mno\u017estvo z\u00e1konov, ktor\u00e9 ur\u010duj\u00fa oper\u00e1torom siet\u00ed povinnos\u0165 filtrova\u0165 pr\u00edstup na str\u00e1nky obsahuj\u00face zak\u00e1zan\u00fd obsah:<\/p>\n<ul>\n<li>FZ 126 \"O komunik\u00e1cii\", novela \u010dl\u00e1nku 46 \u2014 o povinnosti oper\u00e1tora obmedzi\u0165 pr\u00edstup k inform\u00e1ci\u00e1m (FS\u00c9M).<\/li>\n<li>\u201eJednotn\u00fd register\u201c \u2013 uznesenie vl\u00e1dy RF z 26. okt\u00f3bra 2012 \u010d. 1101 \u201eO jednotnom automatizovanom informa\u010dnom syst\u00e9me 'Jednotn\u00fd register dom\u00e9nov\u00fdch mien, ukazovate\u013eov str\u00e1nok webov\u00fdch str\u00e1nok v informa\u010dno-telekomunika\u010dnej sieti 'Internet' a sie\u0165ov\u00fdch adries, ktor\u00e9 umo\u017e\u0148uj\u00fa identifikova\u0165 webov\u00e9 str\u00e1nky v informa\u010dno-telekomunika\u010dnej sieti 'Internet', obsahuj\u00facich inform\u00e1cie, ktor\u00fdch \u0161\u00edrenie v Ruskej feder\u00e1cii je zak\u00e1zan\u00e9\u201c<\/li>\n<li>FZ 436 \u201eO ochrane det\u00ed\u2026\u201c, kategoriz\u00e1cia dostupn\u00fdch inform\u00e1ci\u00ed.<\/li>\n<li>FZ \u010d. 3 \u201eO pol\u00edcii\u201c, \u010dl\u00e1nok 13, bod 12 \u2013 o odstr\u00e1nen\u00ed pr\u00ed\u010din a podmienok, ktor\u00e9 prispievaj\u00fa k realiz\u00e1cii hrozieb bezpe\u010dnosti ob\u010danov a verejnej bezpe\u010dnosti.<\/li>\n<li>FZ \u010d. 187 \u201eO zmen\u00e1ch v niektor\u00fdch z\u00e1konoch RF v ot\u00e1zkach ochrany intelektu\u00e1lnych pr\u00e1v v informa\u010dno-telekomunika\u010dn\u00fdch sie\u0165ach\u201c (\u201eantipir\u00e1tsky z\u00e1kon\u201c).<\/li>\n<li>Vykon\u00e1vanie rozhodnut\u00ed s\u00fadnych in\u0161tanci\u00ed a predpisov org\u00e1nov prokurat\u00fary.<\/li>\n<li>Feder\u00e1lny z\u00e1kon zo d\u0148a 28.07.2012 \u010d. 139-FZ \u201eO zmen\u00e1ch vo Feder\u00e1lnom z\u00e1kone 'O ochrane det\u00ed pred inform\u00e1ciou, ktor\u00e1 sp\u00f4sobuje po\u0161kodenie ich zdraviu a v\u00fdvoju' a v niektor\u00fdch legislat\u00edvnych aktoch Ruskej feder\u00e1cie\u201c.<\/li>\n<li>Feder\u00e1lny z\u00e1kon zo 27. j\u00fala 2006 \u010d. 149-FZ \u201eO inform\u00e1ci\u00e1ch, informa\u010dn\u00fdch technol\u00f3gi\u00e1ch a ochrane inform\u00e1ci\u00ed\u201c.<\/li>\n<\/ul>\n<p>\n\u017diadosti od Roskomnadzoru na blokovanie obsahuj\u00fa aktualizovan\u00fd zoznam po\u017eiadaviek na poskytovate\u013ea, ka\u017ed\u00fd z\u00e1znam z takejto \u017eiadosti obsahuje:<\/p>\n<ul>\n<li>typ registra, pod\u013ea ktor\u00e9ho sa obmedzenie vykon\u00e1va;<\/li>\n<li>moment \u010dasu, od ktor\u00e9ho vznik\u00e1 potreba obmedzenia pr\u00edstupu;<\/li>\n<li>typ naliehavosti reakcie (be\u017en\u00e1 naliehavos\u0165 \u2013 do jedn\u00e9ho d\u0148a, vysok\u00e1 naliehavos\u0165 \u2013 okam\u017eit\u00e1 reakcia);<\/li>\n<li>typ blokovania registra\u010dn\u00e9ho z\u00e1znamu (pod\u013ea URL alebo pod\u013ea dom\u00e9nov\u00e9ho mena);<\/li>\n<li>hash k\u00f3d registra\u010dn\u00e9ho z\u00e1znamu (men\u00ed sa pri akejko\u013evek zmene obsahu z\u00e1znamu);<\/li>\n<li>n\u00e1le\u017eitosti rozhodnutia o potrebe obmedzenia pr\u00edstupu;<\/li>\n<li>jeden alebo nieko\u013eko odkazov na str\u00e1nky webov\u00fdch str\u00e1nok, ktor\u00fdch pr\u00edstup m\u00e1 by\u0165 obmedzen\u00fd (nie nevyhnutne);<\/li>\n<li>jedno alebo nieko\u013eko dom\u00e9nov\u00fdch mien (nie nevyhnutne);<\/li>\n<li>jeden alebo nieko\u013eko sie\u0165ov\u00fdch adries (nie nevyhnutne);<\/li>\n<li>jedna alebo nieko\u013eko ip-subnetov (nie nevyhnutne).<\/li>\n<\/ul>\n<p>\nAby efekt\u00edvne doru\u010dili inform\u00e1cie oper\u00e1torom, bola vytvoren\u00e1 \"Informa\u010dn\u00e1 s\u00fastava interakcie Rusk\u00e9ho regula\u010dn\u00e9ho \u00faradu so spojovate\u013emi\". Nach\u00e1dza sa spolu s pr\u00e1vnymi aktmi, pokynmi a pam\u00e4tn\u00edkmi pre oper\u00e1torov na \u0161pecializovanom port\u00e1li:<\/p>\n<p><b><noindex><a rel=\"nofollow\" href=\"http:\/\/vigruzki.rkn.gov.ru\/\">vigruzki.rkn.gov.ru<\/a><\/noindex><\/b><\/p>\n<p>Zo svojej strany za\u010dne Rusk\u00fd regula\u010dn\u00fd \u00farad vyd\u00e1va\u0165 klienta AS \"Rev\u00edzor\" na kontrolu oper\u00e1torov. Ni\u017e\u0161ie je trochu o funk\u010dnosti agenta.<\/p>\n<p>Algoritmus na overenie dostupnosti ka\u017ed\u00e9ho URL agentom. Pri kontrole by mal agent:<\/p>\n<ul>\n<li>ur\u010di\u0165 IP adresy, na ktor\u00e9 sa prev\u00e1dza sie\u0165ov\u00fd n\u00e1zov kontrolovanej webovej str\u00e1nky (dom\u00e9ny), alebo pou\u017ei\u0165 IP <b>adresy, poskytnut\u00e9 vo vyexportovan\u00ed<\/b>;<\/li>\n<li>pre ka\u017ed\u00fa IP adresu z\u00edskan\u00fa od DNS serverov vykona\u0165 HTTP po\u017eiadavku na kontrolovan\u00e9 URL. V pr\u00edpade, \u017ee kontrolovan\u00e1 str\u00e1nka odpovie HTTP presmerovan\u00edm, agent by mal overi\u0165 URL, na ktor\u00e9 sa presmerovanie vykon\u00e1va. Podporuje sa minim\u00e1lne 5 po sebe id\u00facich HTTP presmerovan\u00ed;<\/li>\n<li>v pr\u00edpade nemo\u017enosti uskuto\u010dni\u0165 HTTP po\u017eiadavku (nedoch\u00e1dza k nadviazaniu TCP spojenia) by agent mal vyvodi\u0165 z\u00e1ver o blokovan\u00ed IP adresy v celku;<\/li>\n<li>v pr\u00edpade \u00faspe\u0161nej HTTP po\u017eiadavky by agent mal skontrolova\u0165 z\u00edskan\u00fa odpove\u010f kontrolovanej str\u00e1nky pod\u013ea k\u00f3du HTTP odpovede, pod\u013ea HTTP hlavi\u010diek, pod\u013ea HTTP obsahu (prv\u00e9 z\u00edskan\u00e9 \u00fadaje ve\u013ekosti do 10 kB). V pr\u00edpade zhody z\u00edskanej odpovede so vzormi str\u00e1nok z\u00e1lo\u017eiek vytvoren\u00fdmi v C\u00da <b>by sa mal vyvodi\u0165 z\u00e1ver o existencii blokovania kontrolovan\u00e9ho URL<\/b>;<\/li>\n<li>pri vykon\u00e1van\u00ed kontroly URL by mal agent overi\u0165 in\u0161tal\u00e1ciu \u0161ifrovan\u00e9ho pripojenia a ozna\u010di\u0165 zdroj;<\/li>\n<li>v pr\u00edpade nezrovnalosti z\u00edskan\u00fdch \u00fadajov agentom so vzormi str\u00e1nok z\u00e1lo\u017eiek alebo d\u00f4veryhodn\u00fdch str\u00e1nok presmerovania, ktor\u00e9 informuj\u00fa o blokovan\u00ed zdroja, by mal agent vyvodi\u0165 z\u00e1ver o absencii blokovania URL na SP operatora. V tomto pr\u00edpade s\u00fa inform\u00e1cie o \u00fadajoch (HTTP odpove\u010f), z\u00edskan\u00e9 agentom, zapisovan\u00e9 do spr\u00e1vy (s\u00fabor \u017eurn\u00e1lu kontroly). Spr\u00e1vca syst\u00e9mu m\u00e1 mo\u017enos\u0165 vytvori\u0165 z tejto z\u00e1pisu vzor novej str\u00e1nky z\u00e1lo\u017eky na zabr\u00e1nenie nasleduj\u00facim falo\u0161n\u00fdm z\u00e1verom o absencii blokovania.<\/li>\n<\/ul>\n<p>\n<b class=\"spoiler_title\">Zoznam toho, \u010do by mal agent zabezpe\u010di\u0165<\/b><\/p>\n<ul>\n<li>kontaktova\u0165 \u00dastredie na z\u00edskanie \u00fapln\u00e9ho zoznamu URL adries a re\u017eimov blokovania, ktor\u00e9 je potrebn\u00e9 otestova\u0165;<\/li>\n<li>kontaktova\u0165 \u00dastredie na z\u00edskanie \u00fadajov o re\u017eimoch kontroly. Podporovan\u00e9 re\u017eimy: \u00fapln\u00e1 jednorazov\u00e1 kontrola, \u00fapln\u00e1 pravideln\u00e1 kontrola s ur\u010den\u00fdm intervalom, v\u00fdberov\u00e1 jednorazov\u00e1 kontrola so zoznamom URL ur\u010den\u00fdm pou\u017e\u00edvate\u013eom, pravideln\u00e1 kontrola URL zoznamu (ur\u010dit\u00e9ho typu z\u00e1pisov ER) s ur\u010den\u00fdm intervalom;<\/li>\n<li>pokra\u010dovanie v vykon\u00e1van\u00ed ur\u010den\u00fdch kontroln\u00fdch proced\u00far pod\u013ea existuj\u00faceho zoznamu URL v pr\u00edpade nemo\u017enosti z\u00edska\u0165 zoznam URL z \u00dastredia, a uchov\u00e1vanie z\u00edskan\u00fdch v\u00fdsledkov kontrol s n\u00e1sledn\u00fdm odoslan\u00edm na \u00dastredie;<\/li>\n<li>\u00fapln\u00e9 vykonanie ur\u010den\u00fdch kontroln\u00fdch proced\u00far pod\u013ea existuj\u00facich zoznamov URL v pr\u00edpade nemo\u017enosti z\u00edska\u0165 inform\u00e1cie o re\u017eimoch kontroly z \u00dastredia, a uchov\u00e1vanie z\u00edskan\u00fdch v\u00fdsledkov kontroly s n\u00e1sledn\u00fdm odoslan\u00edm na \u00dastredie;<\/li>\n<li>vykon\u00e1vanie kontroly v\u00fdsledkov blokovania v s\u00falade so stanoven\u00fdm re\u017eimom;<\/li>\n<li>odoslanie spr\u00e1vy o vykonanej kontrole na \u00dastredie (s\u00fabor protokolu kontroly);<\/li>\n<li>mo\u017enos\u0165 kontroly funk\u010dnosti SPN oper\u00e1tora, t.j. kontrola dostupnosti zoznamu jednozna\u010dne dostupn\u00fdch str\u00e1nok;<\/li>\n<li>mo\u017enos\u0165 vykon\u00e1va\u0165 kontrolu v\u00fdsledkov blokovania pomocou proxy servera;<\/li>\n<li>mo\u017enos\u0165 vzdialen\u00e9ho aktualizovania softv\u00e9ru;<\/li>\n<li>mo\u017enos\u0165 vykon\u00e1vania diagnostick\u00fdch proced\u00far na SPN (\u010das odozvy, cesta prech\u00e1dzania paketov, r\u00fdchlos\u0165 s\u0165ahovania s\u00faborov z extern\u00e9ho zdroja, zis\u0165ovanie IP adries pre dom\u00e9nov\u00e9 men\u00e1, hodnota r\u00fdchlosti prij\u00edmania inform\u00e1ci\u00ed v sp\u00e4tnom kan\u00e1li v pevn\u00fdch pr\u00edstupov\u00fdch sie\u0165ach, koeficient str\u00e1t paketov, priemern\u00fd \u010das oneskorenia pri prenose paketov);<\/li>\n<li>v\u00fdkonnos\u0165 kontroly minim\u00e1lne 10 URL za sekundu za podmienky dostato\u010dnej \u0161\u00edrky p\u00e1sma;<\/li>\n<li>mo\u017enos\u0165 viacer\u00fdch po\u017eiadaviek agenta na zdroj (a\u017e 20-kr\u00e1t) s menite\u013enou frekvenciou od 1-kr\u00e1t za sekundu po 1-kr\u00e1t za min\u00fatu;<\/li>\n<li>mo\u017enos\u0165 vytvori\u0165 n\u00e1hodn\u00e9 poradie z\u00e1znamov zoznamu, ktor\u00fd je odoslan\u00fd na testovanie, a ur\u010di\u0165 prioritu pre konkr\u00e9tnu str\u00e1nku na internete.<\/li>\n<\/ul>\n<p>V\u0161eobecne \u0161trukt\u00fara vyzer\u00e1 takto:<\/p>\n<p><img decoding=\"async\" alt=\"Ako funguje blokovanie pr\u00edstupu na str\u00e1nky, ktor\u00e9 \u0161\u00edria zak\u00e1zan\u00fd obsah (teraz RKN kontroluje aj vyh\u013ead\u00e1va\u010de)\" src=\"\/wp-content\/uploads\/2019\/05\/929921c5bf30752239ab83a721a4dcd8.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Softv\u00e9rov\u00e9 a softv\u00e9rovo-hardwareov\u00e9 rie\u0161enia na filtrovanie internetovej prev\u00e1dzky (DPI rie\u0161enia) umo\u017e\u0148uj\u00fa oper\u00e1torom blokova\u0165 pr\u00edstup pou\u017e\u00edvate\u013eov na webov\u00e9 str\u00e1nky zo zoznamu RKN. \u010ci u\u017e ich blokuj\u00fa alebo nie, to overuje klient A\u0421 Revizor. Automaticky preveruje dostupnos\u0165 webovej str\u00e1nky pod\u013ea zoznamu RKN.<\/i><\/p>\n<p>Pr\u00edklad monitorovacieho protokolu je k dispoz\u00edcii <noindex><a rel=\"nofollow\" href=\"https:\/\/nag.ru\/upload\/article-files\/20161108-0001monitoring_protocol_15.pdf\">na odkaze<\/a><\/noindex>.<\/p>\n<p>Minul\u00fd rok Roskomnadzor za\u010dal testova\u0165 rie\u0161enia na blokovanie, ktor\u00e9 m\u00f4\u017ee oper\u00e1tor pou\u017ei\u0165 na realiz\u00e1ciu tohto sch\u00e9my. Citujem v\u00fdsledok tohto testovania:<\/p>\n<blockquote><p>\u201ePozit\u00edvne z\u00e1v\u00e4zky z\u00edskali \u0161pecializovan\u00e9 softv\u00e9rov\u00e9 rie\u0161enia \u201eUBIC\u201c, \u201eEcoFilter\u201c, \u201eSKAT DPI\u201c, \u201eTiksen-Blokovanie\u201c, \u201eSkyDNS Zapret ISP\u201c a \u201eCarbon Reductor DPI\u201c.<\/p>\n<p>Takisto bolo prijat\u00e9 z\u00e1v\u00e4zn\u00e9 stanovisko Roskomnadzoru, ktor\u00e9 potvrdzuje mo\u017enos\u0165 pou\u017e\u00edvania softv\u00e9ru \u201eZapretService\u201c oper\u00e1tormi komunik\u00e1ci\u00ed ako prostriedku na obmedzenie pr\u00edstupu k zak\u00e1zan\u00fdm zdrojom na internete. V\u00fdsledky testovania uk\u00e1zali, \u017ee pri in\u0161tal\u00e1cii pod\u013ea odpor\u00fa\u010danej v\u00fdrobcom sch\u00e9my pripojenia \u201edo preru\u0161enia\u201c a spr\u00e1vnom nastaven\u00ed siete oper\u00e1tora, po\u010det zisten\u00fdch poru\u0161en\u00ed pod\u013ea Jednotn\u00e9ho registra zak\u00e1zan\u00fdch inform\u00e1ci\u00ed nepresahuje 0,02%.<\/p>\n<p>Tak\u00fdm sp\u00f4sobom oper\u00e1tori komunik\u00e1ci\u00ed dostali mo\u017enos\u0165 vybra\u0165 si najvhodnej\u0161ie rie\u0161enie na obmedzenie pr\u00edstupu k zak\u00e1zan\u00fdm zdrojom, vr\u00e1tane zoznamu softv\u00e9rov\u00fdch produktov, ktor\u00e9 z\u00edskali kladn\u00e9 stanovisko Roskomnadzoru.<\/p>\n<p>Spolu s t\u00fdm v priebehu testovania softv\u00e9rov\u00e9ho produktu IdecoSelecta ISP, kv\u00f4li dlh\u00e9mu procesu jeho nasadenia a nastavenia, niektor\u00ed oper\u00e1tori nedok\u00e1zali za\u010da\u0165 testy v stanoven\u00fdch term\u00ednoch. U viac ako polovice oper\u00e1torov komunik\u00e1ci\u00ed, ktor\u00ed sa z\u00fa\u010dastnili testovania, nepresiahla doba testovacej prev\u00e1dzky Ideco Selecta ISP jeden t\u00fd\u017ede\u0148. Vzh\u013eadom na mal\u00fd objem z\u00edskan\u00fdch \u0161tatistick\u00fdch \u00fadajov a mal\u00e9 mno\u017estvo \u00fa\u010dastn\u00edkov testovania Roskomnadzor vo svojom ofici\u00e1lnom stanovisku uviedol, \u017ee nie je mo\u017en\u00e9 z\u00edska\u0165 jednozna\u010dn\u00e9 z\u00e1very o \u00fa\u010dinnosti produktu \u201eIdeco Selecta ISP\u201c ako prostriedku na obmedzenie pr\u00edstupu k zak\u00e1zan\u00fdm zdrojom na internete.<\/p><\/blockquote>\n<p>Dopln\u00edm, \u017ee v testovan\u00ed ka\u017ed\u00e9ho softv\u00e9rov\u00e9ho produktu sa z\u00fa\u010dastnilo a\u017e 27 oper\u00e1torov, ktor\u00ed predstavovali r\u00f4zne po\u010dty z\u00e1kazn\u00edkov z r\u00f4znych feder\u00e1lnych okruhov Ruskej feder\u00e1cie.<\/p>\n<p>S ofici\u00e1lnymi z\u00e1vermi z v\u00fdsledkov testovania sa m\u00f4\u017eete obozn\u00e1mi\u0165 <noindex><a rel=\"nofollow\" href=\"http:\/\/www.rkn.gov.ru\/communication\/p922\/\">tu<\/a><\/noindex>. V t\u00fdchto z\u00e1veroch takmer \u017eiadne technick\u00e9 inform\u00e1cie. O produkte \u201eIdeco Selecta ISP\u201c si m\u00f4\u017eete pre\u010d\u00edta\u0165, aby ste vedeli, ako to nie je spr\u00e1vne robi\u0165.<\/p>\n<p>Testovanie tento rok pokra\u010duje a v s\u00fa\u010dasnosti, pod\u013ea spr\u00e1v Roskomnadzoru, bol vybran\u00fd u\u017e jeden produkt a \u010fal\u0161ie 2 s\u00fa v bl\u00edzk\u00fdch pl\u00e1noch.<\/p>\n<h3>\u010co ak do\u0161lo k blokovaniu omylom?<\/h3>\n<p>\nNa z\u00e1ver by som chcel pripomen\u00fa\u0165, \u017ee Roskomnadzor \u201esa nem\u00fdli\u201c, \u010do potvrdzuje \u00dastavn\u00fd s\u00fad. <\/p>\n<p><i>Uznesenie, ktor\u00e9 fakticky zbavuje Roskomnadzor zodpovednosti za chybn\u00e9 blokovanie str\u00e1nok, bolo prijat\u00e9 v r\u00e1mci posudzovania s\u0165a\u017enosti v \u00dastavnom s\u00fade od riadite\u013ea asoci\u00e1cie internetov\u00fdch vydavate\u013eov Vladim\u00edra Charitonova. V \u0148om sa uv\u00e1dzalo, \u017ee v decembri 2012 Roskomnadzor omylom zablokoval jeho internetov\u00fa kni\u017enicu digital-books.ru. Ako vysvet\u013eoval p\u00e1n Charitonov, jeho zdroj bol na tej istej IP adrese ako port\u00e1l rastamantales(.)ru (teraz rastamantales(.)com), ktor\u00fd bol p\u00f4vodn\u00fdm objektom blokovania. Vladim\u00edr Charitonov sa pok\u00fasil v s\u00fadnom konan\u00ed napadn\u00fa\u0165 rozhodnutie Roskomnadzoru, ale v j\u00fani 2013 Tagansk\u00fd okresn\u00fd s\u00fad uznal blokovanie za z\u00e1konn\u00e9 a v septembri 2013 toto rozhodnutie potvrdil Moskovsk\u00fd mestsk\u00fd s\u00fad.<\/i><\/p>\n<p>Odtia\u013eto:<\/p>\n<blockquote><p>V Roskomnadzore \u201e\u042a\u201c vyhl\u00e1sili, \u017ee s\u00fa rozhodnut\u00edm \u00dastavn\u00e9ho s\u00fadu spokojn\u00ed. \u201e\u00dastavn\u00fd s\u00fad potvrdil, \u017ee Roskomnadzor pln\u00ed z\u00e1kon. Ak oper\u00e1tor nem\u00e1 technick\u00fa mo\u017enos\u0165 obmedzi\u0165 pr\u00edstup k jednotliv\u00fdm str\u00e1nkam webu, nie k jeho sie\u0165ovej adrese, tak to je zodpovednos\u0165 oper\u00e1tora,\u201c povedal \u201e\u042a\u201c hovorca \u00faradu.<\/p><\/blockquote>\n<p>\nT\u00e1to ot\u00e1zka je relevantn\u00e1 aj pre cloudov\u00fdch poskytovate\u013eov a hostingov\u00e9 spolo\u010dnosti, preto\u017ee podobn\u00e9 incidenty sa st\u00e1vali aj s nimi. V j\u00fani 2016 bol v Rusku zablokovan\u00fd cloudov\u00fd slu\u017eba Amazon S3, hoci do registra na po\u017eiadanie Feder\u00e1lnej da\u0148ovej slu\u017eby bola uveden\u00e1 len str\u00e1nka pokrov\u00e9ho roomu 888poker nach\u00e1dzaj\u00faca sa na jeho platforme. Zablokovanie cel\u00e9ho zdroja bolo sp\u00f4soben\u00e9 t\u00fdm, \u017ee Amazon S3 pou\u017e\u00edva zabezpe\u010den\u00fd protokol https, ktor\u00fd neumo\u017e\u0148uje zablokova\u0165 jednotliv\u00e9 str\u00e1nky. A\u017e po tom, \u010do samotn\u00fd Amazon odstr\u00e1nil str\u00e1nku, na ktor\u00fa mali rusk\u00e9 org\u00e1ny s\u0165a\u017enosti, bol zdroj vy\u0148at\u00fd z registra.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cloud4y\/blog\/347964\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0432\u044f\u0437\u0438, \u043e\u0442\u043c\u0435\u0442\u0438\u043c, \u0447\u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u0420\u043e\u0441\u043a\u043e\u043c\u043d\u0430\u0434\u0437\u043e\u0440 \u0437\u0430\u0439\u043c\u0435\u0442\u0441\u044f \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u043d\u0430\u0434 \u0440\u0430\u0431\u043e\u0442\u043e\u0439 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c. \u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0433\u043e\u0434\u0430 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d \u043f\u043e\u0440\u044f\u0434\u043e\u043a \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0438 \u043f\u0435\u0440\u0435\u0447\u0435\u043d\u044c \u043c\u0435\u0440\u043e\u043f\u0440\u0438\u044f\u0442\u0438\u0439 \u043f\u043e \u0441\u043e\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0439 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u044b\u0434\u0430\u0447\u0443 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0440\u0435\u0441\u0443\u0440\u0441\u0430\u0445, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d \u043d\u0430 \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438. \u0421\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u043f\u0440\u0438\u043a\u0430\u0437 \u0420\u043e\u0441\u043a\u043e\u043c\u043d\u0430\u0434\u0437\u043e\u0440\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":24825,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33073","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kak-rabotaet-blokirovka-dostupa-k-stranitsam-rasprostranyayushhim-zapreshhennyj-kontent-teper-rkn-proveryaet-i-poiskoviki\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u043c, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u043c \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0435\u043d\u0442 (\u0442\u0435\u043f\u0435\u0440\u044c \u0420\u041a\u041d \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0438 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u0438\u043a\u0438) | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kak-rabotaet-blokirovka-dostupa-k-stranitsam-rasprostranyayushhim-zapreshhennyj-kontent-teper-rkn-proveryaet-i-poiskoviki\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:50:35+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:50:35+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ako funguje blokovanie pr\u00edstupu na str\u00e1nky, ktor\u00e9 \u0161\u00edria zak\u00e1zan\u00fd obsah (teraz RKN kontroluje aj vyh\u013ead\u00e1va\u010de) | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kak-rabotaet-blokirovka-dostupa-k-stranitsam-rasprostranyayushhim-zapreshhennyj-kontent-teper-rkn-proveryaet-i-poiskoviki","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u043c, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u043c \u0437\u0430\u043f\u0440\u0435\u0449\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0435\u043d\u0442 (\u0442\u0435\u043f\u0435\u0440\u044c \u0420\u041a\u041d \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0438 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u0438\u043a\u0438) | ProHoster","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kak-rabotaet-blokirovka-dostupa-k-stranitsam-rasprostranyayushhim-zapreshhennyj-kontent-teper-rkn-proveryaet-i-poiskoviki","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:50:35+00:00","article:modified_time":"2019-10-31T18:50:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33073","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 13:51:33","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:01:02","updated":"2026-01-21 13:51:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/33073","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=33073"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/33073\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/24825"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=33073"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=33073"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=33073"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}