{"id":52438,"date":"2019-11-08T00:00:00","date_gmt":"2019-11-07T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/udp-flood-ot-google-ili-kak-ne-lishit-vseh-youtube"},"modified":"2020-02-18T14:00:09","modified_gmt":"2020-02-18T11:00:09","slug":"udp-flood-ot-google-ili-kak-ne-lishit-vseh-youtube","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/udp-flood-ot-google-ili-kak-ne-lishit-vseh-youtube","title":{"rendered":"UDP Flood nga Google ose si t\u00eb mos privoni t\u00eb gjith\u00eb Youtube","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb mbr\u00ebmje t\u00eb bukur pranvere, kur nuk doja t\u00eb kthehesha n\u00eb sht\u00ebpi, dhe d\u00ebshira e pandalshme p\u00ebr t\u00eb jetuar dhe njohur m\u00eb shum\u00eb m\u00eb shkonte p\u00ebrmes si nj\u00eb \u00e7elik i nxeht\u00eb, m\u00eb erdhi n\u00eb mendje ideja p\u00ebr t\u00eb hetuar nj\u00eb karakteristik\u00eb t\u00ebrheq\u00ebse n\u00eb firewall me emrin «Politika IP DOS<\/b>«.
\nPas disa p\u00ebrgatitjeve dhe njohjes me manualin, e konfigurova n\u00eb modin Pass-and-Log<\/b>, p\u00ebr t\u00eb par\u00eb n\u00eb p\u00ebrgjith\u00ebsi daljen dhe dobin\u00eb e dyshimt\u00eb t\u00eb k\u00ebsaj konfigurimi.
\nPas disa dit\u00ebsh (q\u00eb t\u00eb mbledh statistik\u00ebn, natyrisht, jo sepse e kisha harruar), shqyrtova loget dhe, duke p\u00ebrdorur duar, duke l\u00ebkundur vendin, aplika duar \u2014 ishin grumbulluar aq shum\u00eb sh\u00ebnime sa q\u00eb ishin sa p\u00ebr t\u00eb mos u prishur. Duket, \u00e7far\u00eb \u00ebsht\u00eb m\u00eb e leht\u00eb \u2014 aktivizo politik\u00ebn p\u00ebr t\u00eb bllokuar t\u00eb gjith\u00eb ata q\u00eb d\u00ebrgojn\u00eb, skanojn\u00eb, vendosin half-open<\/b> seancat me ndalim p\u00ebr nj\u00eb or\u00eb dhe flej rehat duke ditur se kufiri \u00ebsht\u00eb i mbyllur. Por, n\u00eb vitin 34 t\u00eb jet\u00ebs, kalova maksimalizmin rinor dhe diku n\u00eb pjes\u00ebn e pasme t\u00eb trurit tim u d\u00ebgjua nj\u00eb z\u00eb i holl\u00eb: \"Pse t\u00eb mos e hapim syt\u00eb dhe t\u00eb shohim se cilat adresat i ka quajtur firewalli yn\u00eb si d\u00ebrgues t\u00eb keq? Po, thjesht nga kurioziteti.\"
\n<\/a><\/noindex>
\nFillojm\u00eb analizimin e t\u00eb dh\u00ebnave t\u00eb marra nga lista e anomalive. I kaloj adresat p\u00ebrmes nj\u00eb skripti t\u00eb thjesht\u00eb Powershell<\/b> dhe syt\u00eb mi bien mbi shkronjat e njohura google<\/b>. <\/p>\n

\"UDP
\n
\nT\u00eb trerri syt\u00eb, e kap\u00ebrcej p\u00ebr pes\u00eb minuta, p\u00ebr t'u siguruar q\u00eb nuk po imagjinoja \u2014 me t\u00eb v\u00ebrtet\u00eb n\u00eb list\u00ebn e atyre q\u00eb firewalli e konsideroi si nj\u00eb d\u00ebrgues t\u00eb keq, lloji i sulmit \u2014 ujd\u00eb flood<\/b>, adresat q\u00eb i p\u00ebrkasin korporat\u00ebs s\u00eb mir\u00eb. <\/p>\n

\"UDP
\n\"UDP
\n\"UDP
\n\"UDP
\n
\nG\u00ebrvishtem n\u00eb qaf\u00eb, duke konfiguruar n\u00eb nd\u00ebrfaqen e jashtme kapjen e paketave p\u00ebr analiz\u00eb t\u00eb m\u00ebvonshme. N\u00eb mendjen time kalojn\u00eb mendime me ngjyra: \"Si \u00ebsht\u00eb e mundur q\u00eb di\u00e7ka e infektuar \u00ebsht\u00eb n\u00eb skopin e Google? Dhe un\u00eb e zbulova k\u00ebt\u00eb? Ky \u00ebsht\u00eb, ky \u00ebsht\u00eb \u2014 \u00e7mime, nderime dhe tapishe e kuqe, dhe kazino ime me blackjack dhe, e kuptoni...\"<\/p>\n

Shkarkoj skedarin e marr\u00eb Wireshark<\/b>-it.
\nPo, sakt\u00ebsisht nga adresa e skopit Google <\/b>d\u00ebbohen paketa UDP nga porta 443 n\u00eb nj\u00eb port t\u00eb rast\u00ebsish\u00ebm n\u00eb pajisjen time.
\nPor, prisni e... Ja, protokolli nd\u00ebrron nga UDP<\/b> n\u00eb GQUIC<\/b>.
\nSemyon Semyonovich...<\/p>\n

\"UDP
\n
\nMenj\u00ebher\u00eb m\u00eb vijn\u00eb n\u00eb mendje p\u00ebrvoja nga HighLoad <\/b>Aleksand\u00ebr Tobolja<\/u> «UDP<\/b> kund\u00ebr TCP<\/b> apo e ardhmja e stak\u00ebs s\u00eb rrjetit» (link<\/a><\/noindex>).
\nNga nj\u00ebra an\u00eb, ndjej nj\u00eb zhg\u00ebnjim t\u00eb leht\u00eb \u2014 as lavda, as nderime. Nga ana tjet\u00ebr, problemi \u00ebsht\u00eb i qart\u00eb, mbetet t\u00eb kuptoj se ku dhe sa thell\u00eb duhet t\u00eb veproj.
\nNj\u00eb bised\u00eb prej disa minutash me Korporat\u00ebn e Mir\u00ebsis\u00eb \u2014 dhe gjith\u00e7ka vendoset n\u00eb vendin e saj. N\u00eb p\u00ebrpjekje p\u00ebr t\u00eb p\u00ebrmir\u00ebsuar shpejt\u00ebsin\u00eb e dor\u00ebzimit t\u00eb p\u00ebrmbajtjes, kompania Google <\/b>ende n\u00eb vitin 2012 shpalli protokollin QUIC<\/b>, i cili lejon eliminimin e shumic\u00ebs s\u00eb t\u00eb metave t\u00eb TCP (po, po, n\u00eb k\u00ebto artikuj \u2014 Prrrraz<\/a><\/noindex><\/b> dhe Dy<\/a><\/noindex><\/b> flitet p\u00ebr nj\u00eb qasje krejt\u00ebsisht revolucionare, por, t\u00eb jemi t\u00eb sinqert\u00eb, do t\u00eb d\u00ebshironim q\u00eb fotot me mace t\u00eb ngarkoheshin m\u00eb shpejt, e jo gjitha k\u00ebto revolucionet e nd\u00ebrgjegjes dhe progresit). Si\u00e7 e tregoi hulumtimi m\u00eb tej, shum\u00eb organizata tani po kalojn\u00eb n\u00eb nj\u00eb variant t\u00eb till\u00eb t\u00eb d\u00ebrgimit t\u00eb p\u00ebrmbajtjes.
\nProblemi n\u00eb rastin tim dhe, mendoj, jo vet\u00ebm n\u00eb rastin tim, doli t\u00eb ishte q\u00eb paketat n\u00eb fund shkojn\u00eb shum\u00eb e shum\u00eb dhe firewal e percepton at\u00eb si spam.
\nOpsionet e zgjidhjes jan\u00eb pak:
\n1. Shtoni n\u00eb list\u00ebn e p\u00ebrjashtimeve p\u00ebr Politik\u00ebn DoS<\/b> n\u00eb firewal me skopin e adresave Google<\/b>. Me vet\u00ebm mendimin p\u00ebr gam\u00ebn e mundshme t\u00eb adresave, syri filloi t\u00eb shk\u00eblqej\u00eb nervozisht \u2014 ideja u shty si e \u00e7mendur.
\n2. Rritni pragun e aktivizimit p\u00ebr politik\u00ebn e flood-it udp<\/b> \u2014 gjithashtu, nuk \u00ebsht\u00eb aspak e mir\u00eb, dhe n\u00ebse ndonj\u00ebri \u00ebsht\u00eb me t\u00eb v\u00ebrtet\u00eb keqdash\u00ebs, ai mund t\u00eb kaloj\u00eb.
\n3. Ndaloni k\u00ebrkesat nga rrjeti i brendsh\u00ebm n\u00eb UDP <\/b>n\u00eb 443 <\/b>portin jasht\u00eb.
\nPas leximit shtes\u00eb n\u00eb lidhje me implementimin dhe integrimin QUIC <\/b>n\u00eb Google Chrome<\/b> u pranuar si nj\u00eb udh\u00ebzim p\u00ebr veprim varianti i fundit. E v\u00ebrteta \u00ebsht\u00eb se, i dashuri nga t\u00eb gjith\u00eb dhe pa m\u00ebshir\u00eb (nuk kuptoj p\u00ebrse, m\u00eb mir\u00eb do t\u00eb ishte q\u00eb fytyra me ngjyr\u00eb portokalli Firefox<\/b>-ovska t\u00eb merrte p\u00ebr gigabajt\u00ebt e konsumuar t\u00eb RAM-it), Google Chrome<\/b> fillimisht p\u00ebrpiqet t\u00eb vendos\u00eb lidhjen duke p\u00ebrdorur t\u00eb vetmen e tij t\u00eb p\u00ebsuar QUIC<\/b>, por n\u00ebse nuk ndodhin mrekulli, kthehet te metodat e njohura si TLS<\/b>, megjith\u00ebse ndihet jasht\u00ebzakonisht keq p\u00ebr k\u00ebt\u00eb. <\/p>\n

Krijojm\u00eb n\u00eb firewal nj\u00eb regjistrim p\u00ebr sh\u00ebrbimin QUIC<\/b>:<\/p>\n

\"UDP
\n
\nKonfiguroni nj\u00eb rregull t\u00eb ri dhe vendoseni diku m\u00eb lart n\u00eb zinxhir.<\/p>\n

\"UDP
\n
\nPas aktivizimit t\u00eb rregull\u00ebs, n\u00eb list\u00ebn e anomalis\u00eb nuk kishte asnj\u00eb trazir\u00eb, p\u00ebrve\u00e7 disa shkel\u00ebsve v\u00ebrtet keqdash\u00ebs.<\/p>\n

\"UDP
\n
\nFalemnderit t\u00eb gjith\u00eb p\u00ebr v\u00ebmendjen.<\/p>\n

Burimet e p\u00ebrdorura:<\/b><\/u>
\n1.Raporti i Aleksand\u00ebr Tobilit<\/a><\/noindex>
\n2.P\u00ebrshkrimi i protokollit QUIC nga kompania Infopuls<\/a><\/noindex>
\n3.Wikipedia<\/a><\/noindex>
\n4. KB nga Fortinet<\/a><\/noindex>
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u0434\u043d\u0438\u043c \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u044b\u043c \u0432\u0435\u0441\u0435\u043d\u043d\u0438\u043c \u0432\u0435\u0447\u0435\u0440\u043e\u043c, \u043a\u043e\u0433\u0434\u0430 \u0438\u0434\u0442\u0438 \u0434\u043e\u043c\u043e\u0439 \u043d\u0435 \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c, \u0430 \u043d\u0435\u0443\u0435\u043c\u043d\u043e\u0435 \u0436\u0435\u043b\u0430\u043d\u0438\u0435 \u0436\u0438\u0442\u044c \u0438 \u043f\u043e\u0437\u043d\u0430\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0440\u0431\u0438\u043b\u043e \u0438 \u0436\u0433\u043b\u043e \u0430\u043a\u0438 \u043a\u0430\u043b\u0435\u043d\u044b\u043c \u0436\u0435\u043b\u0435\u0437\u043e\u043c, \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0438\u0434\u0435\u044f \u043f\u043e\u043a\u043e\u0432\u044b\u0440\u044f\u0442\u044c \u0437\u0430\u043c\u0430\u043d\u0447\u0438\u0432\u0443\u044e \u043f\u0440\u0438\u0431\u043b\u0443\u0434\u0443 \u0444\u0438\u0447\u0443 \u043d\u0430 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0435 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c «IP DOS policy«. \u041f\u043e\u0441\u043b\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043b\u0430\u0441\u043e\u043a \u0438 \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0441 \u043c\u0430\u043d\u0443\u0430\u043b\u043e\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 Pass-and-Log, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432\u043e\u043e\u0431\u0449\u0435 \u043d\u0430 \u0432\u044b\u0445\u043b\u043e\u043f \u0438 \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-52438","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47UDP Flood nga Google ose si t\u00eb mos lirohen t\u00eb gjith\u00eb nga Youtube | ProHoster","description":"N\u00eb nj\u00eb mbr\u00ebmje t\u00eb bukur pranverore, kur s'kishte d\u00ebshir\u00eb t\u00eb kthehesha n\u00eb sht\u00ebpi dhe d\u00ebshira e pandalshme p\u00ebr t\u00eb jetuar dhe njohur m\u00eb shum\u00eb m\u00eb brente si hekuri i nxeht\u00eb, lindi ideja p\u00ebr t\u00eb eksperimentuar me nj\u00eb karakteristik\u00eb t\u00ebrheq\u00ebse n\u00eb firewall quhej.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/udp-flood-ot-google-ili-kak-ne-lishit-vseh-youtube","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47UDP Flood \u043e\u0442 Google \u0438\u043b\u0438 \u043a\u0430\u043a \u043d\u0435 \u043b\u0438\u0448\u0438\u0442\u044c \u0432\u0441\u0435\u0445 Youtube | ProHoster","og:description":"\u041e\u0434\u043d\u0438\u043c \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u044b\u043c \u0432\u0435\u0441\u0435\u043d\u043d\u0438\u043c \u0432\u0435\u0447\u0435\u0440\u043e\u043c, \u043a\u043e\u0433\u0434\u0430 \u0438\u0434\u0442\u0438 \u0434\u043e\u043c\u043e\u0439 \u043d\u0435 \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c, \u0430 \u043d\u0435\u0443\u0435\u043c\u043d\u043e\u0435 \u0436\u0435\u043b\u0430\u043d\u0438\u0435 \u0436\u0438\u0442\u044c \u0438 \u043f\u043e\u0437\u043d\u0430\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0440\u0431\u0438\u043b\u043e \u0438 \u0436\u0433\u043b\u043e \u0430\u043a\u0438 \u043a\u0430\u043b\u0435\u043d\u044b\u043c \u0436\u0435\u043b\u0435\u0437\u043e\u043c, \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0438\u0434\u0435\u044f \u043f\u043e\u043a\u043e\u0432\u044b\u0440\u044f\u0442\u044c \u0437\u0430\u043c\u0430\u043d\u0447\u0438\u0432\u0443\u044e \u043f\u0440\u0438\u0431\u043b\u0443\u0434\u0443 \u0444\u0438\u0447\u0443 \u043d\u0430 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0435 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/udp-flood-ot-google-ili-kak-ne-lishit-vseh-youtube","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-07T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52438","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 03:36:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:43:24","updated":"2026-01-24 03:36:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/52438","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=52438"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/52438\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=52438"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=52438"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=52438"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}