Ukuskena kwezibuko kukhokelele ekuvalweni kwe-subnet ngumboneleli ngenxa yokufakwa kuluhlu lwe-UCEPROTECT

UVincent Canfield, umlawuli we-imeyile kunye nokusingatha umthengisi cock.li, wafumanisa ukuba inethiwekhi yakhe yonke ye-IP yongezwa ngokuzenzekelayo kwi-UCEPROTECT DNSBL uluhlu lokukhangela i-port evela koomatshini abasondeleyo. I-subnet yeVincent ifakwe kuluhlu lweNqanaba le-3, apho ukuvinjelwa kuqhutyelwa ngamanani enkqubo yokuzimela kunye nokugubungela ii-subnets ezipheleleyo apho i-spam detectors yaqhutyelwa ngokuphindaphindiweyo kunye needilesi ezahlukeneyo. Ngenxa yoko, umboneleli we-M247 ukhubaze intengiso yomnye wothungelwano kwi-BGP, ukumisa ngokufanelekileyo inkonzo.

Ingxaki kukuba iiseva ze-UCEPROTECT ezikhohlisayo, ezizenza ngathi zivulekileyo kunye neenzame zokuthumela i-imeyile ngokwazo, zibandakanya ngokuzenzekelayo iidilesi kuluhlu lwebhlokhi ngokusekelwe kuwo nawuphi na umsebenzi womnatha, ngaphandle kokujonga ukusekwa koqhagamshelwano lwenethiwekhi. Indlela efanayo yoluhlu lwebhloko ikwasetyenziswa yiprojekthi yeSpamhaus.

Ukungena kuluhlu lokuthintela, kwanele ukuthumela ipakethe enye ye-TCP SYN, enokuthi isetyenziswe ngabahlaseli. Ngokukodwa, ekubeni ukuqinisekiswa kweendlela ezimbini zokudityaniswa kwe-TCP akufunwa, kunokwenzeka ukusebenzisa i-spoofing ukuthumela ipakethe ebonisa idilesi ye-IP yenkohliso kwaye uqalise ukungena kwi-block list of any host host. Xa ulinganisa umsebenzi ovela kwiidilesi ezininzi, kunokwenzeka ukunyuka ukubhloka kwiNqanaba lesi-2 kunye neNqanaba 3, elenza ukuvinjelwa nge-subnetwork kunye namanani enkqubo yokuzimela.

Uluhlu lweNqanaba lesi-3 lwenziwe ekuqaleni ukulwa nababoneleli abakhuthaza umsebenzi okhohlakeleyo wabathengi kwaye abaphenduli kwizikhalazo (umzekelo, ukusingathwa kweesayithi ezidalwe ngokukodwa ukusingatha umxholo ongekho mthethweni okanye ukusebenzela abathumeli bomyalezo we-spammers). Kwiintsuku ezimbalwa ezedlulileyo, i-UCEPROTECT yatshintsha imigaqo yokungena kwiNqanaba lesi-2 kunye neNqanaba le-3 izintlu, ezikhokelela ekuhlungeni okunamandla kunye nokunyuka kobukhulu bezintlu. Umzekelo, inani lamangenelo kuluhlu lweNqanaba lesi-3 likhule ukusuka kuma-28 ukuya kuma-843 kwiinkqubo ezizimeleyo.

Ukuchasana ne-UCEPROTECT, ingcamango yabekwa phambili ekusebenziseni iidilesi ezikhohlakeleyo ngexesha lokuskena ebonisa ii-IP ukusuka kuluhlu lwabaxhasi be-UCEPROTECT. Ngenxa yoko, i-UCEPROTECT ifake iidilesi zabaxhasi bayo kunye nabanye abantu abaninzi abamsulwa kwiinkcukacha zayo, ezidale iingxaki ngokuhanjiswa kwe-imeyile. Inethiwekhi ye-Sucuri CDN nayo yafakwa kuluhlu lokuthintela.

umthombo: opennet.ru

Yongeza izimvo