Ukuzibekela Mikrotik, ukudlulisela kunye RDP ftp port. Njani izibuko ukudlulisela in Mikrotik?

Kuba imizila brand Mikrotik port ukudlulisa luyafuneka ukwenza rhoqo. Noko ke, ngokuba abalawuli womnatha, kunye isicombululo umsebenzisi abangaqeqeshelwanga kule ngxaki kube nzima kakhulu. Le umyalelo emfutshane, emva koko ukuba kungenzeka ukuba afeze nayiphi ukusebenza kwalo hlobo lula, kunjalo, kufuneka nentwana lembandezelo.

Ukuzibekela Mikrotik nge zibuko phambili. Kutheni na oko?

Ngaphambi uzama ukuseta zendlela, kufuneka ibe kancinci kwimigaqo zamazibuko ukudlulisela, naphezu kukuba zonke ezi imisebenzi.

Ukuzibekela Mikrotik, ifakelwe ngokungagqibekanga, kangangokuba iikhompyutha kuthungelwano yangaphakathi okanye yangaphandle, iidilesi ze IP eyabelwe kwezinye ezinjengeetheminali, asikwazi ukubona. Isebenzisa ekuthiwa ulawulo azenza, xa umzila ngokwayo xa ufumana isicelo endaweni idilesi kumatshini, leyo eyenzelwe abakhe ngaphandle IP, nangona ivula zibuko efunekayo. Kubonakala ukuba zonke izixhobo enxulumene kwinethiwekhi, bona umzila kuphela, yaye phakathi ngokwabo ezingabonakaliyo.

Kulo mba, kwiimeko ezithile, kuba Mikrotik macebo ezibuko idluliselwa kuba belufuna uncedo olo. Amatyala zixhaphakileyo ziquka oku kulandelayo:

• Umbutho yokufikelela kude izixhobo kwi-network ngokusekelwe technologies RDP;
• wokudlala okanye FTP-server;
• umbutho ka yoontanga peer networks yaye ukuqwalasela nokusebenza ngokuchanekileyo abathengi komlanjana;
• ukufikelela khamera kunye neenkqubo yokuzonwabisa zokucupha evela ngaphandle nge-Internet.

Ukufikelela kwi kojongano lwe Web

Ngoku sele ukulungele. Mikrotik imizila phambili kumazibuko (i-RDP, i FTP, njl) luqala emnyango kwenkqubo yolawulo isixhobo ebizwa interface Web. Ke ukuba uninzi imizila eyaziwa ngokuba iidilesi standard esetyenziswa ngokuhlanganisa 192,168 ophela nge nokuba 0.1 okanye 1.1, apho olu khetho ukuba adlule.

Ukufikelela kwi web browser (best ukusebenzisa i-Internet Explorer standard) kwi bar dilesi emiselweyo indibanisela 192.168.88.1, entsimini wegama ningena admin, kwaye umtya lokugqitha idla kungashiywa kungenanto. Kwimeko yokuba ukungena ngenxa yesizathu esithile ivaliwe (i zendlela ababamkeli login) kufuneka wenze ngocwangcisa mveliso ngokucofa iqhosha okanye ukucima isixhobo ukusuka emandleni imizuzwana 10-15.

Useto jikelele nakoku

Login ekuveliseni interface. Ke kaloku, eyona nto ibalulekileyo Mikrotik port ukudlulisa isekelwe phezu ekudalweni ekuthiwa-ukuxolelwa imithetho umsebenzi bazimilise (i azenza spoofing IP-iidilesi efanayo, nto leyo okhankanywe ngentla).

Kwicandelo Izicwangciso Jikelele Firewall / NATED ungabona ukuba ulawulo sele apho. Kokuba imisiwe njenge iyibuyisele emiselweyo. Port ukudlulisa jikelele iquka ngokongeza nomthetho omtsha ngokunqakraza kwi icon kunye plus iqhosha, ngoko kuya kuba yimfuneko ukugcwalisa ezinye izicwangciso esisiseko emasimini.

Imizekelo amachweba ezisebenzisekayo

Ngoku makhe sihlolisise ezinye imizekelo yokusetyenziswa zamazibuko kunokwenzeka. Kuxhomekeka injongo leyo iya kusebenzisa ngamnye amaxabiso wavula zibuko kungaba:

• Torrent: TCP / 51413;
• Ssh: TCP / 22;
• Umncedisi SQL: TCP / 1433;
• Umncedisi WEB: TCP / 80;
• Telnet: TCP / 23;
• RDP: TCP / 3389;
• i SNMP: UDP / 161, njl

Ezi amaxabiso nje ukuba kusetyenziselwa phambili nganye kwezi zamazibuko.

imithetho Ukuyila kwaye ukhetho amanyathelo

Ngoku yenza i umthetho omtsha kwaye baqhubeka ukugcwalisa endle useto. Apha kufuneka ukuba silumke kakhulu kwaye uqhubeke koko uhlobo lokufikelela kuyimfuneko ukuze enze (ukusuka ngaphakathi ukuya ngaphandle okanye ngokuphendululekileyo).

Izicwangciso kufuneka ube:

• Chain: srcnat ezisetyenziswa ukufikelela kumnatha womsebenzi wobulali, ngoko ukuthetha, ukuze ihlabathi ngaphandle, dstnat - yokufumana womnatha wobulali nayo ngaphandle (khetha uguqulelo yesibini olungenayo);
• Src iidilesi endle. kunye DST. Shiya ingenanto;
• intsimi protocol khetha nokuba TCP, okanye UDP (idla imiselwe ku-6 (TCP);
• Src. Port kungashiywa kungenanto, ie, port ephumayo kuba uxhulumaniso yangaphandle ayibalulekanga;
• DST. Port (port of indawo): sisizibuko ukuba le mizekelo ingasentla (umz 51413 ngenxa yimisinga, 3389 ngenxa RDP, njl);
• Nawuphi Port kungashiywa kungenanto, kodwa ukuba ukhankanye inombolo, omnye izibuko iza kusetyenziswa njengendawo engenayo kunye ephumayo;
• In. Interface: ukuxuma izibuko le zendlela (idla ether1-yesango);
• Out. Interface: ibonisa elilujongano ephumayo (inokuba Idlule).

Qaphela: ukuba le phambili ezibuko unxibelelaniso ngaphandle (RDP) e src endle. Idilesi ibonisa ye IP ikhomputha ekude, ukusuka apho bekumele ukuba ukufikelela. Umgangatho RDP-uqhagamshelo izibuko 3389. Nangona kunjalo, iingcali ezininzi izinto ezinjalo akunconywa, njengo kuba ikhuseleke kakhulu kwaye kulula ukuqwalasela kwi VPN umzila.

nezenzo Ngaphezu koko, le zendlela Mikrotik izibuko ukudlulisa kubandakanya ngokukhetha (Action). Eneneni, akukho nto ngokwaneleyo ukuba ukhankanye zontathu iparameters:

• Action: ukwamkela (indlela elula), kodwa ukufikelela ngaphandle elikhankanyiweyo DST-nat (ungakhankanya phambili ngakumbi izicwangciso netmap);
• To Iidilesi: ukulingana idilesi lwangaphakathi umatshini apho kufuneka kwakhona liya kwenzeka;
• To Ports: ngokubanzi, nexabiso elichazwa imiselwe ku-80, kodwa ngenxa ukusebenza oluchanekileyo komlanjana efanayo kubonisiwe 51413.

Ukuzibekela Mikrotik: FTP port ukudlulisa

Okokugqibela, kukho amagama ambalwa malunga useto olufuneka FTP. Okokuqala, kufuneka ukuba uqwalasele ngokwayo FTP-server, umzekelo, ngokusekelwe FileZilla, kodwa ibali eyahlukileyo. Kulo mzekelo, banomdla kakhulu kokuthumela FTP Mikrotik kumazibuko, kunokuba uqwalaselo lomncedisi-icala thina.

Kukholelwa FTP-server, nangona ifuna iintlobo ezithile zamazibuko, kodwa kakhulu ngokuqhelekileyo osebenza ulawulo zibuko 21. Kuyimfuneko ukuba ukuyisebenzisa.

Njengokuba kunjalo jikelele, kufuneka uqale wenze umthetho omtsha, kodwa kule meko, kuya kubakho ezimbini: ukulawula izibuko kunye lonke uluhlu zamazibuko.

Kuba port 21 parameters kufuneka:

• Chain: DST-sibiza;
• DST. Idilesi: idilesi yangaphandle le zendlela (umz, 1.1.1.28);
• Protocol: 6 (TCP);
• DST. Port: 21
• In. Aplikheyishini: ether1-yesango.

Kuba Action tab, wabeka zithethe zixabisekileyo zilandelayo:

• Action: DST-sibiza;
• DST. Idilesi: idilesi ukuphela kwe FTP umncedisi ifakiwe;
• To Ports: 21.

Kuba lomqolo (umz, 50000-50050) zonke iinketho ezifanayo, ngaphandle parameters ezimbini:

• kwi Useto jikelele ye-DST. Port ikhankanya iintlobo ngokupheleleyo zamazibuko;
• xa ukhetha uluhlu efanayo amanyathelo ungena endle To Ports.

Qaphela ukuba xa u kumisa ukudlulisela i FTP kufuneka silandele ngamaxwebhu zendlela, kwaye ithi ukuba akukho Kucetyiswa ukuba basebenzise umbundu lokuqala uluhlu lezibuko lingangaphantsi kwexabiso ka 1024. Eli xesha, kakhulu, kubalulekile ingqalelo.

Enyanisweni, ungakwazi ukusebenzisa umsebenzi jiko NATED Mikrotik, kodwa kuyimfuneko kuphela kwiimeko apho igalelo efunekayo ukuze IP lwangaphandle kwi LAN. Ngokubanzi, akukho mfuneko yokuba uyisebenzise.