Igenzura ryo kuri Murandasi ry'Ibyambu bya TCP na Porogisi

Updated: 2026-11-05

Mbere yo gukemura ibibazo by'imyemerere ya porogisi (407) cyangwa amakosa y'imiterere ya mushakisha, banza ugenzure niba icyambu cya TCP cya seriveri ya kure kigerwaho binyuze kuri murandasi rusange. Shyiramo IP rusange cyangwa izina ry'ububiko (hostname) n'ibyambu bya TCP bigera ku 8 hejuru kugira ngo upime ubukererwe nyakuri bwa TCP three-way handshake (SYN → SYN-ACK).

Irinde Imvune za Firewall ya Seriveri Ukoresheje Porogisi Ziteguye Gukoreshwa

Gura Porogisi Ako Kanya Free Proxy Checker

Quick Presets:

Ibyambu bya TCP Bikunze Gukoreshwa kuri Porogisi na Seriveri

Porogisi zitandukanye (Squid, 3proxy, Dante, HAProxy, Nginx) na serivisi za seriveri zitegereza ku byambu bya TCP bisanzwe cyangwa ibyo mu nzego zo hejuru:

Icyambu/Ibyambu bya TCP	Porotokole / Serivisi Isanzwe	Imikoreshereze Isanzwe ya Porogisi na Seriveri
`8080`, `3128`, `8888`	Porogisi ya HTTP / HTTPS CONNECT	Ibyambu bisanzwe bya Squid, 3proxy, n'amarembo ya VinaProxy HTTP(S)
`1080`, `1081`	Porogisi ya SOCKS4 / SOCKS5	Ibyambu bisanzwe byo gutegerezaho bya Dante n'ihererekanya rya SOCKS5
`80`, `443`	Seriveri ya Rubuga ya HTTP / TLS	Seriveri z'urubuga, porogisi zisubira inyuma, n'ibitegereza porogisi byorohereza firewall
`10000–60000`	Ibyambu Byeguriwe Byo mu Rwego rwo Hejuru	Byagenewe porogisi zihariye zidahinduka za IPv4 & ISP

Gusuzuma Itandukaniro rya 'Connection Refused' na 'Timeout'

OPEN (hamwe n'ubukererwe muri ms): Seriveri ya kure yakiriye paki yacu ya TCP SYN maze igarura SYN-ACK—porogisi cyangwa serivisi irimo gutegereza mu buryo bukora.
CLOSED (refused): IP ya seriveri iri ku murongo, ariko nta kintu kigitegereje kuri icyo cyambu (cyangwa itegeko rya iptables REJECT ryohereje paki ya RST).
CLOSED (timeout): Firewall (AWS Security Group, UFW, Cloudflare, cyangwa akayunguruzo ka ISP) yajugunye paki ya SYN bucece mbere y'uko igera kuri porogaramu.

Intambwe ku yindi

1
Injiza IP rusange y'intego cyangwa izina ry'ububiko (hostname)
Koporora IP ya seriveri yawe ya porogisi cyangwa izina rya VPS (hostname) mu mwanya wa 'Target Public IP'.
2
Garagaza ibyambu bya TCP bigera ku 8
Andika nimero z'ibyambu bitandukanijwe n'akabande (urugero, 80, 443, 1080, 3128, 8080 cyangwa icyambu cyihariye cyawe cyagenwe cya porogisi).
3
Kanda 'Check Ports' kugira ngo ukore isuzuma rya TCP ako kanya
Seriveri yacu itangiza ihuza nyakuri rya soketi ya TCP kuri buri cyambu ifite uburinzi bukomeye bwa SSRF.
4
Suzuma imiterere ya Open/Closed n'igihe cya RTT mu ihuzankono
Niba icyambu kiri OPEN ariko porogisi yawe igakomeza kwanga muri mushakisha, genzura amakuru yawe yo kwinjira ya username:password muri Proxy Checker yacu.

Ibibazo bikunze kubazwa

Ese itandukaniro riri hagati y'iki Kigenzura Ibyambu na Proxy Checker ni irihe?

Iki Kigenzura Ibyambu gisuzuma niba Layer 4 TCP igerwaho (SYN / SYN-ACK) kuri buri cyambu hatoherejwe amakuru y'imyemerere ya porogisi. Proxy Checker isuzuma imyemerere ya porogisi ya Layer 7 (HTTP CONNECT cyangwa SOCKS5) ikagenzura n'aderesi IP isohokeraho.

Kuki Igenzura ry'Ibyambu rikumira aderesi za `127.0.0.1` cyangwa `192.168.x.x`?

Kugira ngo habe umutekano (uburinzi bwa SSRF), seriveri yacu ihamagara gusa aderesi za murandasi rusange za unicast (isPublicIp) kandi ikanga loopback, LAN yiteganyirijwe ya RFC1918, n'inzego za link-local.

Kuki icyambu cyange kiri OPEN hano, ariko ntikigerweho kuri Wi-Fi y'ibiro byange?

Imiyoboro ya Wi-Fi y'ibigo, za kaminuza, cyangwa hoteli ikunze gukumira ihuza ryoherezwa hanze ku byambu byo hejuru bidasanzwe (nka 3128 cyangwa 30000+). Gerageza guhindura umuyoboro cyangwa ukoreshe porogisi itegereza ku cyambu gisanzwe.