Baaraha Dekadaha TCP & Proxy ee Khadka
Updated:
Kahor intaadan xallin xaqiijinta proxy-ga (407) ama khaladaadka habeynta biraawsarka, xaqiiji in dekadda TCP ee server-ka fog runtii laga gaari karo internet-ka dadweynaha. Geli IP dadweyne ama hostname kasta iyo ilaa 8 dekadood oo TCP ah xagga sare si aad u cabbirto daaha dhabta ah ee gacan-qaadka saddex-geesoodka ah ee TCP (SYN → SYN-ACK).
Tixraaca Dekadaha Caadiga ah ee TCP ee Proxy & Server
Barnaamijyada kala duwan ee proxy-yada (Squid, 3proxy, Dante, HAProxy, Nginx) iyo adeegyada server-ku waxay ka dhagaystaan dekadaha caadiga ah ama kuwa heerka sare ah ee TCP:
| Dekadda(ha) TCP | Borotokooska / Adeegga Caadiga ah | Isticmaalka Caadiga ah ee Proxy & Server |
|---|---|---|
8080, 3128, 8888 | HTTP / HTTPS CONNECT Proxy | Dekadaha caadiga ah ee Squid, 3proxy, iyo marinnada HTTP(S) ee VinaProxy |
1080, 1081 | SOCKS4 / SOCKS5 Proxy | Dekadaha caadiga ah ee dhagaysiga ee Dante iyo tabiyeyaasha SOCKS5 |
80, 443 | HTTP / TLS Web Server | Server-yada shabakadda, proxy-yada rogan, iyo dhagaystayaasha proxy ee ku habboon firewall-ka |
10000–60000 | Dekadaha Heerka Sare ee Khaaska ah | Waxaa loo qoondeeyay qoondaynta gaarka ah ee proxy-yada static IPv4 & ISP |
Baarista 'Connection Refused' iyo 'Timeout'
- OPEN (oo leh daaha ms): Qalabka fog wuxuu aqbalay baakaddayada TCP
SYNwuxuuna soo celiyaySYN-ACK—barnaamijka proxy-ga ama adeeggu si firfircoon ayuu wax u dhagaysanayaa. - CLOSED (
refused): IP-ga martida loo yahay wuu online yahay, laakiin waxba kama dhagaysanayaan dekaddaas (ama xeerkaiptables REJECTayaa soo diray baakadRSTah). - CLOSED (
timeout): Firewall (AWS Security Group, UFW, Cloudflare, ama shaandhada ISP) ayaa si aamusnaan ah u tuuray baakaddaSYNka hor inta aysan gaarin arjiga.
Tallaabo-tallaabo
- 1
Geli IP-ga dadweynaha ee la beegsanayo ama hostname-ka
Ku dheji IP-ga server-kaaga proxy ama VPS hostname gudaha goobta 'Target Public IP'.
- 2
Xaqiiji ilaa 8 dekadood oo TCP ah
Qor lambarrada dekadaha oo ay hakad ku kala dhexeyso (tusaale,
80, 443, 1080, 3128, 8080ama dekadda gaarka ah ee laguu qoondeeyay ee proxy-ga). - 3
Guji 'Check Ports' si aad u sameyso baaris toos ah oo TCP ah
Server-kayagu wuxuu dekad kasta ku bilaabayaa xiriir dhab ah oo TCP socket ah iyadoo la adeegsanayo ilaalinta adag ee SSRF.
- 4
Kormeer xaaladda Open/Closed iyo RTT ee gacan-qaadka
Haddii dekaddu tahay OPEN laakiin proxy-gaagu weli ku guuldareysto biraawsarka, ku xaqiiji aqoonsigaaga
username:passwordgudaha Proxy Checker-kayaga.
Su'aalaha inta badan la isweydiiyo
Waa maxay farqiga u dhexeeya Port Checker-kan iyo Proxy Checker-ka?
Port Checker-ku wuxuu tijaabiyaa gaaridda Layer 4 TCP (SYN / SYN-ACK) ee dekad kasta iyadoo aan la dirin xogta aqoonsiga proxy-ga. Proxy Checker wuxuu tijaabiyaa xaqiijinta Layer 7 proxy (HTTP CONNECT ama SOCKS5) wuxuuna xaqiijiyaa IP-ga bixitaanka.
Waa maxay sababta uu Port Checker-ku u xannibaa cinwaannada `127.0.0.1` ama `192.168.x.x`?
Sababo dhanka amniga ah dartood (ilaalinta SSRF), server-kayagu wuxuu wacayaa oo kaliya cinwaannada internet-ka dadweynaha ee unicast (isPublicIp), wuxuuna diidayaa loopback, LAN gaar ah oo RFC1918 ah, iyo xadka link-local.
Waa maxay sababta dekaddaydu halkan uga tahay OPEN, laakiin looga gaari karin Wi-Fi-ga xafiiskayga?
Shabakadaha Wi-Fi ee shirkadaha, jaamacadaha, ama hoteellada waxay inta badan xannibaan xiriirrada dibadda u baxaya ee ku socda dekadaha sare ee aan caadiga ahayn (sida 3128 ama 30000+). Isku day inaad beddesho shabakadda ama aad isticmaasho proxy wax ka dhagaysanaya dekad caadi ah.
Kaga Baxsow Madax-xanuunka Firewall-ka Server-ka Proxy-yo Diyaar ah
Proxy-yada degdegga ah ee HTTP(S) ee Dedicated IPv4 iyo Static ISP oo 24/7 lagula socdo 7 waddan.
Iibso Proxy-yo Degdeg ah