紧张处理“永恒之蓝”进攻
|
以下内容是基于较为风行的收集装备，举例声名怎样设置 ACL 法则，以榨取TCP 445 收集端口传输，仅供各人参考。在现实操纵中，请和谐收集打点职员或收集装备厂商处事职员，按照现实收集情形在焦点收集装备长举办设置。 Juniper 装备的提议设置(示例): set firewall family inet filter deny-wannacry term deny445 from protocol tcp set firewall family inet filter deny-wannacry term deny445 from destination-port 445 set firewall family inet filter deny-wannacry term deny445 then discard set firewall family inet filter deny-wannacry term default then accept #在全局应用法则 set forwarding-options family inet filter output deny-wannacry set forwarding-options family inet filter input deny-wannacry #在三层接口应用法则 set interfaces [ 必要挂载的三层端口名称 ] unit 0 family inet filter output deny-wannacry set interfaces [ 必要挂载的三层端口名称 ] unit 0 family inet filter input deny-wannacry 华三(H3C)装备的提议设置(示例): 新版本: acl number 3050 rule deny tcp destination-port 445 rule permit ip interface [必要挂载的三层端口名称] packet-filter 3050 inbound packet-filter 3050 outbound 旧版本: acl number 3050 rule permit tcp destination-port 445 traffic classifier deny-wannacry if-match acl 3050 traffic behavior deny-wannacry filter deny qos policy deny-wannacry classifier deny-wannacry behavior deny-wannacry #在全局应用 qos apply policy deny-wannacry global inbound qos apply policy deny-wannacry global outbound #在三层接口应用法则 interface [必要挂载的三层端口名称] qos apply policy deny-wannacry inbound qos apply policy deny-wannacry outbound 华为装备的提议设置(示例): acl number 3050 rule deny tcp destination-port eq 445 rule permit ip traffic classifier deny-wannacry type and if-match acl 3050 traffic behavior deny-wannacry traffic policy deny-wannacry classifier deny-wannacry behavior deny-wannacry precedence 5 interface [必要挂载的三层端口名称] traffic-policy deny-wannacry inbound traffic-policy deny-wannacry outbound Cisco 装备的提议设置(示例): 旧版本: ip access-list extended deny-wannacry deny tcp any any eq 445 permit ip any any interface [必要挂载的三层端口名称] ip access-group deny-wannacry in ip access-group deny-wannacry out 新版本: ip access-list deny-wannacry deny tcp any any eq 445 permit ip any any interface [必要挂载的三层端口名称] ip access-group deny-wannacry in ip access-group deny-wannacry out 锐捷装备的提议设置(示例): ip access-list extended deny-wannacry deny tcp any any eq 445 permit ip any any interface [必要挂载的三层端口名称] ip access-group deny-wannacry in ip access-group deny-wannacry out 第3章 互联网主机应急处理操纵指南 回收快速处理方法，提议行使 360 安详卫士的“NSA 兵器库免疫器材 ”，可一键检测修复裂痕、封锁高风险处事，包罗精准检测出 NSA 兵器库行使的裂痕 是否已经修复，并提醒用户安装响应的补丁。针对 XP、2003 等无补丁的体系版本用户，，防止器材可以或许辅佐用户封锁存在高危风险的处事，从而对 NSA 黑客兵器进攻的体系裂痕彻底“免疫”。 NSA 兵器库免疫器材下载地点：http://dl.360safe.com/nsa/nsatool.exe  （编辑：湖南网） 【声明】本站内容均来自网络，其相关言论仅代表作者个人观点，不代表本站立场。若无意侵犯到您的权利，请及时与联系站长删除相关内容! |
