RDC trafikini mangle bilan belgilash va port forward

⏱ O‘qish vaqti: 1 daqiqa

Qisqacha

RDC ulanishini TCP va UDP 3389 portida belgilash
Ulanish manbasi va manziliga qarab paketlarni yuqori va past yo‘nalishda ajratish
Markaziy tarmoqda RDC trafikini aniq kuzatish va boshqarish

Kompyuteringizdan boshqa mashinaga Microsoft Remote Desktop Connection orqali ulanmoqchi bo‘lsangiz, trafikni nazorat qilish zarur. MikroTik routerda mangle qoidalari yordamida RDC paketlarini belgilash va yo‘nalishini ajratish mumkin. Bu usul tarmoq monitoringi va qo‘shimcha xavfsizlik choralarini qo‘llashga yordam beradi.

Talablar

RouterOS terminaliga administrator huquqi bilan kirish
192.168.1.0/24 ichki tarmoq mavjudligi
RDC xizmatini 3389 portida yoqilgan bo‘lishi

Sozlash bosqichlari

1. RDC ulanishini belgilash uchun mangle qo‘shish

/ip firewall mangle bo‘limiga kirib, TCP va UDP protokollari uchun 3389‑portga keluvchi paketlarni conn-RDC nomli connection‑mark bilan belgilash kerak. Bu qoidalar prerouting chain’da qo‘llaniladi va keyingi qoidalar uchun asos bo‘ladi.

If you're in front of your computer and need to access a different machine, Microsoft's Remote Desktop Connection tool will let you access everything from afar. As long as the computer is turned on and set up for remote connection, you can grab a file, open an application, troubleshoot a problem, or just work remotely. 

Port forward Remote Desktop Connection:
TCP/UDP: 3389/3389


/ip firewall mangle
add action=mark-connection chain=prerouting dst-port="3389" new-connection-mark=conn-RDC protocol=tcp
add action=mark-connection chain=prerouting dst-port="3389" new-connection-mark=conn-RDC protocol=udp
add action=mark-packet chain=prerouting connection-mark=conn-RDC new-packet-mark=RDC_pkt-up passthrough=no src-address=192.168.1.0/24
add action=mark-packet chain=prerouting connection-mark=conn-RDC dst-address=192.168.1.0/24 new-packet-mark=RDC_pkt-down passthrough=no
Credit: www.o-om.com

2. Ulanish yo‘nalishini paket belgilari bilan ajratish

Keyingi qoidalar conn-RDC connection‑markga ega paketlarni tekshiradi. Manba manzili 192.168.1.0/24 bo‘lsa, paket RDC_pkt-up deb belgilanishi, manzil 192.168.1.0/24 bo‘lsa RDC_pkt-down deb belgilanishi kerak. Bu orqali ichki tarmoqdagi yuqori va past yo‘nalishdagi RDC trafikini farqlash mumkin.

Tekshirish

/ip firewall mangle bo‘limida qo‘shilgan qoidalarni ko‘rib, conn-RDC, RDC_pkt-up va RDC_pkt-down belgilarini tasdiqlang.

Diqqat:

Bu qoidalar faqat paketni belgilaydi, trafikni NAT yoki port forward qilmaydi
RDC xizmatini yoqish va firewall‑da ruxsat berilganligini tekshiring
IP manzillarni o‘zingizning ichki tarmog‘ingizga moslang

Xulosa

Mangle yordamida RDC trafikini belgilash tarmoq monitoringi va xavfsizlikni kuchaytiradi. Qo‘shimcha NAT yoki firewall qoidalari bilan birgalikda ishlatish tavsiya etiladi.

Manba: Mangle and Port Remote Desktop Connection (RDC) — mikrotiktool.github.io