{"id":2130,"date":"2011-08-22T19:23:20","date_gmt":"2011-08-22T16:23:20","guid":{"rendered":"http:\/\/www.bilgehangunduz.com\/?p=2130"},"modified":"2011-08-22T19:23:20","modified_gmt":"2011-08-22T16:23:20","slug":"windows-rdp-hack-ve-onlemleri","status":"publish","type":"post","link":"https:\/\/www.bilgehangunduz.com\/index.php\/2011\/08\/22\/windows-rdp-hack-ve-onlemleri\/","title":{"rendered":"Windows RDP Hack ve \u00d6nlemleri"},"content":{"rendered":"

Her\u015fey bir m\u00fc\u015fterimin benim XP makinam “Security Event Log Full” hata mesaj\u0131 veriyor demesi\u00a0ile ba\u015flad\u0131.Acaba ne doldurmu\u015ftur diye olay g\u00f6r\u00fcnt\u00fcleyiciye bakt\u0131\u011f\u0131mda ba\u015far\u0131s\u0131z bir\u00e7ok logon giri\u015fimi\u00a0hata mesaj\u0131 ile kar\u015f\u0131la\u015ft\u0131m.\u00a0
\nBa\u015far\u0131l\u0131 Logon\u00a0\u00a0\u00a0 –> 528: Successful Logon
\nBa\u015far\u0131s\u0131z Logon –> 529: Logon Failure – Unknown user name or bad password
\n\"\"<\/a>
\n
\nsonra bilgisayarda Uzak Masa\u00fcst\u00fcn\u00fcn a\u00e7\u0131k oldu\u011funu g\u00f6rd\u00fcm ve nedenini sordu\u011fumda kullan\u0131c\u0131s\u0131n\u0131n evden ak\u015famlar\u0131da sisteme ba\u011flan\u0131p \u00e7al\u0131\u015ft\u0131\u011f\u0131 s\u00f6ylendi ve 3389 nolu portun ADSL modemin NAT ayarlar\u0131ndan\u00a0bu bilgisayar\u0131\u00a0\u00a0g\u00f6sterdi\u011fini g\u00f6rd\u00fc\u011f\u00fcmde sorun netle\u015fmi\u015fti, birisi \u00e7e\u015fitli y\u00f6ntemler\u00a0ile modemler \u00fczerinde 3389 nolu uzakmasa \u00fcst\u00fc portu a\u00e7\u0131k olan cihazlar\u0131 buluyor ve sonra kullan\u0131c\u0131 ad\u0131 ve \u015fifreleri deneyerek sonuca ula\u015fmaya \u00e7al\u0131\u015f\u0131yordu.<\/p>\n

M\u00fc\u015fterime hemen bu port numaras\u0131n\u0131 de\u011fi\u015ftirmemiz gerekti\u011fini ve adsl modem \u00fczerinde nat i\u015fleminin yeni port numaras\u0131na g\u00f6re yap\u0131lmas\u0131 gerekti\u011fini s\u00f6yledim \u00f6ncelikli olarak a\u015fa\u011f\u0131daki adresten Microsoftun port de\u011fi\u015ftirmek i\u00e7in \u00e7\u0131karm\u0131\u015f oldu\u011fu yamay\u0131 indirdim ve \u00e7ift t\u0131klad\u0131m.
\nAdres: http:\/\/support.microsoft.com\/kb\/306759<\/a>
\n\"\"<\/a>
\nMevcut Uzak masa\u00fcst\u00fc port numaras\u0131n\u0131 g\u00f6rd\u00fcm
\n\"\"<\/a>
\nBu numaray\u0131 7777 diye bir numara ile de\u011fi\u015ftiridim.
\n\"\"<\/a>
\nKapat deyip yama i\u015flemini bitirdim.
\n\"\"<\/a>
\nSistemi yeniden ba\u015flatt\u0131m.
\n\"\"<\/a>
\nBilgisayar a\u00e7\u0131ld\u0131\u011f\u0131nda g\u00fcvenlik duvar\u0131n\u0131n durumuna bakt\u0131m devred\u0131\u015f\u0131 idi ve bu port de\u011fi\u015fikli\u011fi yapt\u0131\u011f\u0131m i\u00e7in \u00f6nemliydi.
\nYa b\u00f6yle b\u0131rakacakt\u0131m yada a\u00e7\u0131p g\u00fcvenlik duvar\u0131 \u00fczerinden gerekli ayarlar\u0131 yapacakt\u0131m.
\n\"\"<\/a>
\nG\u00fcvenlik duvar\u0131n\u0131 a\u00e7t\u0131m.
\n\"\"<\/a>
\n\u00d6zel Durumlar sekmesine ge\u00e7tim.
\n\"\"<\/a>
\nBa\u011flant\u0131 noktas\u0131 ekle diyerek biraz \u00f6nce girmi\u015f oldu\u011fum port numaras\u0131na Bilgisayar \u00fczerindeki g\u00fcvenlik duvar\u0131n\u0131ndanda izin vermi\u015f oldum.
\n\"\"<\/a>
\nsonra ADSL modem \u00fczerinde 3389 olan port numaras\u0131n\u0131 7777 olarak ayn\u0131 bilgisayara y\u00f6nlendirdim.
\n\"\"<\/a>
\nD\u0131\u015fardaki bir bilgisayardan ayn\u0131 ip adresine bu sefer sonuna\u00a0 yeni port numaras\u0131 ekleyerek ba\u011flant\u0131 yapt\u0131\u011f\u0131mda her hangi bir sorun ile kar\u015f\u0131la\u015fmad\u0131\u011f\u0131mda i\u015flem tamam dedim.
\n\"\"<\/a>
\nYap\u0131lacak ayarlar bitmi\u015fti.Bir kez daha Auditing yapman\u0131n ne kadar yararl\u0131 bir\u015fey oldu\u011funu g\u00f6rm\u00fc\u015f oldum e\u011fer ilk ba\u015fta oturum a\u00e7ma olaylar\u0131n\u0131\u00a0takip ettirmemi\u015f olsam bunun fark\u0131na var\u0131lmayacakt\u0131.
\n\"\"<\/a>
\nBu arada en kolay uzak masa\u00fcst\u00fc yapabilen\u00a0serverlar\u0131 bulma yolu yine www.google.com.tr<\/a>\u00a0den ge\u00e7iyor. \ud83d\ude42
\n\"\"<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Her\u015fey bir m\u00fc\u015fterimin benim XP makinam “Security Event Log Full” hata mesaj\u0131 veriyor demesi\u00a0ile ba\u015flad\u0131.Acaba ne doldurmu\u015ftur diye olay g\u00f6r\u00fcnt\u00fcleyiciye bakt\u0131\u011f\u0131mda ba\u015far\u0131s\u0131z bir\u00e7ok logon giri\u015fimi\u00a0hata mesaj\u0131 ile kar\u015f\u0131la\u015ft\u0131m.\u00a0 Ba\u015far\u0131l\u0131 Logon\u00a0\u00a0\u00a0 –> 528: Successful Logon Ba\u015far\u0131s\u0131z Logon –> 529: Logon Failure – Unknown user name or bad password<\/p>\n","protected":false},"author":657,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7,150],"tags":[175],"_links":{"self":[{"href":"https:\/\/www.bilgehangunduz.com\/index.php\/wp-json\/wp\/v2\/posts\/2130"}],"collection":[{"href":"https:\/\/www.bilgehangunduz.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.bilgehangunduz.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.bilgehangunduz.com\/index.php\/wp-json\/wp\/v2\/users\/657"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bilgehangunduz.com\/index.php\/wp-json\/wp\/v2\/comments?post=2130"}],"version-history":[{"count":10,"href":"https:\/\/www.bilgehangunduz.com\/index.php\/wp-json\/wp\/v2\/posts\/2130\/revisions"}],"predecessor-version":[{"id":2155,"href":"https:\/\/www.bilgehangunduz.com\/index.php\/wp-json\/wp\/v2\/posts\/2130\/revisions\/2155"}],"wp:attachment":[{"href":"https:\/\/www.bilgehangunduz.com\/index.php\/wp-json\/wp\/v2\/media?parent=2130"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.bilgehangunduz.com\/index.php\/wp-json\/wp\/v2\/categories?post=2130"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.bilgehangunduz.com\/index.php\/wp-json\/wp\/v2\/tags?post=2130"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}