네트워크 검색 / 네트워크 리소스 사용하지 않도록 설정하기
??? ?? ???? ??? ???? ?? ??? ?? ?? ?? ?? ??? ? ???? ?? ?? ??? ?? ?? ??? ?? ???? ??? ??? ???? ??? ?? ?? ??? ?? ??? ????. ? ??? ??? ???? ?? ??? ? ?? ??? ?? ??? ?? ?? ????.
???? ??? ?????
???? ??? ?? ??? ????. ???? ??? ?? ??? ?? ???? ???? ?? ??? ?? ?????. Function Discovery Platform ? ???? ???? ???? ?? ?? ????. ??? ???? ??? ????? NetBIOS browsing ???, WSD, UPNP, SSDP ??? ??? ?????? ?? ?? ????. ????? ???? ??? ?? ??? ???? ?? ??? ???, ?? ????????? ??? ???? ?? ????? ? ? ????.
Figure 1. Network Resources/Network Neighborhood
Function Discovery Platform ? ?????
Windows Vista ???, ??? “Discovery” ????? ?? ??????, applicaion/process ? ??? ????? ??? ?? ?? ?? ?? ??? ??? ??? ????.
Windows Vista ??? ??? ??????? ?? ??? ???? ???? ??????? ??? ????? ???? ??? ??? ??? ? ?? ??? Function Discovery Platform ? ???????.
??? ?? ??? ??? ???? application ? ?? ?? ??? ??? ? ?? ????? ? ????? ???.
???? ?? ??? ??? ???? ??? ? ????. :
https://msdn.microsoft.com/en-us/library/aa363906(v=VS.85).aspx
Figure 2. Function Deiscovery Architecture
???? ?? ? Windows Firewall
???? ??? Windows Firewall ?? ?? ??? ??? ??????. Windows Firewall ? Network Discovery ????? ?? Inbound, Outbound ?? rule ? ??? ????. ??? ????? Outbound rule ? ????? ?? ?? ?? ??? ? ???? ?? ???.
Figure 3. Windows Firewall ?? Network Discovery rule
??? ???? ???? ?? ?? ?? inbound rule ? ????? ?? ???? ??? ??? ? ????
Figure 4. ???? ?? ??
LLMNR ? ????? Network Map ? ??? ?? ??? ???? ???? ??? ?? ? ?? ? ??? ???? ???? ??? ? ????.
Figure 5. LLMNR ??
???? ??? ???? ??? ?? ??
???? ??? ???? ??? ?? ???? ??? ???? ?? ?? GUI ?? Windows Firewall ??????? ???? ??? ?? ?? ?? ???. ??? ? ??? ??? ??? ???? ???? ???? ? ? ?? ??? ?? ??? ????.
??? ?? ?? ???? Network Protocol ? ???? ? ???. ????? ??? Windows Connecrt Now ? ?? ? ? ????.
Firewall ?? ???? ?? ?? ?? ?? ???? ???? ???? ?? ? ????. ??? ??? ?? ???? ?? ??? ????? ????. ??? ??? ???? ?? ?? ??? ??? ??? NetBIOS broadcast ? ?? ???? ???? ?? ????.
???? ?? ??? ??? ?? ?? ??? ??? ?? ??? ?? ???? ?? ??? ???? ?? ? ??? ???? ?? ?? ???? ?????
??? ?? Windows Firewall ?? ???? ??? ???? ??? ?? ??? ???? ??? ???? ???? ???? ??? ?? ???? ?? ??? ?? ??? ??? ??? ?? ???? ???? ??? ?? ????? ???????. ?? ???/??? ??? ???? ?? ???, ?? ??? ??? ?? ?? ?? ??? ?? ?? ???.
??? ?? ?? ??? ?? ?? ????.
https://msdn.microsoft.com/en-us/library/aa363906(v=VS.85).aspx
- Computer Browser
- SSDP Discovery
- UPnP Device Host
- Registry
- Function Discovery Resource Publication
- Function Discovery Provider host
- Link-Layer Topology Mapper
Note: LLMNR is also used
There are predefined rules for Network Discovery - or you can manually block these ports:
- TCP 2869 - UPNP
- TCP 5357 - WSDAPIEvents
- TCP 5358 - WSDEvents Secure
- UDP 5355 - LLMNR
- UPD 3702 - WSD publishing
- UDP 1900 - SSDP
Note: You also need to block NetBIOS but that can affect more than just Network Discovery.
- UDP 138 - NetBIOS Datagram
- UDP 137 - NetBIOS Name
???? ? ?? ??? :
GUI ?? ???? ??? ??? ???? ??? ?? ?? ?? ? ????.
? ?? ??? ?? ???? ????? ??? ????? ???? ???? ?? ?? ?? ?? ? ????.
Figure 6. Explorer with Network Resoucres enabled
Figure 7. Explorer with Network Resources disabled
?? ???? Wireless ???? ??? ????. ? ??? ?? pc ? ?? ??? ?? ??? ?? ???. ? ??? ???? ??? ?? ??? ParsingName ? ?? GUID ? ?? ?? ???.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\
FolderDescriptions\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}
ParsingName REG_SZ ::{208D2C60-3AEA-1069-A2D7-08002B30309D}
Note : ??? ?? ??? ?? ? ??? ?? ???.
? ??? ?? ????? ?? ??? PasingName ?? ???? ???? ???.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\
FolderDescriptions\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}
ParsingName REG_SZ ::{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}
Note : ??? ?? ??? ?? ? ??? ?? ???.
?? ??? ????? (????? Network Places) Network ? ??? ????.
?? ???? ?? ??? Network option ? ? ?? ???? ????.
Figure 8. Explorer with Network Resources hidden
????? ????? ??? ?? NonEnum ? ?? 1? ?? GUID ? ?? ? ? ????.
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum]
{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}=dword:00000001
Note : ??? ?? ??? ?? ???? ?? ???.
??
???? ??? ???? ???? ???? ??? ?? ??? ??? ?? ??? ?????. ?? ????? ???? ?? ??? ??? ???? ????? ??? ???? ?? ? ? ?????.
???? ???? ??? ??? ? ???, ???? ??? ????? ? ????. ?? ??? Network resource ? ???? ??? ??? ????? Network option ? ??? ?? ? ? ????.
? ??? ???? ??? ???? ??? ?? ?? ?? ??? ?, ?? ??? ?? ??? ??? ???? ?????.
Note : ????? Windows 7 ?? ?? ?? ????, Windows Vista ? ?????.
-David Pracht