TeamViewer waa codsi loogu talagalay shirarka khadka tooska ah, shirarka webka, faylka iyo wadaaga miiska kombayutarada. TeamViewer waxay caan ku tahay inta badan habka wadaaga Kontroolka fog . ^{(Remote Control)}Tani waxay u oggolaanaysaa isticmaalayaasha inay ka helaan meel fog oo ay ka maraan shaashadaha kale ee kumbuyuutarka. Laba isticmaale ayaa midba midka kale geli kara kombuyuutarkiisa oo leh dhammaan kontaroolada.

Codsigan fog ee maamulka iyo shirarka ayaa diyaar u ah ku dhawaad dhammaan nidaamyada hawlgalka, ie, Windows , iOS, Linux , Blackberry , iwm. Ujeedada ugu weyn ee codsigan waa gelitaanka iyo bixinta kontaroolada kombuyuutarrada kuwa kale. Tilmaamaha soo jeedinta iyo shirarka ayaa sidoo kale lagu daray.

Sida TeamViewer uu ugu ciyaarayo kontaroolada onlaynka ah ee kombayutarada, waxa laga yaabaa inaad ka shakido sifada amaanka. Hagaag^(Well) walwal ma jiro, TeamViewer waxay la socotaa 2048-bit RSA sireed^(RSA) ku salaysan, oo leh isweydaarsiga muhiimka ah iyo xaqiijinta laba-geesoodka ah. Waxa kale oo ay xoojisaa ikhtiyaarka dib-u-dejinta erayga sirta ah haddii la ogaado galitaanka ama gelida aan caadiga ahayn.

Sida Looga Joojiyo TeamViewer Shabakaddaada

Sida Looga Joojiyo TeamViewer Shabakaddaada^{(How to Block TeamViewer on your Network)}

Weli, waxaa laga yaabaa inaad si uun u rabto inaad ka xannibto codsigan shabakadaada. Maqaalkan, waxaan kuugu sharxi doonaa sida loo sameeyo. Hagaag, shayku waa TeamViewer uma baahna qaabayn ama wax kale oo dab-damis ah si loogu xidho laba kombiyuutar. Waxaad u baahan tahay oo kaliya inaad ka soo dejiso faylka .exe ee bogga internetka. Tani waxay ka dhigaysaa habaynta codsigan mid aad u fudud. Hadda rakibiddan fudud iyo gelitaankan, sidee baad uga xannibi lahayd TeamViewer^(TeamViewer) shabakadaada?

Waxaa jiray eedeymo badan oo mug sare leh oo ku saabsan isticmaaleyaasha TeamViewer in la jabsado nidaamyadooda. Hackers iyo Dembiilayaashu^(Criminals) waxay helaan galaangal sharci darro ah.

Aynu hadda ka gudubno tillaabooyinka si loo xannibo TeamViewer :

#1. DNS Block

Ugu horreyntii^(First) , waxaad u baahan doontaa inaad xannibto xallinta diiwaannada DNS ee ^(DNS)bogga TeamViewer^(TeamViewer) , ie, teamviewer.com. Hadda, haddii aad isticmaalayso server-kaaga DNS , sida server-ka Active Directory , markaa tani way kuu fududaan doontaa.

Raac tillaabooyinka tan:

1. Marka hore^(First) , waxaad u baahan tahay inaad furto konsolka maamulka DNS .

2. Hadda waxaad u baahan doontaa inaad abuurto rikoodhadaada heerka sare ah ee TeamViewer domain ( teamviewer.com).

Hadda, ma aha inaad wax samayso. Ka tag rikoorka cusub sida uu yahay. Adigoo aan ku tilmaamin rikoorkan meel kasta, waxaad si toos ah u joojin doontaa isku xirka shabakadaada boggan cusub.

#2. Ensure Clients Connection

Tallaabadan, waxaad u baahan tahay inaad hubiso haddii macaamiishu aysan ku xirmi karin server-yada DNS ee dibadda ah . Waxaad u baahan doontaa inaad hubiso in server-yada DNS ee gudahaaga; Kaliya xiriirinta DNS ayaa la oggolaaday gelitaanka. Server kaaga gudaha ee DNS waxa ku jira diiwanka khariban ee aanu abuurnay. Tani waxay naga caawinaysaa inaan meesha ka saarno suurtagalnimada yar ee macmiilku hubinayo diiwaanka DNS ee ^(DNS)TeamViewer . Halkii aad ka ahaan lahayd server-kaaga, hubinta macmiilka ayaa ka soo horjeeda oo keliya adeegayaashooda.

Raac tillaabooyinka si aad u hubiso xidhiidhka macmiilka:

1. Talaabada ugu horeysa waa inaad gasho Firewall ama routerkaaga.

2. Hadda waxaad u baahan tahay inaad ku darto xeerka dab-damiska ee baxaya. Xeerkan cusub ayaa ka mamnuucaya dekedda 53 ee TCP iyo UDP^{(disallow port 53 of TCP and UDP)} dhammaan ilaha ciwaanka IP-ga. Waxa kaliya oo ay ogolaataa ciwaanada IP-ga ee server-kaaga DNS .

Tani waxay u oggolaanaysaa macaamiisha kaliya inay xalliyaan diiwaannada aad u oggolaatay server-kaaga DNS . Hadda, adeegayaashan idman waxay codsiga u gudbin karaan adeegayaasha kale ee dibadda.

#3. Block access to IP Address Range

Hadda oo aad xannibtay diiwaanka DNS , waxaa laga yaabaa inaad ka nasato in isku xirka la xannibay. Laakiin way ku caawin lahayd haddii aanad ahayn, sababtoo ah mararka qaarkood, inkasta oo DNS - ka la xannibay, TeamViewer wuxuu weli ku xidhi doonaa ciwaankiisa la yaqaan.

Hadda, waxaa jira siyaabo looga gudbi karo dhibaatadan sidoo kale. Halkan, waxaad u baahan doontaa inaad xannibto gelitaanka xadka ciwaanka IP-ga.

1. Marka hore^(First) , gal router^(Router) kaaga .

2. Hadda waxaad u baahan doontaa inaad ku darto xeer cusub Firewall kaaga . Xeerkan cusub ee dab-damiska waxa uu diidayaa isku xidhka toosan ee 178.77.120.0.0./24

Baaxadda ciwaanka IP-ga ee TeamViewer waa 178.77.120.0/24. Tan hadda waxa loo turjumay 178.77.120.1 – 178.77.120.254.

#4. Block the TeamViewer Port

Uma yeedhi doono tillaabadan mid qasab ah, laakiin way ka fiicantahay in aan ka xumahay. Waxay u shaqeysaa sidii lakab dheeraad ah oo ilaalin ah. TeamViewer - ku wuxuu inta badan ku xidhaa dekedda nambarka 5938 iyo sidoo kale tunnel-ka marsada lambarka 80 iyo 443, ie, HTTP & SSL siday u kala horreeyaan.

Waxaad xannibi kartaa dekeddan adiga oo raacaya tillaabooyinka la bixiyay:

1. Marka hore^(First) , gal Firewall -ka ama routerkaaga.

2. Hadda, waxaad u baahan doontaa inaad ku darto dab-damis cusub, sida tallaabadii u dambaysay. Xeerkan cusub ayaa ka mamnuucaya dekedda 5938 ee TCP iyo UDP ee cinwaannada isha.

#5. Group Policy Restrictions

Hadda, waa inaad tixgelisaa inay ku jiraan Xaddidaadaha Software-ka Kooxda^{(Group Policy Software Restrictions)} . Raac^(Follow) tillaabooyinka si aad u sameyso:

Talaabada ugu horeysa waa inaad kala soo baxdo faylka .exe ee shabakada TeamViewer .
Fur abka oo fur console Management Policy Group . ^{(Group Policy Management)}Hadda waxaad u baahan tahay inaad dejiso GPO cusub .
Hadda oo aad dejisay GPO cusub tag Isku-habaynta Isticmaalaha^{(User Configuration)} . Guji Dejinta^(Scroll) Daaqadda oo^{(Window Settings)} geli Settings Security^{(Security Settings)} .
Hadda u gudub Xeerarka Diiwaangelinta Software-^{(Software Registration Policies)} ka .
Daaqad cusub oo Hash Rule pop-up ah ayaa soo bixi doonta. Guji^(Click) 'Browse' oo raadi dejinta TeamViewer .
Markaad hesho faylka .exe , fur.
Hadda waxaad u baahan tahay inaad xirto dhammaan daaqadaha. Talaabada u danbeysa hadda waa in lagu xidho GPO -ga cusub boggaaga oo dooro 'Qof walba ka codso'.

#6. Packet Inspection

Aynu hadda ka hadalno marka dhammaan tillaabooyinka kor lagu soo xusay ay fulin waayaan. Haddii ay tani dhacdo, waxaad u baahan doontaa inaad fuliso dab-damis cusub kaas oo samayn kara Baadhitaanka Baakidhka Deep iyo UTM ( ^{(Deep Packet Inspections and UTM)}Maaraynta Hanjabaadaha^{(Threat Management)} Midaysan ). Aaladahan gaarka ah waxay baadhayaan agabka gelitaanka fog ee caadiga ah waxayna xannibaan galaangalkooda.

Dhibka kaliya ee tani waa Lacag^(Money) . Waxaad u baahan doontaa inaad lacag badan ku bixiso si aad u iibsato qalabkan.

Hal shay oo aad u baahan tahay inaad maskaxda ku hayso ayaa ah inaad u qalanto inaad xannibto TeamViewer -ka isticmaalayaashuna dhinaca kale way ka warqabaan siyaasadda ka dhanka ah gelitaanka noocaas ah. Waxaa lagula talinayaa in la yeesho siyaasado qoran oo kayd ah.

Lagu taliyay: ^{(Recommended:)} Sida looga soo dejiyo fiidiyowyada Discord^{(How to Download Videos from Discord)}

Waxaad hadda si fudud uga xannibi kartaa TeamViewer^(TeamViewer) shabakadaada adiga oo raacaya tillaabooyinka aan kor ku soo sheegnay. Talaabooyinkani waxay ka ilaalin doonaan kombuyuutarkaaga isticmaalayaasha kale ee isku dayaya inay gacanta ku dhigaan nidaamkaaga. Waxaa lagula talinayaa in la hirgeliyo xannibaado xirmo la mid ah codsiyada kale ee gelitaanka fog. Waligaa aad uma diyaargarowdid marka ay timaado Amniga^(Security) , miyaad tahay?

How to Block TeamViewer on your Network

TeamViewer is an application for online meetings, web conferences, file & desktop sharing over computers. TeamViewer is famouѕ mostly for its Remote Control sharing feature. This allows users to get rеmote access over other computer screens. Two users cаn access each other’s computer with all controls.

This remote administration and conferencing application are available for almost all operating systems, i.e., Windows, iOS, Linux, Blackberry, etc. The main focus of this application is accessing and granting controls of others’ computers. The presentation and conferencing features are also included.

As TeamViewer plays with online controls over computers, you might doubt its security features. Well no worries, TeamViewer comes with 2048-bit RSA based encryption, with key exchange and two-factor authentication. It also enforces password reset option if any unusual login or access is detected.

Still, you may somehow want to block this application from your network. In this article, we will explain to you how to do so. Well, the thing is TeamViewer does not require any configuration or any other firewall to connect two computers. You only need to download the .exe file from the website. This makes the set up for this application very easy. Now with this easy installation and access, how would you block TeamViewer on your network?

There were a lot of high volume allegations about TeamViewer users getting their systems hacked. Hackers and Criminals get illegal access.

Let us now get through the steps to block TeamViewer:

#1. DNS Block

First of all, you will need to block the DNS records resolution from the domain of TeamViewer, i.e., teamviewer.com. Now, if you are using your own DNS server, just like the Active Directory server, then this would be easy for you.

Follow the steps for this:

1. First, you need to open the DNS management console.

2. You will now need to create your own top-level record for the TeamViewer domain (teamviewer.com).

Now, you don’t have to do anything. Leave the new record as it is. By not pointing this record anywhere, you will automatically stop your network connections to this new domain.

#2. Ensure Clients Connection

In this step, you need to check if the clients can’t connect to the external DNS servers. You will need to ensure that to your internal DNS servers; only DNS connections are granted access. Your internal DNS servers contain the dummy record we created. This helps us remove the slight possibility of client checking DNS record of TeamViewer. Instead of your server, this client check is only against their servers.

Follow the steps to ensure Client connection:

1. The first step is to log in to the Firewall or your Router.

2. Now you need to add an outgoing firewall rule. This new rule will disallow port 53 of TCP and UDP from all the sources of IP addresses. It only allows the IP addresses of your DNS server.

This allows the clients only to resolve the records that you have authorised through your DNS server. Now, these authorised servers can forward the request to other external servers.

#3. Block access to IP Address Range

Now that you have blocked the DNS record, you may get relieved that connections have been blocked. But it would help if you weren’t, because sometimes, despite the DNS being blocked, the TeamViewer will still connect to its known addresses.

Now, there are ways to overcome this problem too. Here, you will need to block access to the IP address range.

1. First of all, login to your Router.

2. You will now need to add a new rule for your Firewall. This new firewall rule will disallow the directed connections to 178.77.120.0./24

The IP address range for TeamViewer is 178.77.120.0/24. This now is translated to 178.77.120.1 – 178.77.120.254.

#4. Block the TeamViewer Port

We won’t call this step as mandatory, but it is better safe than sorry. It acts as an extra layer of protection. The TeamViewer often connects on the port number 5938 and also tunnels through the port number 80 and 443, i.e., HTTP & SSL respectively.

You can block this port by following the given steps:

1. First, log in to the Firewall or your Router.

2. Now, you will need to add a new firewall, just like the last step. This new rule will disallow the port 5938 of TCP and UDP from the source addresses.

#5. Group Policy Restrictions

Now, you must consider including Group Policy Software Restrictions. Follow the steps to do it:

The first step is to download the .exe file from the TeamViewer website.
Launch the app and open the Group Policy Management console. Now you need to set up a new GPO.
Now that you have set up a new GPO go to User Configuration. Scroll for Window Settings and enter Security Settings.
Now go to the Software Registration Policies.
A new Hash Rule pop-up window will appear. Click on ‘Browse’ and search for the TeamViewer setup.
Once you’ve found the .exe file, open it.
Now you need to close all windows. The final step now is to link the new GPO to your domain and select ‘Apply to Everyone’.

#6. Packet Inspection

Let us now talk about when all of the above-mentioned steps fail to perform. If this happens, you will require to implement a new firewall which can perform Deep Packet Inspections and UTM (Unified Threat Management). These specific devices search the common remote access tools and block their access.

The only downside of this is Money. You will need to spend a lot of money to buy this device.

One thing that you need to keep in mind is that you are eligible to block the TeamViewer and the users at the other end are aware of the policy against such access. It is advised to have written policies as a backup.

Recommended: How to Download Videos from Discord

You can now easily block TeamViewer on your network by following the above-mentioned steps. These steps will protect your computer from other users who try to gain control over your system. It is advised to implement similar packet restrictions to other remote access applications. You are never too prepared when it comes to Security, are you?

Mark Kim

About the author

Waxaan ahay injineer software iyo sahamiye. Waxaan khibrad u leeyahay labada Microsoft Xbox 360 iyo Google Explorer. Waxaan awoodaa inaan bixiyo talooyinka khabiirada ee qalabyada horumarinta software-ka qaarkood, iyo sidoo kale inaan caawiyo dadka inay cilad-saaraan khaladaadka Explorer ee caadiga ah.

Sida Looga Joojiyo TeamViewer Shabakaddaada

Sida Looga Joojiyo TeamViewer Shabakaddaada^{(How to Block TeamViewer on your Network)}

#1. DNS Block

#2. Ensure Clients Connection

#3. Block access to IP Address Range

#4. Block the TeamViewer Port

#5. Group Policy Restrictions

#6. Packet Inspection

How to Block TeamViewer on your Network