你就牛吧 发表于 2007-11-8 15:53:03

不可阻挡的趋势——ARP防火墙

<p class="MsoNormal" style="MARGIN: 0cm 0cm 0pt;"><span style="FONT-FAMILY: 宋体; mso-bidi-font-size: 10.5pt; mso-ascii-font-family: ''; mso-hansi-font-family: '';">如果说,在网络时代,最令人痛恨的计算机问题一个是病毒,另一个一定是</span><span lang="EN-US" style="mso-bidi-font-size: 10.5pt;"><font face="">ARP</font></span><span style="FONT-FAMILY: 宋体; mso-bidi-font-size: 10.5pt; mso-ascii-font-family: ''; mso-hansi-font-family: '';">欺骗了!在校园网里每天上网的同学们也许最深有体会。而</span><span lang="EN-US" style="FONT-FAMILY: 宋体; mso-bidi-font-size: 10.5pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt;">ARP</span><span style="FONT-FAMILY: 宋体; mso-bidi-font-size: 10.5pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt;">欺骗攻击也会令企业用户防不胜防,对企业来说,一台<span lang="EN-US">PC</span>发出<span lang="EN-US">ARP</span>欺骗,就会令整个网络不安。任何网管谈到这类攻击程序,都会非常痛恨。<span lang="EN-US"><p></p></span></span></p><p class="MsoNormal" style="MARGIN: 0cm 0cm 0pt;"><span lang="EN-US" style="FONT-FAMILY: 宋体; mso-bidi-font-size: 10.5pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt;"><br/></span><span style="FONT-FAMILY: 宋体; mso-bidi-font-size: 10.5pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt;">用户对防范<span lang="EN-US">ARP</span>欺骗的工具寄于很高的期望,而实际上目前的防火墙软件,可以真正有效的应付<span lang="EN-US">ARP</span>攻击的,并不多。而且有的防火墙非常专业,操作复杂,对于一些在技术方面并不擅长的用户来说,犹如天书。针对这种情况,金山毒霸的<span lang="EN-US">ARP</span>防火墙(防止<span lang="EN-US">ARP</span>欺骗)开始邀请内测。有兴趣的可以访问<span lang="EN-US"><a href="http://bbs.duba.net/thread-21842921-1-1.html" target="_blank">http://bbs.duba.net/thread-21842921-1-1.html</a></span>下载。<span lang="EN-US"><p></p></span></span></p><p class="MsoNormal" style="MARGIN: 0cm 0cm 0pt;"><span style="FONT-FAMILY: 宋体; mso-bidi-font-size: 10.5pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt;">这是内测版的一些简单截图</span><span lang="EN-US" style="FONT-FAMILY: Wingdings; mso-bidi-font-size: 10.5pt; mso-ascii-font-family: 宋体; mso-hansi-font-family: 宋体; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt; mso-char-type: symbol; mso-symbol-font-family: Wingdings;"><span style="mso-char-type: symbol; mso-symbol-font-family: Wingdings;">J</span></span></p><p class="MsoNormal" style="MARGIN: 0cm 0cm 0pt;"><span lang="EN-US" style="FONT-FAMILY: Wingdings; mso-bidi-font-size: 10.5pt; mso-ascii-font-family: 宋体; mso-hansi-font-family: 宋体; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt; mso-char-type: symbol; mso-symbol-font-family: Wingdings;"><span style="mso-char-type: symbol; mso-symbol-font-family: Wingdings;"></span></span>&nbsp;</p><p class="MsoNormal" style="MARGIN: 0cm 0cm 0pt;"><span lang="EN-US" style="FONT-FAMILY: Wingdings; mso-bidi-font-size: 10.5pt; mso-ascii-font-family: 宋体; mso-hansi-font-family: 宋体; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt; mso-char-type: symbol; mso-symbol-font-family: Wingdings;"><span style="mso-char-type: symbol; mso-symbol-font-family: Wingdings;"></span></span><span lang="EN-US" style="FONT-FAMILY: 宋体; mso-bidi-font-size: 10.5pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt;"><p></p></span>&nbsp;</p><p><img src="http://image.poco.cn/mypoco/myphoto/20071107/13/4087790120071107130810945_000_640.jpg" border="0" alt=""/></p><p><span style="FONT-SIZE: 10.5pt; FONT-FAMILY: 宋体; mso-bidi-font-family: 宋体; mso-ansi-language: EN-US; mso-fareast-language: ZH-CN; mso-bidi-language: AR-SA;">设置功能</span></p><p><span style="FONT-SIZE: 10.5pt; FONT-FAMILY: 宋体; mso-bidi-font-family: 宋体; mso-ansi-language: EN-US; mso-fareast-language: ZH-CN; mso-bidi-language: AR-SA;"></span>&nbsp;</p><p><img src="http://image.poco.cn/mypoco/myphoto/20071107/13/4087790120071107130810945_001_640.jpg" border="0" alt=""/></p><p><span style="FONT-SIZE: 10.5pt; FONT-FAMILY: 宋体; mso-bidi-font-family: 宋体; mso-ansi-language: EN-US; mso-fareast-language: ZH-CN; mso-bidi-language: AR-SA;">设置选项</span></p><p><span style="FONT-SIZE: 10.5pt; FONT-FAMILY: 宋体; mso-bidi-font-family: 宋体; mso-ansi-language: EN-US; mso-fareast-language: ZH-CN; mso-bidi-language: AR-SA;"></span>&nbsp;</p><p><img src="http://image.poco.cn/mypoco/myphoto/20071107/13/4087790120071107130810945_002_640.jpg" border="0" alt=""/></p><p>&nbsp;</p><p><img src="http://image.poco.cn/mypoco/myphoto/20071107/13/4087790120071107130810945_003_640.jpg" border="0" alt=""/></p><p><font face="宋体"></font>&nbsp;</p><p class="MsoNormal" align="left" style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-pagination: widow-orphan;"><span style="FONT-FAMILY: 宋体; mso-bidi-font-size: 10.5pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt;">如果局域网客户机较多,建议不要开启通知网关,不然太多客户端频繁发起的<span lang="EN-US">ARP</span>请求,也会令网络受到影响。<span lang="EN-US"><br/><br/></span>日志查看:</span></p><p class="MsoNormal" align="left" style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-pagination: widow-orphan;"><span style="FONT-FAMILY: 宋体; mso-bidi-font-size: 10.5pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt;"></span>&nbsp;</p><p class="MsoNormal" align="left" style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-pagination: widow-orphan;"><span style="FONT-FAMILY: 宋体; mso-bidi-font-size: 10.5pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt;"><span lang="EN-US"><p></p></span></span>&nbsp;</p><p><img src="http://image.poco.cn/mypoco/myphoto/20071107/13/4087790120071107130810945_004_640.jpg" border="0" alt=""/></p><p class="MsoNormal" align="left" style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-pagination: widow-orphan;"><span style="FONT-FAMILY: 宋体; mso-bidi-font-size: 10.5pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt;">事实上现在几乎所有的安全软件厂商都在开始完善防范<span lang="EN-US">ARP</span>攻击的功能,<span lang="EN-US">comodo</span>,<span lang="EN-US">ZA</span>,<span lang="EN-US">outpost</span>的新版本,都加入了相应的功能模块。连第一次涉足防火墙领域的<span lang="EN-US">eset</span>公司,也在最新的<span lang="EN-US">ess</span>产品之中重点加入了<span lang="EN-US">ARP</span>防范的模块,看来防<span lang="EN-US">ARP</span>攻击已经成为一个不可阻挡的趋势了!<span lang="EN-US"><p></p></span></span></p>

星星想哭 发表于 2007-11-9 14:18:56

<p class="MsoNormal" align="left" style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-pagination: widow-orphan;"><span style="FONT-FAMILY: 宋体; mso-bidi-font-size: 10.5pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt;">哦? 很兴奋的消息,瑞星的防火墙 总是乱报,实在是很郁闷,希望金山的东东早点出来,并且真的好用而且易用<span lang="EN-US"><p></p></span></span></p>

夕阳小猪 发表于 2007-11-12 10:26:03

<p class="MsoNormal" align="left" style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-pagination: widow-orphan;"><span style="FONT-FAMILY: 宋体; mso-bidi-font-size: 10.5pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt;">听说这个东东将会集成在毒霸<span lang="EN-US">2008</span>之中,哈哈 真的期待啊<span lang="EN-US"><p></p></span></span></p>

然后向右 发表于 2007-11-12 15:41:27

<p class="MsoNormal" align="left" style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-pagination: widow-orphan;"><span style="FONT-FAMILY: 宋体; mso-bidi-font-size: 10.5pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt;">我一直用<span lang="EN-US">Outpost</span>,在阻止<span lang="EN-US">ARP</span>的时候会出现断网现象,郁闷啊,看看金山的怎么样<span lang="EN-US"><p></p></span></span></p>

我是我吗 发表于 2007-11-21 10:50:01

<p class="MsoNormal" align="left" style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-pagination: widow-orphan;"><b style="mso-bidi-font-weight: normal;"><span style="FONT-SIZE: 12pt; FONT-FAMILY: 楷体_GB2312; mso-hansi-font-family: 华文中宋; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt;">对付这种东西需要大仙来指引啊<span lang="EN-US"><span style="mso-spacerun: yes;">&nbsp; </span></span>,多多指导帮助啊给我们这些小白啊<span lang="EN-US"><p></p></span></span></b></p>

对不起我爱你 发表于 2007-11-21 13:46:32

<p class="MsoNormal" align="left" style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-pagination: widow-orphan;"><b style="mso-bidi-font-weight: normal;"><span style="FONT-SIZE: 12pt; COLOR: #943634; FONT-FAMILY: 楷体_GB2312; mso-hansi-font-family: 华文中宋; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt;">其实真的没有更好的解决办法,因为从根本上讲,彻底防范<span lang="EN-US">ARP</span>攻击,是要靠网管双向绑定的……毕竟如果有很多个客户端,都频繁发包查询网关,网肯定就挂了 </span></b><b style="mso-bidi-font-weight: normal;"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: #943634; FONT-FAMILY: Wingdings; mso-ascii-font-family: 楷体_GB2312; mso-hansi-font-family: 华文中宋; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt; mso-char-type: symbol; mso-symbol-font-family: Wingdings; mso-fareast-font-family: 楷体_GB2312;"><span style="mso-char-type: symbol; mso-symbol-font-family: Wingdings;">L</span></span></b><b style="mso-bidi-font-weight: normal;"><span lang="EN-US" style="FONT-SIZE: 12pt; COLOR: #943634; FONT-FAMILY: 楷体_GB2312; mso-hansi-font-family: 华文中宋; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt;"><p></p></span></b></p>

风业是我 发表于 2007-11-21 18:26:15

<p class="MsoNormal" align="left" style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-pagination: widow-orphan;"><b style="mso-bidi-font-weight: normal;"><span style="FONT-SIZE: 12pt; COLOR: #17365d; FONT-FAMILY: 楷体_GB2312; mso-hansi-font-family: 华文中宋; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt;">国产的风云防火墙还算可以,不过更期待套装产品,对金山毒霸<span lang="EN-US">2008</span>又多了一份期待,不过都<span lang="EN-US">11</span>月了,不知道金山什么时候能推出产品啊?<span lang="EN-US"><p></p></span></span></b></p>

妈妈辛苦 发表于 2007-11-21 18:40:32

<p class="MsoNormal" align="left" style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-pagination: widow-orphan;"><b style="mso-bidi-font-weight: normal;"><span style="FONT-SIZE: 12pt; COLOR: red; FONT-FAMILY: 楷体_GB2312; mso-hansi-font-family: 华文中宋; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt;">好消息啊,我一直用<span lang="EN-US">PCtools</span>防火墙,设置实在是繁琐,好像还和中文<span lang="EN-US">xp</span>有些水土不服,期待一下金山的东东<span lang="EN-US"><p></p></span></span></b></p>

上网真好 发表于 2007-11-22 12:14:14

<p class="MsoNormal" align="left" style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-pagination: widow-orphan;"><b style="mso-bidi-font-weight: normal;"><span style="FONT-SIZE: 12pt; COLOR: #1d1b11; FONT-FAMILY: 楷体_GB2312; mso-hansi-font-family: 华文中宋; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt;">毒霸的套装可以期待一下,希望把清理专家<span lang="EN-US">2.x</span>也整合进去哈<span lang="EN-US"><p></p></span></span></b></p>

怀念依旧 发表于 2007-11-22 14:21:54

<p class="MsoNormal" align="left" style="MARGIN: 0cm 0cm 0pt; TEXT-ALIGN: left; mso-pagination: widow-orphan;"><b style="mso-bidi-font-weight: normal;"><span style="FONT-SIZE: 12pt; COLOR: #943634; FONT-FAMILY: 楷体_GB2312; mso-hansi-font-family: 华文中宋; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt;">其实吧,瑞星真的不怎么样 杀也杀不了什么东西<span lang="EN-US"><span style="mso-spacerun: yes;">&nbsp; </span></span>我想用金山的去试试,感觉金山的还不错。<span lang="EN-US"><p></p></span></span></b></p>
页: [1] 2
查看完整版本: 不可阻挡的趋势——ARP防火墙