ktango在吗，想请教一下CHX的问题(页 1) - 防火墙讨论区 - LNS & CHX-I - 卡饭论坛 _杀毒软件_防火墙_HIPS_反病毒_计算机安全

levith 发表于 2008-8-16 12:00

ktango在吗，想请教一下CHX的问题

1：局域网过一段时间就会自动断网，把CHX关了重开就可以连上网了，难道是ARP原因？金山之类的ARP防火墙又比CHX反应慢，。。。。不知道怎么办才行
不会要我装一个LNS或COMODO吧
2：ARP规则按照置顶帖的PPT教程来设，结果断网。。。。。。
晕了，老是要停止CHX的驱动也是麻烦事啊

levith 发表于 2008-8-16 12:06

规则使用的是官方规则，现在ARP规则被我关了

102 发表于 2008-8-16 12:10

不懂.帮顶.有日志贴来看看

levith 发表于 2008-8-16 12:18

#    Date    Time    Direction    Interface    EthType    Source MAC    Destination MAC    Protocol    Flags    Source IP    Source Port    Destination IP    Destination Port    Packet size    Reason
   1 2008/08/16 12:12:37 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
   2 2008/08/16 12:12:37 Incoming IP 08 0A 11 44 3E E8 TCP SYN 221.204.106.126 14318 192.168.0.25 16689 66 Does not match allow policy
   3 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
   4 2008/08/16 12:12:37 Incoming IP 08 0A 11 44 3E E8 TCP SYN 116.19.59.132 17430 192.168.0.25 16689 62 Does not match allow policy
   5 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
   6 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
   7 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
   8 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
   9 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
10 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
11 2008/08/16 12:12:37 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
12 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
13 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
14 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
15 2008/08/16 12:12:37 Incoming IP 00 90 F5 5D 48 E9 FF FF FF FF FF FF UDP 192.168.0.111 1004 255.255.255.255 1004 89 Unsolicited UDP
16 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
17 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
18 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
19 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
20 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
21 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
22 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
23 2008/08/16 12:12:37 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
24 2008/08/16 12:12:37 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
25 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
26 2008/08/16 12:12:37 Incoming IP 08 0A 11 44 3E E8 TCP SYN 116.52.12.109 38858 192.168.0.25 16689 62 Does not match allow policy
27 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
28 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
29 2008/08/16 12:12:36 Incoming ARP 00 15 C5 7A D1 15 FF FF FF FF FF FF 60 Does not match allow policy
30 2008/08/16 12:12:36 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
31 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
32 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
33 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
34 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
35 2008/08/16 12:12:36 Incoming IP 08 0A 11 44 3E E8 TCP SYN 121.11.182.85 2924 192.168.0.25 16689 62 Does not match allow policy
36 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
37 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
38 2008/08/16 12:12:36 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
39 2008/08/16 12:12:36 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
40 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
41 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
42 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
43 2008/08/16 12:12:36 Incoming IP 08 0A 11 44 3E E8 TCP SYN 218.58.123.94 11823 192.168.0.25 16689 78 Does not match allow policy
44 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
45 2008/08/16 12:12:36 Incoming IP 08 0A 11 44 3E E8 TCP SYN 124.129.195.56 2018 192.168.0.25 16689 62 Does not match allow policy
46 2008/08/16 12:12:35 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
47 2008/08/16 12:12:35 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
48 2008/08/16 12:12:35 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
49 2008/08/16 12:12:35 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
50 2008/08/16 12:12:35 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
51 2008/08/16 12:12:35 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
52 2008/08/16 12:12:35 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
53 2008/08/16 12:12:35 Incoming IP 08 0A 11 44 3E E8 TCP SYN 222.134.109.199 2218 192.168.0.25 16689 78 Does not match allow policy
54 2008/08/16 12:12:35 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
55 2008/08/16 12:12:35 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
56 2008/08/16 12:12:35 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
57 2008/08/16 12:12:35 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
58 2008/08/16 12:12:34 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
59 2008/08/16 12:12:34 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
60 2008/08/16 12:12:34 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
61 2008/08/16 12:12:34 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
62 2008/08/16 12:12:34 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
63 2008/08/16 12:12:34 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
64 2008/08/16 12:12:34 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
65 2008/08/16 12:12:34 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
66 2008/08/16 12:12:34 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
67 2008/08/16 12:12:34 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
68 2008/08/16 12:12:34 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
69 2008/08/16 12:12:34 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
70 2008/08/16 12:12:33 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
71 2008/08/16 12:12:33 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
72 2008/08/16 12:12:33 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
73 2008/08/16 12:12:33 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
74 2008/08/16 12:12:33 Incoming IP 08 0A 11 44 3E E8 TCP SYN 121.27.49.86 1086 192.168.0.25 16689 62 Does not match allow policy
75 2008/08/16 12:12:33 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
76 2008/08/16 12:12:33 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
77 2008/08/16 12:12:33 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
78 2008/08/16 12:12:33 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
79 2008/08/16 12:12:33 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
80 2008/08/16 12:12:33 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
81 2008/08/16 12:12:32 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
82 2008/08/16 12:12:32 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
83 2008/08/16 12:12:32 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
84 2008/08/16 12:12:32 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
85 2008/08/16 12:12:32 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
86 2008/08/16 12:12:32 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
87 2008/08/16 12:12:32 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
88 2008/08/16 12:12:32 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
89 2008/08/16 12:12:32 Incoming IP 08 0A 11 44 3E E8 TCP SYN 122.0.245.89 29984 192.168.0.25 16689 66 Does not match allow policy
90 2008/08/16 12:12:32 Incoming IP 00 90 F5 5D 48 E9 FF FF FF FF FF FF UDP 192.168.0.111 1004 255.255.255.255 1004 81 Unsolicited UDP
91 2008/08/16 12:12:32 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy

levith 发表于 2008-8-16 12:19

只贴了一部分，我的MAC已经被我删了

102 发表于 2008-8-16 12:43

不懂.等高手[:10:]

ktango 发表于 2008-8-16 13:32

规则看来并没有问题？楼主肯定网关的MAC地址没有错误？

levith 发表于 2008-8-16 18:55

跟网关还有关系吗，ARP规则都被我关了啊

levith 发表于 2008-8-16 19:16

网关没设错

wwwjiaang8 发表于 2008-8-16 19:31

想问下楼主用的什么规则？局域网是要打开67，68端口的

08 0A 11 44 3E E8这个是网关地址么？

levith 发表于 2008-8-16 20:36

是的

wwwjiaang8 发表于 2008-8-19 00:25

网关MAC地址都被你屏蔽掉了，网关发的ARP广播你没法接收，当然过一会儿就断网了。修改你的MAC LIST或者ARP规则。

页: [1]

卡饭论坛's Archiver

ktango在吗，想请教一下CHX的问题