打印

[求助] ktango在吗，想请教一下CHX的问题

levith

卡饭_正式会员

Rank: 1

帖子: 62
积分: 64
技术值: 0
魅力值: 0
人气值: 0
防御装备
注册时间: 2007-3-4

1楼大中小发表于 2008-8-16 12:00 只看该作者

什么是技术？高手是怎样练就的？--- 《你尽力了吗？！》

ktango在吗，想请教一下CHX的问题

Tags: CHX ktango 置顶帖局域网金山

1：局域网过一段时间就会自动断网，把CHX关了重开就可以连上网了，难道是ARP原因？金山之类的ARP防火墙又比CHX反应慢，。。。。不知道怎么办才行
不会要我装一个LNS或COMODO吧
2：ARP规则按照置顶帖的PPT教程来设，结果断网。。。。。。
晕了，老是要停止CHX的驱动也是麻烦事啊

TOP

下载您所需要的计算机安全软件_杀毒软件_防火墙_HIPS_安全软件套装

levith

卡饭_正式会员

Rank: 1

帖子: 62
积分: 64
技术值: 0
魅力值: 0
人气值: 0
防御装备
注册时间: 2007-3-4

2楼大中小发表于 2008-8-16 12:06 只看该作者

[推荐阅读]迈进HIPS的瑰丽花园

规则使用的是官方规则，现在ARP规则被我关了

TOP

102

卡饭_见习会员

Rank: 1

帖子: 12
积分: 12
技术值: 0
魅力值: 0
人气值: 0
防御装备
注册时间: 2008-3-30

3楼大中小发表于 2008-8-16 12:10 只看该作者

不懂.帮顶.有日志贴来看看

TOP

卡饭学院电子书系列之五---主机入侵防御系统（HIPS）入门和使用

levith

卡饭_正式会员

Rank: 1

帖子: 62
积分: 64
技术值: 0
魅力值: 0
人气值: 0
防御装备
注册时间: 2007-3-4

4楼大中小发表于 2008-8-16 12:18 只看该作者

#    Date    Time    Direction    Interface    EthType    Source MAC    Destination MAC    Protocol    Flags    Source IP    Source Port    Destination IP    Destination Port    Packet size    Reason
   1 2008/08/16 12:12:37 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
   2 2008/08/16 12:12:37 Incoming IP 08 0A 11 44 3E E8 TCP SYN 221.204.106.126 14318 192.168.0.25 16689 66 Does not match allow policy
   3 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
   4 2008/08/16 12:12:37 Incoming IP 08 0A 11 44 3E E8 TCP SYN 116.19.59.132 17430 192.168.0.25 16689 62 Does not match allow policy
   5 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
   6 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
   7 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
   8 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
   9 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
10 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
11 2008/08/16 12:12:37 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
12 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
13 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
14 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
15 2008/08/16 12:12:37 Incoming IP 00 90 F5 5D 48 E9 FF FF FF FF FF FF UDP 192.168.0.111 1004 255.255.255.255 1004 89 Unsolicited UDP
16 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
17 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
18 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
19 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
20 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
21 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
22 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
23 2008/08/16 12:12:37 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
24 2008/08/16 12:12:37 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
25 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
26 2008/08/16 12:12:37 Incoming IP 08 0A 11 44 3E E8 TCP SYN 116.52.12.109 38858 192.168.0.25 16689 62 Does not match allow policy
27 2008/08/16 12:12:37 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
28 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
29 2008/08/16 12:12:36 Incoming ARP 00 15 C5 7A D1 15 FF FF FF FF FF FF 60 Does not match allow policy
30 2008/08/16 12:12:36 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
31 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
32 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
33 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
34 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
35 2008/08/16 12:12:36 Incoming IP 08 0A 11 44 3E E8 TCP SYN 121.11.182.85 2924 192.168.0.25 16689 62 Does not match allow policy
36 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
37 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
38 2008/08/16 12:12:36 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
39 2008/08/16 12:12:36 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
40 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
41 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
42 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
43 2008/08/16 12:12:36 Incoming IP 08 0A 11 44 3E E8 TCP SYN 218.58.123.94 11823 192.168.0.25 16689 78 Does not match allow policy
44 2008/08/16 12:12:36 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
45 2008/08/16 12:12:36 Incoming IP 08 0A 11 44 3E E8 TCP SYN 124.129.195.56 2018 192.168.0.25 16689 62 Does not match allow policy
46 2008/08/16 12:12:35 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
47 2008/08/16 12:12:35 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
48 2008/08/16 12:12:35 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
49 2008/08/16 12:12:35 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
50 2008/08/16 12:12:35 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
51 2008/08/16 12:12:35 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
52 2008/08/16 12:12:35 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
53 2008/08/16 12:12:35 Incoming IP 08 0A 11 44 3E E8 TCP SYN 222.134.109.199 2218 192.168.0.25 16689 78 Does not match allow policy
54 2008/08/16 12:12:35 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
55 2008/08/16 12:12:35 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
56 2008/08/16 12:12:35 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
57 2008/08/16 12:12:35 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
58 2008/08/16 12:12:34 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
59 2008/08/16 12:12:34 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
60 2008/08/16 12:12:34 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
61 2008/08/16 12:12:34 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
62 2008/08/16 12:12:34 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
63 2008/08/16 12:12:34 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
64 2008/08/16 12:12:34 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
65 2008/08/16 12:12:34 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
66 2008/08/16 12:12:34 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
67 2008/08/16 12:12:34 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
68 2008/08/16 12:12:34 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
69 2008/08/16 12:12:34 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
70 2008/08/16 12:12:33 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
71 2008/08/16 12:12:33 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
72 2008/08/16 12:12:33 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
73 2008/08/16 12:12:33 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
74 2008/08/16 12:12:33 Incoming IP 08 0A 11 44 3E E8 TCP SYN 121.27.49.86 1086 192.168.0.25 16689 62 Does not match allow policy
75 2008/08/16 12:12:33 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
76 2008/08/16 12:12:33 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
77 2008/08/16 12:12:33 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
78 2008/08/16 12:12:33 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
79 2008/08/16 12:12:33 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
80 2008/08/16 12:12:33 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
81 2008/08/16 12:12:32 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
82 2008/08/16 12:12:32 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
83 2008/08/16 12:12:32 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
84 2008/08/16 12:12:32 Incoming IP 00 19 E0 21 0E A0 FF FF FF FF FF FF UDP 192.168.0.6 137 192.168.0.255 137 92 Unsolicited UDP
85 2008/08/16 12:12:32 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
86 2008/08/16 12:12:32 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
87 2008/08/16 12:12:32 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
88 2008/08/16 12:12:32 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy
89 2008/08/16 12:12:32 Incoming IP 08 0A 11 44 3E E8 TCP SYN 122.0.245.89 29984 192.168.0.25 16689 66 Does not match allow policy
90 2008/08/16 12:12:32 Incoming IP 00 90 F5 5D 48 E9 FF FF FF FF FF FF UDP 192.168.0.111 1004 255.255.255.255 1004 81 Unsolicited UDP
91 2008/08/16 12:12:32 Incoming ARP 08 0A 11 44 3E E8 FF FF FF FF FF FF 60 Does not match allow policy

TOP

levith

卡饭_正式会员

Rank: 1

帖子: 62
积分: 64
技术值: 0
魅力值: 0
人气值: 0
防御装备
注册时间: 2007-3-4

5楼大中小发表于 2008-8-16 12:19 只看该作者

只贴了一部分，我的MAC已经被我删了

TOP

102

卡饭_见习会员

Rank: 1

帖子: 12
积分: 12
技术值: 0
魅力值: 0
人气值: 0
防御装备
注册时间: 2008-3-30

6楼大中小发表于 2008-8-16 12:43 只看该作者

不懂.等高手

TOP

ktango

偶是卡蛋

卡饭_帮助适应会

Rank: 7 Rank: 7 Rank: 7

帖子: 19275
积分: 25251
技术值: 6
魅力值: 26
人气值: 10
防御装备
来自: 新界
注册时间: 2007-2-1

一级技术勋章杰出卡饭勋章卡饭_帮助适应会成员:引导、鼓励、融合

7楼大中小发表于 2008-8-16 13:32 只看该作者

规则看来并没有问题？楼主肯定网关的MAC地址没有错误？

What drives me on is that belief that tomorrow I’ll do things better and be a better person than I am today.

TOP

levith

卡饭_正式会员

Rank: 1

帖子: 62
积分: 64
技术值: 0
魅力值: 0
人气值: 0
防御装备
注册时间: 2007-3-4

8楼大中小发表于 2008-8-16 18:55 只看该作者

跟网关还有关系吗，ARP规则都被我关了啊

TOP

levith

卡饭_正式会员

Rank: 1

帖子: 62
积分: 64
技术值: 0
魅力值: 0
人气值: 0
防御装备
注册时间: 2007-3-4

9楼大中小发表于 2008-8-16 19:16 只看该作者

网关没设错

TOP

wwwjiaang8

卡饭_正式会员

Rank: 1

帖子: 276
积分: 276
技术值: 0
魅力值: 0
人气值: 0
防御装备
注册时间: 2007-1-19

10楼 大中小发表于 2008-8-16 19:31 只看该作者

想问下楼主用的什么规则？局域网是要打开67，68端口的

08 0A 11 44 3E E8这个是网关地址么？

TOP

免费的安全盛宴 \| 关于安全软件的12个谣言和误会~	卡巴官方最新正式版 \| 官方最新测试版	帮助他人，快乐自己 \| 助人者，人助之	91款国外杀毒软件官方介绍附优秀文章
论坛常见问题解答 \| 相逢在论坛	从杀毒软件到文化 \| 我们为什么要装防火墙	hips新手入门 \| 卡饭HIPS教程集合	病毒样本区 \| 费尔区