LAN servers are equipped with network protection devices. I can't use routing dialing to realize two computers surfing the internet. How do I crack it?

Cracking the "network guardian", many computers continue to enjoy surfing the Internet * * * Recently, Netcom and Telecom used the "network guardian" to detect that many computers enjoyed surfing the Internet, and the detected accounts may be deactivated. In order to cope with this barbaric behavior (using full flow is our right! ), several methods are obtained through experiments, and they are open for everyone to try here.

"Network Pioneer" can judge how many computers are online by detecting the service port of SNMP (Simple Network Management Protocol), so even using an IP router is useless. However, there are ways to deal with the network elite:

1. Use an auxiliary proxy to connect two proxy servers in series.

2. Close the SNMP protocol in adsl moden, but there is no place to close the SNMP service in the management interface of adsl moden provided by telecom;

3. Add an adsl router, such as TP-LINK TL-R400, and put it between adsl moden and hub, and then make a NAT service in this router, so that the address of the ADSL cat is an address, thus solving the problem of * * * enjoying the Internet. Please note that the SNMP protocol should be turned off in the router.

4. Install WIN2000 server edition with the host computer that WIN*** enjoys, and then disable 16 1 port or 16 1 port on the firewall, and you can be safe.

Recently, users who use routing to surf the Internet will have telecom announcements and IE restricted pages, and can't browse the website normally, but they can open QQ. What is the reason? The notice explained that this was because users connected several computers in series on an ADSL line. This is the network guardian software used by telecom to monitor user ports. If you find that * * * enjoys it, it will be restricted. Let's talk about how to crack the network guardian and let the network enjoy it.

Principle analysis of network pioneer;

1。 By scanning the ADSL 16 1 port and checking the data packets, it is found that there are several different IP data packets, which are considered as * * *.

2。 Using some unknown technologies, check the port concurrency of WAN port, and consider it * * * enjoyment if there are too many. Of course, this will also have an impact on stand-alone users, so this detection method is also improving. Now it seems that this is not the way to test. For example, if I press dozens of F5 keys in a row, it won't be blocked (previously, the single machine would be locked). Therefore, I don't want to comment on those people who say that the MAC of all computers should be changed to the same method to deal with cyber soldiers. I'll try it myself.

Because the port 16 1 uses SNMP (Simple Network Management Protocol), we can turn off the SNMP protocol to filter the number of machines in the port 16 1. Telecom can get the number of machines through the analysis of LAN data, so that we can encrypt the intranet data, improve the security level of this machine, and let the network manager get the information that only one computer is online (one IP).

So there are three ways to crack the network elite:

1。 Hardware dual routing, one for dialing and one for dynamic IP, can analyze data from one route to get the number of machines, and add a route as data packet and dual-channel encryption, so the software can only detect the data of one IP. This method is very simple and easy to realize, which can be realized by ordinary computer personnel.

2。 Software single routing, close the SNMP protocol of ADSL (port 16 1 blocked), open the built-in routing, and set the MAC of ADSL.

3。 Combining methods one and two, adding a route as a dynamic IP on the basis of 2 to further encapsulate data is unique, but it seems unnecessary to do so here. If there is an idle route, you can try it or be in a bad place.

All right, let's talk about how to do it.

I use the commonly used TP8800 cat and TP 402 routers to illustrate how to set up:

1。 Double routing: mainly focus on IP settings, single routing settings are generally known, mainly focus on the MAC of cron host, because telecommunications are generally bound to MAC, by default, you can use IP address and enable DHCP. The IP of the second route cannot be in the same network segment as the first one, for example, it can be set to 10. 10。 0。 1 series, using dynamic IP, all firewalls are turned on, and DHCP is not enabled. (Note that when setting the second route, set the computer IP to 10. 10。 0。 3, otherwise you can't get into the route after setting it up, which everyone should know), and set the main computer to 10. 10。 0。 3. You can surf the Internet directly or open two routes. (There is no need to change the host IP. ) One route is 192. 168。 1。 1 one is 10. 10。 0。 1。 It would be better if there are two or one routes without SNMP protocol. Such as TP 400.

2。 How to close the SNMP protocol of ADSL? This different ADSL mode is slightly different, but it is generally not found in the webpage setting interface. For example, the closing method of Huawei MT800 ADSL is as follows (the computer is only connected to ADSL).

Start running

Coal mine management bureau

remote login

Opening192.168.1.1

Administrator (Annotation Account)

Administrator (password)

$ Modify snmp trap disable (turn off SNMP protocol)

$ delete snmp comm community private

$ delete snmp comm community public

$commit (save and exit)

give up

Setting up ADSL internal routing needs to be explained in another article.

Here is a brief explanation of the precautions, VPI and VCI, which are different from place to place. For example, 0 35 in Tai 'an, Shandong Province generally has seven interfaces. You can try one by one. If you can't access the Internet, you will know what VPI and VCI are. If you find something else, close it, or you won't be able to connect. Set it to PPPOE mode, and write the account and password correctly (given by Netcom).

This setting is correct, but I still can't surf the Internet. Why? Because most telecom enterprises are bound with the MAC of the network card, that is, only your computer can dial the Internet normally, so we must rewrite the MAC of ADSL to make it the same as the network card of the computer. The method is as follows: (for example, modify the MAC of TP8800)

Start running

telenet 192. 168. 1. 1

Output account password

A $ prompt appears and type

$do serialization (MAC of computer network card)

In this way, the "legitimate" MAC is written into ADSL. The MAC of your computer network card can see the details of ~ support ~ in the first line of local connection.

Because your network card address and ADSL address will conflict, you must temporarily change the MAC of the network card.

The method is: (take 8 139 as an example)

Right-click the local connection property to configure the advanced network address, and you can ping ADSL by modifying the network card casually.

Okay, turn on the switch, okay?