The ARP firewall indicates that an IP address has been attacked

It's normal for my ARP firewall old prompt to be attacked! You don't have to try to intercept it. What's more, hackers abound now, intercepting one, but not ten thousand.

Theoretically, 1M broadband can actually reach 800KB, which is good!

If you use a router, I hope you specify your own IP and don't automatically assign an IP, so that the speed will be improved! As follows:

This firewall is Kingsoft's, right? It doesn't matter, the attack it refers to is because a router is connected to several computers, this firewall defaults to a computer and a router, so if someone also uses this router to surf the Internet at the same time, the firewall will remind someone to attack you, in fact, it is not an attack, but he broke in to use your broadband.

1 person should be 128k, and the display of being attacked means that the attacker has been hit by the ARP virus, it is best to let him install an antivirus software to kill it, and if it doesn't work, redo the system.

Needless to say, some of the five of you must be making trouble. It doesn't have to be intentional, but it's possible that some of you have been poisoned, and it's better to take a better route.

The theoretical value is also about 1mbps!

First, the most fundamental way to solve ARP.

ARP spoofing and attacks are a major problem for enterprise networks. The discussion on this issue has been very deep, the mechanism of ARP attacks is well understood, and various preventive measures have emerged one after another.

But the question is, is it really getting rid of the ARP problem now? It is understood from users that although various methods have been tried, this problem has not been fundamentally solved. The reason is that there are many kinds of ARP prevention measures, one is that the prevention ability of the solution measures is limited, and it is not the most fundamental solution.

Second, it has great constraints on network management, which is inconvenient and impractical, and does not have operability. Third, some measures have a loss of efficiency in network transmission, and it is not advisable to slow down the network speed and waste bandwidth.

This article analyzes the four commonly popular measures to prevent ARP to understand why the ARP problem can never be solved. And further analyze how thorough the ARP is in the mode of the immune network, and why only the immune network can do it.

2. Protection methods for individual users.

First of all, it is important to make it clear that ARP attacks can only be carried out within a local area network, and home users without a router need not consider it.

1.Install the ARP firewall.

Nowadays, most of the security assistance software has built-in ARP firewalls, the famous ones are: 360 Security Guard (built-in), Kingsoft Shell ARP Kill, Kingsoft Guard.

2.Install anti-virus software.

Antivirus software can effectively prevent ARP viruses from entering the machine.

3.How to deal with poisoning that has already been poisoned.

Because the network speed will slow down after poisoning, the killing software will fail. Therefore, we should install antivirus software to protect the system with a special antivirus.

First, bind your IP to your Mac (static binding).

This must be a problem with the intranet, someone uses P2P terminator, Jusheng network management, these software are using the principle of ARP deception, of course, there will be a hint of ARP attack, which has been attacked on your computer, it is recommended that you use the immune network solution, which can not only intercept the virus attack from the network card but also intelligently control the speed to ensure the security and stability of the network.

Installing a color shadow antiarp firewall can basically solve the problem, the software is a paid software, such as pointing the home page to the cooperative mode can be used for free.

Although the 360 prompt was attacked by ARP and has been blocked, in fact, it has not been intercepted, and the ARP attack has occurred.

There are two reasons for this: one is that the computer is poisoned and keeps sending virus attacks; The second is that some people use speed limiting software, and the LAN speed limiting software uses the principle of ARP deception, resulting in disconnection.

It is recommended that your landlord upgrade the network to an immune network, so that each terminal has an immune function, actively defends against ARP virus attacks, intercepts P2P terminators, and ensures the stability of the network.

Install a firewall, such as Fengyun Firewall, which is free, and the effect is also good, just turn on the ARP firewall he brings when you set it up.

Find the source of the attack, notify the family, kill and disinfect at least install an ARP firewall to prevent external attacks.

Or maybe the other party uses a P2P terminator to limit your internet speed!

ARP is a "two-headed monster", and in order to completely solve it, it must be "both the beginning and the end", and there are two ways to achieve it.

First, the "guardian binding" method is used to monitor the ARP cache of the computer in real time to ensure the correct correspondence between the gateway MAC and IP in the cache. There will be a static binding in the ARP cache table, and if it is attacked by ARP, or as long as there is a request from the public network, this static binding will automatically pop out, so it will not affect the correct access to the network. This method is a manifestation of the convergence of security and NIC functions, also known as "terminal suppression".

The second is to have "integration of security and network functions" in the network access architecture, that is, when the access gateway does NAT, it is not according to the traditional routing according to the "MAC IP" mapping table to ** data, but according to their MAC in the NAT table to determine (so that as long as the data can be ** out, it must be able to come back), even if the ARP outbreak is large-scale, the ARP table is also chaotic, but it will not have any impact on our network. This approach is also the most thorough of the existing control ARPs. It is also known as an important feature of the "immune network".

Your machine is surfing the Internet in the LAN, and in the LAN where you are located, there is a machine infected with the ARP virus, and he risks your ** server, finds out the poisoned machine, and kills the virus. Serious consequences will lead to the continuous availability of machines in the local area network, which will be able to access the Internet for a while and will not be able to access the Internet for a while.