Recommend the most effective software firewall to prevent network ARP spoofing attacks

360ARP Firewall.

Directly intercept all local and external ARP attacks at the system kernel layer, and provide accurate tracking and timely detection and killing of local ARP Trojan viruses to maintain the network.

Smooth network and secure communication. With kernel interception technology, the running speed of the machine is not affected in any way.

2. Accurately track the IP address of the attack source, so that the network management can query the attack source in time.

After an external ARP attack is intercepted, you can use the Trace IP address on the interception page to accurately locate the attack source in the LAN, so that the NMS can query it in a timely manner.

Attack sources within the LAN to solve problems in a timely manner.

3. Intercept DNS spoofing, gateway spoofing, IP conflict and other attacks.

On the basis of the previous version, it adds the interception of DNS spoofing, IP conflict attacks and other forms of attacks, multi-directional interception, and comprehensively solves the frequent problems in the LAN.

Disconnection issues. 4. The local process whitelist can be customized.

Dial-up clients can log in to the LAN and customize the process whitelist, which is more secure.

5. You can choose whether to prompt or not, which is convenient for Internet café users.

It's up to you whether to display the blocking notification, which is designed for Internet café users, and automatically blocks ARP attacks without interruption, allowing you to surf the Internet safely and without interruption.

6. New interface, new feeling.

A new interface with a fresh and unified style with 360 Security Guard.

The above introduction is the official website of **360.

Kingsoft ARP Firewall Official Version.

Dynamically identify fake gateways.

Proactively indicate the legal identity to the real gateway.

Intercept ARP attacks in both directions: External attacks and local infected attacks do not affect the use of ARP attacks.

Protect the machine from IP conflict attacks.

Attack source tracking and locking down the culprit.

Make the protected PC invisible on the LAN, and vicious attacks will not be able to start.

I know it's better to use Qihoo 360, you can try it next.

In severe cases of ARP spoofing, the network will be paralyzed.

The following options are recommended:

1.Enter arp -a in the DOS window. Check the MAC addresses corresponding to each IP address, if there are duplicate MAC addresses, ARP spoofing may exist.

2.If you install an ARP firewall, you can generally prompt an attack when there is an ARP attack**.

3.Install the "Network Health Detection Plug-in" in wfilter to detect the IP address, MAC address, and MAC vendor information of ARP attacks.

Methods to protect against ARP attacks].

The precautions described here apply to computers that have never been connected to the Internet, have never used a USB flash drive or portable hard drive, or have never used hacking software.

1.Install anti-virus software. The Network Center of Sanya College of Hainan University recommends using Kaspersky Anti-Virus and NOD32 Anti-Virus. After installing the anti-virus software, please update the virus database to the latest version and enable the anti-virus software without interruption while using the computer.

2.Install the ARP firewall software. The Network Center of Sanya College of Hainan University recommends the use of Pulse ARP Firewall, Fengyun Firewall, and 360ARP Firewall.

After installing the ARP firewall, manually set the IP address of the gateway and the MAC address of the gateway on the Settings page.

How do I check my IP address and MAC address? ]

Windows XP Users:

1.Start à Run à Enter the "cmd" command (enter only the command in quotation marks) à OK.

Click Run. Enter the "cmd" command and click OK.

2.Enter "ipconfig all" in the cmd window that opens.

3.Compare the following picture to see your MAC address.

How Do I View the IP Address and MAC Address of a Gateway? ]

1.Once on the cmd command line, enter "arp a".

2.Compare the following figure to view the gateway IP address and MAC address.

Anti-ARP with 360 guards is enough, network firewall is recommended to use Rising personal firewall, the performance is OK, quite smart.

The Kingsoft ARP firewall I use is free and has high blocking efficiency. You can also manually set an IP by yourself, and use the original NMS and DNS. In addition, you can bind the IP address to the MAC address of the NIC to effectively prevent IP conflicts.

A special move against ARP attacks, so that you will never drop under the rain of ARP attacks.

Does your LAN drop frequently? Have you been the victim of an ARP attack? Have there ever been annoying IP conflicts? If so, or just in case, see below to teach you the tricks against ARP attacks, so that you will never drop under the rain of ARP's attacks.

What happened: First. In the local area network, there are often people who use tools such as network law enforcement officers and scissor hands to restrict other people's access to the Internet.

Second. If someone is infected with a virus in the LAN, a large number of ARP attacks will be automatically sent to the LAN.

Principle: The ARP protocol is the basis for finding IP and network cards in the Windows network. So you can't get around it.

All methods of defense against ARP attacks must be licensed under the ARP protocol. As a result, the current network tools that are okay, such as 360 security guards, can only monitor the attack information, but they can't do anything about it.

Specify the IP address of the virtual NIC as the gateway of the NIC you normally use, for example, the address of your NIC is now and the gateway is, then give the new NIC address, and then right-click the new NIC to disable. This network card must be disabled, otherwise you will go to the virtual network card when you surf the Internet, in fact, it will not work.