{"id":2271,"date":"2007-07-08T00:43:37","date_gmt":"2007-07-07T16:43:37","guid":{"rendered":"https:\/\/www.ecjtu.com\/keith\/archives\/2271"},"modified":"2007-07-31T10:04:39","modified_gmt":"2007-07-31T02:04:39","slug":"chx3-0%e9%98%b2arp%e7%9a%84%e8%ae%be%e7%bd%ae%e6%96%b9%e6%b3%95","status":"publish","type":"post","link":"https:\/\/www.ecjtu.com\/keith\/archives\/2271","title":{"rendered":"CHX3.0\u9632ARP\u7684\u8bbe\u7f6e\u65b9\u6cd5"},"content":{"rendered":"

\u767e\u5ea6\u4e91\u76d8\u4e0b\u8f7d<\/a><\/p>\n

– prior to installing CHX 3.0 please un-install any previous versions of the packet filter.
\n– you can import 2.x filter sets (.sfd or .cff files)
\n– If Allow or Deny All was used in the previous versions policies then an additional packet filter rule MUST be added allowing ARP traffic.
\n– A Dial-up or VPN node was created with a public node for dial-up interfaces (e.g. modems) and a private node for VPN
\n– The CHX RMC is now part of the main management console
\nn its default configuration the packet\/payload filter does not impose any security restrictions on any type of traffic.
\nThe CHX suite of tools is not a personal firewall and should not be used by those expecting out-of-the box security configurations or unfamiliar with TCP\/IP networking and IP security in general. Several configuration templates are provided to assist first time users in grasping CHX-I filtering concepts. These templates can be obtained in the idrci.net download area.
\nFirst time users are encouraged to make extensive use of the available logging features (and the GoTo Related Filter feature) when debugging their CHX IP security policies.
\nThe packet filter cannot facilitate address\/port translation in gateway environments. The CHX-I NAT module was designed to provide this functionality as either a stand alone or add-on to the packet filter management console.
\nThe payload filter extends the functionality of the packet filter by inspecting and editing TCP\/UDP\/ICMP data. The payload filter can trigger permissive or prohibitive packet filter rules as well as other payload rules (chained payload rule sets).
\nThe CHX suite of network and security tools can be deployed on gateways (e.g. bridge, router, NAT) or distributed on servers\/workstations.
\n– Universally designed for w2k\/win2003\/XP servers, workstations and gateways.
\n– High IP filtering granularity.
\n– Global\/Per Interface\/Per IP filter policies.
\n– Per Interface stateful options.
\n– Complete control over state transition time-outs.
\n– Allows for permissive and prohibitive policies or a combination of both.
\n– Remotely\/Centrally managed.
\n– File transfer and execution allows for remote system updates.
\n– Command line filter utility.
\n– Payload event triggers (requires CHX-I STK).
\nCHX-I; Stateful Packet Filter\u4e3aMicrosoft\u5e73\u53f0\u5e26\u6765\u4e86\u7a7a\u524d\u7684\u7075\u6d3b\u6027\u3001\u7a33\u5b9a\u6027\u548c\u6027\u80fd\uff0c\u5b83\u63d0\u4f9b\u4e86\u4e00\u4e2a\u6709\u6548\u7684*nix-style\u7684\u5305\u8fc7\u6ee4\u80fd\u529b\u3002\u4e3b\u8981\u7279\u6027\uff1a
\n* \u652f\u6301Windows 2000\/2003\/XP\u670d\u52a1\u5668\u3001\u5de5\u4f5c\u7ad9\u548c\u7f51\u5173\uff1b
\n* \u652f\u6301\u9ad8\u7b49\u7ea7\u7684IP\u8fc7\u6ee4\u7c92\u5ea6\uff1b
\n* \u652f\u6301\u5168\u5c40\/\u6bcf\u4e2a\u63a5\u53e3\/\u6bcf\u4e2aIP\u7684\u8fc7\u6ee4\u7b56\u7565\uff1b
\n* \u9488\u5bf9\u6bcf\u4e2a\u63a5\u53e3\u7684\u5168\u72b6\u6001\u9009\u9879\uff1b
\n* \u80fd\u591f\u5b8c\u5168\u63a7\u5236\u72b6\u6001\u8f6c\u6362\u8d85\u65f6\uff1b
\n* \u5141\u8bb8\u8bb8\u53ef\u7b56\u7565\u548c\u7981\u6b62\u7b56\u7565\uff0c\u6216\u4e24\u8005\u7684\u7ec4\u5408\uff1b
\n* \u80fd\u591f\u6267\u884c\u8fdc\u7a0b\u6216\u96c6\u4e2d\u5316\u7684\u7ba1\u7406\uff1b
\n* \u6587\u4ef6\u4f20\u8f93\u548c\u6267\u884c\u529f\u80fd\u5141\u8bb8\u8fdb\u884c\u8fdc\u7a0b\u7cfb\u7edf\u5347\u7ea7\uff1b
\n* \u547d\u4ee4\u884c\u8fc7\u6ee4\u5de5\u5177\uff1b
\n* \u652f\u6301\u8d1f\u8f7d\u4e8b\u4ef6\u89e6\u53d1\uff08\u8981\u6c42CHX-I STK\uff09\uff1b
\nIve tried the ones you linked. I keep running into the same problem unless I specifically allow ARP traffic.
\nThat samples already have the ARP rule…<\/p>\n

Originally Posted by VaMPiRiC_CRoW
\nThat samples already have the ARP rule…
\nHmm… the ARP rules I made have my specific MAC addresses. Its working fine so I dont see an urgent need to go back to recheck. This is one powerful program. I look forward to learning how to use it better.<\/p>\n

\u8bdd\u4e0d\u591a\u8bf4.\u770b\u56fe\u8bbe\u7f6e\u5373\u53ef<\/p>\n

\n
\"08_005055_01\"<\/a><\/div>\n
\"08_005102_02\"<\/a><\/div>\n
\"08_005107_03\"<\/a><\/div>\n
\"08_005113_04\"<\/a><\/div>\n<\/div>\n

\u4e0b\u9762\u7684\u90a3\u4e2a\u89c4\u5219\u5305\u5bfc\u5165\u65b9\u6cd5:\u5728\u7b2c\u4e00\u4e2a\u56fe\u91cc\u9762.\u540c\u6837\u5728\u53f3\u8fb9\u7a7a\u767d\u5904\u53f3\u952e\u5355\u51fb.\u9009\u62e9\u7b2c\u4e00\u4e2a\u9009\u9879\u5373\u53ef.\u5bfc\u5165\u540e\u4e0d\u7528\u8bbe\u7f6e\u5176\u4ed6.
\n\u7f51\u5173MAC\u5728\u5f00\u59cb-\u8fd0\u884c-cmd-\u8f93\u5165arp -a\u5c31\u53ef\u4ee5\u67e5\u5230<\/p>\n

 <\/p>\n

\u8fd8\u53ef\u4ee5\u4f7f\u7528LNS\u9632\u8303arp\u653b\u51fb,\u672c\u8f6f\u4ef6\u4e0d\u652f\u630164\u4f4d\u7cfb\u7edf\uff0c\u4e3a\u5305\u8fc7\u6ee4\u8f6f\u4ef6<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

\u767e\u5ea6\u4e91\u76d8\u4e0b\u8f7d – prior to installing CHX 3.0 please un-in […]<\/p>\n","protected":false},"author":1,"featured_media":2272,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[71],"tags":[761,760],"_links":{"self":[{"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/posts\/2271"}],"collection":[{"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/comments?post=2271"}],"version-history":[{"count":1,"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/posts\/2271\/revisions"}],"predecessor-version":[{"id":2276,"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/posts\/2271\/revisions\/2276"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/media\/2272"}],"wp:attachment":[{"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/media?parent=2271"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/categories?post=2271"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/tags?post=2271"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}