Break through restrictions on Internet users by LAN

Talk HowBreakthrough LanRestrictions on Internet users

Maybe nowLanThere are many restrictions on Internet users, such as websites, games, MSN, and port restrictions, which are generally restricted by software on the proxy server, for example, the most talked ISA Server 2004, or the hardware firewall is used for filtering. Next, let's talk aboutHowTo break through the restrictions, we need to explain the following conditions:

1. Some websites cannot be accessed, and online games (such as the Internet) cannot be played. These restrictions generally restrict the IP addresses to be accessed.

This type of restriction can be easily broken through. You can use a common HTTP proxy or socks proxy. Now it is easy to find an HTTP proxy on the Internet. You can easily access the target website by adding an HTTP proxy to IE.

2. Some protocols are restricted, such as the failure of FTP, and the restriction on the server IP addresses of some online games, which do not support common HTTP proxies.

In this case, you can use socks proxy and sockscap32 software to add the software to sockscap32 and access it through socks proxy. General programs can break through the limitation system. For some games, you can consider the permeo Security driver software. If Socks is restricted, use socks2http instead of HTTP.

3. restriction based on packet filtering or some keywords are forbidden. This type of restriction is strong. It is usually filtered by the proxy server or the hardware firewall. For example, we use ISA Server 2004 to disable MSN and perform packet filtering. Such restrictions are hard to break through, and ordinary agents cannot break through them.

Because of the packet filtering, this type of restriction can filter out keywords, so you need to use an encrypted proxy. That is to say, the data stream of the HTTP or socks proxy in the middle is encrypted, such as stepping stone, ssso, and flat, as long as the proxy is encrypted, it can be broken through. With these software and then with sockscap32, MSN can be used. This type of restriction does not work.

4. Port-based restrictions restrict certain ports. The most extreme condition is that only port 80 can be accessed, so you can only view the webpage, even outlook receiving and FTP restrictions. Of course, the principle of breakthrough is the same for limiting several special ports.

This restriction can be broken through the following methods: 1. Find the proxy of the common http80 port, 12.34.56.78: 80. In this case, use socks2http to replace the HTTP proxy with the socks proxy, then, with sockscap32, it is easy to break through. The proxy used in such breakthrough measures is not encrypted. Tongtong software also has this function. 2. Use flat software and sockscap32, but the flat proxy should be port 80. Of course it is not port 80, because flat also supports access through common HTTP proxy, if it is not port 80, you need to add an HTTP proxy with port 80. This kind of breakthrough method uses proxy encryption, and the network management does not know what the data is in the middle. The proxy stepping stone can also be done, but the proxy still needs port 80. For port 80 restrictions, some port conversion techniques can be used to break through the restrictions.

5. The preceding restrictions are comprehensive, such as IP address restrictions and restricted keywords, such as MSN mails and port restrictions.

Generally, the second method in the fourth case can completely break through the restrictions. As long as Internet access is permitted, all restrictions can be broken.

6. Another scenario is that you cannot access the Internet at all. You are not authorized to access the Internet or use an IP address or bind the IP address to the MAC address.

Two methods:

1. You should have good friends in the company. You can find a machine that can access the Internet and use a channel to install a small software to solve the problem, flat should be okay. If there is a key, no one else can access it, and you can define a port by yourself .. Other software that supports this method can also. I conducted a test as follows:LanEnvironment, there is a proxy server, limited part of the IP address, give internet access permissions, while the other part of the IP address cannot access the Internet, in the hardware firewall or proxy server restrictions. I think it's useless to bind a MAC address to an IP address.

InLanSet up a machine that can access the Internet, set the IP address of my machine to be inaccessible, and then install the flat server program for the machine that can access the Internet, which is only over 500 K, the local machine uses the flat client and uses sockscap32 to add some software, such as IE, to test the connection. The speed is very fast, and the data transmission is still encrypted, which is very good.

2. Do a good job with the network administrator. Everything can be done. The network administrator has all the permissions and can leave no restrictions on your IP address, provided that you do not need to bother the network administrator or affect the network administrator.Lan. This is the best solution.