What are the network access methods for blocking Black Internet cafes?

The Black Internet cafe does not apply for any relevant certificates and is open without authorization. Opening a black Internet cafe involves the access method of the Black Internet cafe. If the Internet cafe does not have a network, it cannot be started. Black Internet cafes adopt illegal Internet cafe intervention methods. As a hot spot in Internet cafes, Black Internet cafes are blocked.

Illegal access to Black Internet cafes includes:

● 1. Proxy-based Proxy server;

● 2. Nat-based proxy server;

● 3. Illegal access by modifying the IP address and Mac address.

We will solve this problem from the following aspects.

1. IP address theft solution:

One user applies to activate an ADSL link, and connects multiple users through a self-mounted HUB under the ADSL modem. Multiple users use multiple accounts for dial-up Internet access at the same time. Potential user losses on the operator's network and network resource consumption in some locations. Each user has one VLAN or one PVC. The number of users simultaneously connected to this VLAN/PVC on the BAS device is limited to 1, so that redundant users cannot access the same simultaneously.

2. Solutions for Full Proxy and "Black Internet cafe:

(1) if it is a "black Internet cafe", it needs to proxy multiple devices to access the Internet at the same time, and its exit must have a large number of four-layer connections established with the outside world (otherwise it cannot meet the needs of Internet cafe businesses ), in this case, we can limit the number of four-layer connections on the BAS to prevent this problem;

(2) It is difficult for individual users to control the number of connections in this way if they only proxy one or two computers at the same time (their neighbors ), but at this time, there is also a defect, that is, the machine that acts as a proxy must always start up or other machines will not be able to access the Internet.

3. Application monitoring system-based solution:

For a windows user in a TCP connection from a source IP address, the identification is gradually increased as the number of IP packets sent by the user increases, if, after a period of time, a source IP address is found to have three consecutive identification changes, it means that the "Black user" has at least three users simultaneously using broadband.

Some users often apply for broadband in their own names to use the black Internet cafe due to the lack of broadband billing technology. The above blocking Black Internet cafe access methods hope to help you solve the problem of Black Internet cafe together.