Break through the restrictions on Internet users in the LAN

May be now on the LAN Internet users more restrictions, such as not on some sites, can not play some games, can not be on MSN, port restrictions and so on, is generally through the proxy server software to limit, such as now talk about the most ISAServer2004, or through the hardware firewall to filter. Here's how to break the limit and need to be explained by the limitations:

One, the simple limit certain website

Unable to access, network games (such as the public) can not play, such restrictions are generally limited to access to the IP address.

This kind of restriction is easy to break through, with ordinary HTTP proxy can, or socks agent is also possible. Now the Internet to find HTTP proxy is very easy to catch a lot. You can easily access the destination Web site by adding an HTTP proxy to ie.

Ii. limitation of certain agreements

If you can not FTP, and so on, there is a limited number of network games server-side IP addresses, and these games do not support the normal HTTP proxy.

This situation can be used socks agent, with SOCKSCAP32 software, the software added to the SOCKSCAP32, through the SOCKS proxy access. General procedures can break the limit. For some games, you can consider permeosecuritydriver the software. If even socks also limit, that can use socks2http, not even HTTP also limit it.

Third, packet filtering based on the restrictions

Or some key words are banned. Such restrictions are relatively strong, generally through the proxy server or hardware firewall to do filtering. For example: Through the ISAServer2004 ban MSN, do packet filtering. This kind of restriction is more difficult to break through, the ordinary agent cannot break through the limit.

Such restrictions because of the packet filtering, can filter out the keyword, so to use the encryption agent, that is, the middle of the HTTP or socks proxy data flow through encryption, such as Springboard, Ssso,flat and so on, as long as the agent encryption can break through, with these software to cooperate with SOCKSCAP32, MSN can be on the. This kind of restriction will not work.

Iv. Port-based restrictions

Restricted some ports, the most extreme situation is limited to only 80 ports can be accessed, you can only look at the Web page, even Outlook mail, FTP are limited. Of course, for limiting several special ports, the breakthrough principle is the same.

This limit can be broken through the following methods, 1, find ordinary HTTP80 port agent, 12.34.56.78:80, like this, with Socks2http, the HTTP agent to replace Socks agent, and then cooperate with SOCKSCAP32, it is easy to break through. This type of breakthrough means that the agent in the middle walk is unencrypted. All-through software also has this function. 2, with similar flat software, with SOCKSCAP32, but do the flat agent is also the best 80 port, of course, is not 80 port does not matter, because flat also support through the ordinary HTTP proxy access, not 80 ports, you need to add a 80-port HTTP proxy. This kind of breakthrough method in the middle Walk Agent encryption, network management do not know what the data is going in the middle. Agent springboard can also do, but the agent still need 80 port. For a simple 80-port limit, you can also use some port conversion technology to break the limit. I can refer to the post below.

V. Synthesis of some of the above limitations

For example, there are restrictions on IP, there are restrictions on keywords, such as MSN, as well as restrictions on the port. In general, the second option in the fourth case will completely break the limit. As long as also allow the Internet, hehe, all the restrictions can be broken.