Watch out for ARP attacks on the Internet

Recently, Xinxiang routes have experienced Internet arp failures in Guangdong, Shandong, Liaoning, Hubei, Zhejiang, and other places, leading to the spread of virus attacks that disrupt the stable operation of Internet cafes. Xin Xiang has urgently announced to the company that the Agency and users should be aware of the dangers of Internet arp attacks, and should adopt effective diagnosis and countermeasures in accordance with Xin Xiang's solutions.

The problem is:

1. If the Internet cafe is occasionally disconnected, the Intranet gateway can be pinged.

2. Check the connection status in the vro system status after the router is disconnected. The WAN port of the vro is still in the connection status.

3. There is no disconnection information in the system logs.

4. After a vro is disconnected, restart the vro, or restart the photoelectric converter, or even re-unplug the network cable of the WAN port of the vro to restore the network to normal immediately.
From these phenomena, we can preliminarily determine that there is a high possibility of an Internet arp attack.

The problem of Intranet arp attacks has long been raging. I am afraid Internet cafe managers have some problems and solutions. The routing manufacturers have also done a lot of work. In addition to designing the unique functions of innate immunity, Xin Xiang routes also launched the "Xin Xiang road immune wall network tool" to completely solve the arp spoofing problem, at the same time, various other types of network attacks are also blocked and prevented through the immune network. Therefore, Intranet arp is no longer a problem.

Internet arp attacks were not very popular at first, so they did not attract enough attention. Its principle is actually the same as that of Intranet arp, except that arp's "fake Gateway" spoofs the WAN port end of the router, and "intercepting gateway data" deceives the gateway of China Telecom.

The idea for solving this problem is actually very clear. As we all know, the purpose of normal arp spoofing is to steal accounts. It is a combination of two aspects. Therefore, the problem can be solved in two ways.

Attack the arp of the WAN port. If you use a router that does not provide the innate immune function, you need to bind the mac-ip address of the Telecom gateway, the spoofing of "fake Gateway" does not work. Of course, Xin Xiang routing does not have to do this.

However, for the telecom side, it is a bit complicated to solve the deception of "intercepting gateway data. This requires the cooperation of China Telecom. In most cases, the telecom operator's technical staff have poor coverage, which is a pity. However, there are also some special cases, such as Zhanjiang Telecom, which is very responsible for binding Internet cafes. Therefore, as users, it is much easier to solve problems by coordinating with telecom operators.

But what should we do if the operator does not cooperate?

Xinxiang routing is to enable the active maintenance function of arp on the Internet in the vro. It keeps sending the correct wan port information to the gateway, reminding the telecom gateway that I am in the correct position here! Of course, this kind of active preventive measure is not strictly a cure, but is in the form of a virus saw. However, this balance can also effectively help Internet cafe users solve the problem of disconnection. In fact, Xin Xiang vro has long had such a function, as long as it is enabled accordingly.

At present, according to the Xinxiang solution, users in various regions affected by the Internet arp have been well resolved. Xin Xiang reminded Internet cafe users who are also subject to such problems to consult with relevant router manufacturers and telecom operators as soon as possible and seek solutions. Xin Xiang users can download "Internet arp attack solution" from Xin Xiang website www.nuqx.com, or call 400-706-0518 to seek technical support from the manufacturer.

Due to fierce competition, Internet cafes are not easy to operate, and various virus attacks continue to erupt, resulting in network disconnection failure, which is simply worse. Therefore, Xin believes that, to make money for Internet cafes, we must provide outstanding products. More importantly, we must ensure good and considerate services, it is not easy for anyone to take responsibility for it.

Related Articles]

• Four major actions of Xinxiang route to comprehensively improve service quality
  

• Application Value of four unique technologies of Xinxiang vro
  

• Implement routing for "soft upgrade" of ADSL