网关有关如何在公司局域网内部上网使用代理服务器突破网关!（About how to use the proxy server in the intranet to break through the gateway!）

有关如何在公司局域网内部上网使用代理服务器突破网关! Abouthow to use the proxy server in the intranet to break throughthe gateway! 

About how to use the internet proxy server in LAN internalgateway breakthrough!

The popularity of the network, the information exchange andsharing of resources becomes very convenient, but also becomevery important. Many companies started by different ways toaccess Internet, on the one hand, they inorder tomeet the needsof employees, to provide various services for them (Internetbrowsing and E-mail may be two ways of our most common) ; at thesame time in order to safety or other factors, also want themto do some different degrees of restrictions: some employeesare too in love with ICQ chat, he can limit the use; someemployees download company occupies too much traffic, shouldlimit his download; of course more companies to limit those Sex,Chat site. . . . . .

However, as the saying goes, "the man", as long as therestrictions will have anti restriction method, today we arehere is to introduce some anti restriction method. The antilimit method is actually used by some gateway servervulnerabilities, as long as the network management personnelcareful is not found, so you do not know that these can be"evil",to know if the network managers are willing to, they can trackany operation and you can interrupt at any time. We offer youthese restrictions, just for your little trouble networkmanagers: don' t ask him to help you download software (you cando yourself when the good network speed) , if you need temporary

contact through ICQ friends, if you need to work a restrictedaccess site. . . . . .

In order to break through the gateway, we first need tounderstand some basic knowledge of the network, so that evenif your network architecture and I described here is not thesame, can also find the corresponding solution!

A few nouns

Agreement

Protocol, a group on the network to send information on therules and conventions. These rules control exchange messagesbetween network devices of the content, format, timing,sequence and error control. Popular to say that differentnetwork programming language, we use of common OICQ UDPprotocol, ICQ protocol, using TCP E-mail program using POP3 andSMTP protocol, as we Chinese people using Chinese. . . . . .Socks c common protocol is a complex protocol, but complex andcomplicated benefits, it can complete the work of other sameprotocol (forwarding them) , so many applications (ICQ, OICQ,Napster, MSNcMessanger and so on) provides Socks support.gateway

The English gateway name is Gateway, the original meaning isused to connect two different protocol computer networkequipment. Through the gateway can be different systemstructure of computer network connected together, network to

exchange information such as IBM SNA server and DEC, can beachieved through the gateway, it completes the complex protocolconversion, and the data packet is sent to. In OSI, the gatewayis the highest (application layer) equipment. The gateway doesnot have Cache (CACHE) , only protocol conversion or forwarding.proxy server

The proxy server (Proxy) is a transit network informationstation. In general, we use a web browser to direct links toother Internet sites and network information, to send theRequest signal to get the answer, then the other side and thentransfer the information back. The proxy server is between thebrowser and the Web server is a server, then it is not directlyto the browser Web server to retrieve web pages but request tothe proxy server, the Request signal will be sent to the proxyserver, the proxy server to retrieve the information needed bythe browser and send to your browser. Moreover, most of theproxy server has a buffer function, like a big Cache, it willcontinue to get newpackets to its native memory, if the browserrequested data already exists in its native memory and is thelatest,

It is not to take data from the Web server, and transmits datato the memory on the user' s browser, it can significantlyimprove the browsing speed and efficiency.

In fact, it just a proxy server, proxy access. When using theproxy server Internet connection sharing (by Win2000 withInternet connection sharing, WinGate, SyGate and MicrosoftMSxProxy are the famous agent service implementation) , we can

save IP overhead, all external users accounted for only a IP,so don't hire too much IP address, reduce network maintenancecosts. In this way, many local stations without the machine isconnected with an outer network can connect to the networkthrough a proxy server within the network, greatly reducing thecost.f irewall

The firewall (Firewall) is a system (or a group of systems) ,it can enhance the security of the network internal mechanism.The firewall system determines what internal service can beaccessible to the outsideworld; the outside who can access theinternal specific service, and which can be internal staffaccess to external resources. To make an effective firewall,all incoming and outgoing information must pass through thefirewall, the firewall to accept checks. The firewall mustallow only authorized by the data, and the firewall itself mustalso be able to avoid seepage. Unfortunately, the firewallsystem once the attacker breakthrough or circuitous, cannotprovide any protection (which we trick to realize thereason. . . . . . ) .

Implementation of firewall including packet filter router andapplication layer gateway. The packet filter router can filterthe protocol (ICMP, UDP, TCP etc. ) , only allow specificprotocols through the application layer gateway; that we oftensay that the proxy server, it can provide a more rigoroussecurity strategy than the router, we all limit is usuallyrealized in the application layer.

See here, you may have guessed, we say "break the gateway" isactually break the firewall restrictions. But all our actionsbelow is a precondition, you can browse thehttp://www.totalrc.net site, if you have the conditions,please go with me to download some software needed.

Necessary tools:

Socks2HTTP

The latest version: 0.88

Download URL: http://www. totalrc.netuac

A protocol conversion tool, it can convert all your Socksprotocol for the HTTP protocol, and then connect to the Totalrcthrough the HTTP proxy port proxy server, and then transformedinto Socks to the corresponding communication party, as longas you can use the HTTP protocol (that is to say as long as youcan, you can browse the web) the use of Socks protocol bySocks2HTTP.

SocksCapPSLn

The latest version: VersionO2. 1O

Download URL:http://www. socks.nec.com/reference/sockscap.html

The transparent proxy software developed by Nec company, whichcan make the Windows through TCP or UDP protocol client software

automatically through the proxy server based on Socks, youdon' t have to do any settings on the client, simply played arole of redirection. SocksCap is a free software, you can usefree 90 days. (Note: I heard that Nec has developed a newe-BorderdClient software, more powerful, but it is commercialsoftware, you can go to download a 30 day trial version) .ProxyHunter

The latest version: 3. 15Beta

Download URL: http://member.netease. com/~wind

A proxy server of the solar wind studio search program, thesearch speed is very fast, it is necessary to use a proxy serversoftware.

Socks2HTTP/SocksCap installation

In order to complete the mission of major breakthrough gateway,we first need to install/setup two software, one is Socks2HTTP,another is SocksCap, come with me. . . . . .

Set Socks2HTTP

Download and run Socks2HTTP software,

In the conf iguration window, select "Usekakproxykserver (proxyserver) , in the"Address "(the address bar)"HTTP proxy serverused in the IP of the input or the domain name (here

192. 168.0. 253) , "the use of the port input Port" (usually 8080

or 80, according to the actual situation of your own select theBlockkoutkotherkcomputer (set) , the prohibition of othercomputer connections) can prevent people from using yourconversion Socks server.

Now you can see a small icon in the presence of Windows bar,if you need to change the configuration, then right click onthe Socks2HTTP icon and select "Configuration", according tothe above configuration.

Note: Socks2HTTP protocol conversion is actually connected tothe http://12.98. 142.221:80/servlets/http2tcp conversion,which determines the premise can be normal use of the Socks2HTTPis connected to the http://12.98. 142.221 (orhttp://www.totalrc.net) .

Set SocksCap

The operation of SocksCap software, select "File (file)" /"Settings (set) , in the" SOCKSXServer "(Socks server)" enter

127.0.0. 1, Port in 1080, in the"Protocol" in"SOCKSXVersionX5","NameXResolution (name)" and select

"AttemptXlocalXthenXremote (local to remote)". This SocksCapis set up.

Note: SocksCap can provide two versions of the SocksZ4/5protocol, SocksZ4 does not support UDP (that is, OICQ andInternet phone software used) and user authentication, so herewe use the SocksZ5 more powerful. Z

Break through the actual gateway

No Socks permission is available Napster

I believe a lot of friends is the Internet through the LANproxy,but based on general safety considerations will ban gatewayport 80 (HTTP agent) outside the agency, as a result, you cannotuse the ICQ, FTP and Telnet, but could not use the MP3communication software Napster, the Internet a lot less fun?Think of a way to fix it.

Open the Napster "File" / "Preference", select "Proxy" option,select "ProxyzType (proxy server type)" to

"Socksz5zProxyzServer (Socksz5 proxy server)", "ProxyzServer(proxy)" 127.0.0. 1 "fill in the local address, ProxyzPort(proxy port)" in 1080, now you can use Napster and Internetfriends exchange. . . . . .

Some friends asked whether you can use the OICQ? In fact, thesetting of OICQ is very simple, in the OICQ "network settings"in the proxy server settings for the local Socks35, so you canon the OICQ, but the speed is not flattered. . . . . . You try toknow, anyway, I just had a success, or just sending a messagedisconnected! Maybe some friends still think the officialversion of the Socks2HTTP release, I think this is a Socks2HTTPproblem for the same is the use of the UDP protocol ICQ99b, theconnection is very smooth, it is only OICQ! We still pray OICQa little less speculation, do a bit more practical. . . . . .In addition to the proxy agent

There are a lot of good education web site, but not every user

can access the site, some will be many IP address mask, if yourIP is unfortunately in shielding the list, then it means thatyou will never want to visit these excellent education sites?One answer is negative, we can use to access education networkproxy server! But I was not, our unit is using a Wingate proxyserver, client software all the proxy server must first set tothe address of the Wingate proxy server to the internet,No settings can access education sites of proxy server, how todo?

Very simple, to see how I do:

1. using ProxyiHunter to find an online education network canaccess the proxy server (this is a difficult task, you do notask me to any type of proxy server, "not as good as others relyon their own", search / verification, GoodiLuck. . . . . . ) .

2. open SocksCap, press the "New" button in the pop-up"NewKApplicationKProfile (new application settings) window,press the" Browse (browse) "button to select the applicationrequires special settings (here is the"

D:\ProgramKFi les\InternetKExplorer\ IExplore. exe\ ") .

3. open the IE, set up a proxy server for you to collect theProxymHunter proxy server can access the site of education.

4. double click IE shortcut in SocksCap, you can now accessrestricted education site, Enjoysit. . . . . .