防止局域网内的ARP欺骗

Prevent the LAN ARP Deception

说起ARP病毒,大家一定不陌生,但是最近它又有新的举动,那就是结合网页木马,不仅会导致网络访问中断,而且还会让更多的客户机只要访问了指定的页面就会自动下载木马进行安装。这种危害尤其表现在提供了IIS服务的局域网中,例如在局域网中某台服务器安装了IIS服务,提供WWW访问,那么该病毒就可能会攻击该台服务器,只要用户访问了该台服务器上安装的网站,就会自动在网页中加上一段代码,从而实现自动网页挂马,而直接在网站源文件中查却很难找出蛛丝马迹。现我校也开始发现某些宿舍楼校园网用户出现掉线的故障,经调查发现,该故障应该是ARP病毒所致。今天我们就和大家一起来解决这个问题。

Speaking of ARP virus, we must not unfamiliar, but recently it has new moves, that is, combining website Trojans, network access will not only lead to disruption, but it will also allow more customers to visit as long as a designated machine Pages will automatically download Trojan installed. This particular performance against the IIS in the provision of services in the LAN. For example, in a LAN servers installed IIS services, visit WWW, then the virus may attack the server, as soon as the user visited the server installed on the web site, it will automatically add a section of the web site code, thus achieving automatic website linked to Ma, and directly in the source file search site it is difficult to find clues. Now I also began to find that certain school dormitory campus network users in the relation of the fault, the investigation found that the fault is caused by the virus ARP. Today, we are all together on and solve this problem.