对几种穿透防火墙技术2（Several penetration firewall technologies 2）.docVIP

对几种穿透防火墙技术2（Several penetration firewall technologies 2） D0000D sent to the forum ------------------------------------------------------- No2 plate technical articles D8888D post title ------------------------------------------------------- Several penetration firewall technologies D8888D new content ------------------------------------------------------- Here are some notes and some ideas about several penetration techniques: The firewall is one of the basic network security strategy, it can prevent the external network users do not trust access to the internal network users, if the communication between the users of the network with the user initiated by the users of the network, communication is usually firewall blocking, especially for the TCP connection is sensitive, so if we can guarantee the normal data transmission. Especially the non active connection situation, how to ensure safety and stability of connection and data communication? People use penetration firewall technology (commonly used): 1. reverse connection request ------ initiated by the user, the X firewall rules, is to allow safe 2.HTTP tunnel technology ------ is to transfer all the data are encapsulated into Http protocol for transmission 3. port ------ multiplexing technology called port hijacking,. The principle is mainly to modify port attributes to achieve port binding. This technology is usually transformed by the host when accepting foreign packets, and then accepted by the user 4. sharing DNS socket handle ------ technology which is mainly used for the DNS service is all firewall immune function to achieve, and the characteristics of DNS technology or socket handle with UDP communication (back through some code references to illustrate ZwelL) Today we focus on several combinations of penetration firewall technology 1. reverse connect with HTTP tunneling technology A reverse connection is a connection request initiated by an internal network user that is legal under the firewall rule and a