w*******y
发帖数: 60932 | 1 Recertified Linksys WRT320N Dual-Band Wireless N Gigabit Router, 300Mbps 802
.11n MIMO Dual-Band Wireless LAN/Firewall Access Point & 4-Port Gigabit
Switch
DD-WRT and Tomato capable.
Coupon Code :MLC216393022512NL1
Starts On : 2/25/2011 5:00:00 AM PST limit 200 uses
$38.99 after coupon.
Link to previous WRT320N deal.
|
|
f******l
发帖数: 26 | 2 你的ID是什么呀？:
firewall
家住哪洲哪城啊？（恩，对，我就是查户口的）:
Frederick MD
平时有什么兴趣爱好啊？:
吃喝玩乐，认识朋友
(optional)籍贯专业毕业学校星座血型等（8g的不是我:
Sichuan, TJU, Biomed
你还想告诉我们什么呢？:
空闲时间虽不多，但还是好吃、贪玩。FB的事儿，愿意掺活！ |
|
M******a
发帖数: 6723 | 3 http://gb.oversea.cnki.net/KCMS/detail/detail.aspx?filename=1015377332.nh&dbcode=CMFD&dbname=CMFDREF
大学生网络“翻墙”行为研究
Reserch on the Behavior of College Students "Climbing Over the Firewall"
【作者】 徐铖铖；
【导师】 张雷；
【作者基本信息】 浙江工业大学， 新闻传播学， 2014， 硕士
【副题名】基于杭州大学生样本的分析
【摘要】 互联网的出现颠覆性地改变了人类生活的方方面面,与传统媒介相比,互联网
打破了传统的信息传播屏障,缩短了信息传播距离的同时加快了信息传播的速度,成为了
信息传播和言论表达的最广阔平台。随着时代的发展,人们对信息量的需求不断增长与
屏蔽网站、敏感词越来越多之间的矛盾日益加深,于是网络“翻墙”行为变得越来越普
遍。大学生群体在翻墙网民群体中占据了很大比例。基于大学生这个群体本身开放大胆
、容易接受新事物、追求新奇刺激,但同时他们的人生观、世界观、价值观还未成形的
特点,引导学... 阅读全帖 |
|
a***n
发帖数: 262 | 4 挖个大坑，大家都发财。 让版主们破费。
We used to use source IP based filtering,
no matter stateful firewall, or zone-based firewall,
they are still all primarily based on IP.
Now wireless looks to have potential to dominate
access layer. How the traditional IP based firewall policy
interact with controller based security?
802.1x is supposed to provide identity based access, but
how scale is it to push ACL/firewall rules from radius to
end host?
So called next-generation firewall like Palo Alto
boasts application ... 阅读全帖 |
|
y******o
发帖数: 306 | 5 项目还有几个月结束，老板怕人太少了开始招新人做过渡工作和收尾工作
照例他们还是找ICC推荐人
推荐上来的照例都是阿三，报价超高 （75-85/hr这种）
============================
上周面了俩，全白板，简历写的超级牛逼，我看了都觉得自己这些年白干了，据说电话
面试还不错，F2F来了，第一个人，还算诚实，从第三个问题开始都是sorry, I don't
know... sorry, I am not familiar with this, sorry I have no idea about this.
...
第二个人，典型外表憨厚内心狡诈，绝对不说自己不会，撑死也要说会，会你倒是说啊
，就不说，各种找借口，说什么我之前的项目都是1个月2个月6个月1年的，每次的role
都不同所以没时间深入学习....我说你简历上写了会配CISCO ASA，你给我说说L2L VPN
怎么回事，他说，我不会命令行...只会ASDM的GUI...我彻底无奈了,说那你说吧,他说
--- 我们首先配上接口地址,然后选择几项东西(he said -- we configure th... 阅读全帖 |
|
f*******r
发帖数: 976 | 6 赞，见到ICC直接挂
项目还有几个月结束，老板怕人太少了开始招新人做过渡工作和收尾工作
照例他们还是找ICC推荐人
推荐上来的照例都是阿三，报价超高 （75-85/hr这种）
============================
上周面了俩，全白板，简历写的超级牛逼，我看了都觉得自己这些年白干了，据说电话
面试还不错，F2F来了，第一个人，还算诚实，从第三个问题开始都是sorry, I don't
know... sorry, I am not familiar with this, sorry I have no idea about this.
...
第二个人，典型外表憨厚内心狡诈，绝对不说自己不会，撑死也要说会，会你倒是说啊
，就不说，各种找借口，说什么我之前的项目都是1个月2个月6个月1年的，每次的role
都不同所以没时间深入学习....我说你简历上写了会配CISCO ASA，你给我说说L2L VPN
怎么回事，他说，我不会命令行...只会ASDM的GUI...我彻底无奈了,说那你说吧,他说
--- 我们首先配上接口地址,然后选择几项东西(he said -- we ... 阅读全帖 |
|
a***n
发帖数: 262 | 7 You are apparently way ahead than me :-).
I just did some thing very similar to what you described several
weeks ago on cat6500. I did stateless firewall failover with
symmetric routing w/ eBGP. Firewall stateless because we do not want
to have layer 2 adjacency for the two firewalls in two geographically
separated locations.
差不多是这样啦。我们当时做的是在cat6k上面用vrf把lan和wan分开，然后中间是
firewall，ips是 transparent mode在firewall前面。不过是好几年前搞的东西了。
better |
|
y***n
发帖数: 100 | 8 谢谢大家的帮忙，特别是piii，流氓小兔，民工的帮忙。我终于把router搞定。
也怪我土，在/etc/config/firewall文件里，WAN zone, 加上masq =1，router就
正常工作了。看来几年前学的网络课就全交给老师了。真对不起douglas comer:)
现在还有两个技术难题，希望大家能帮忙：
1. openwrt routing速度不行，不知道是不是routing config的问题。
我的笔记本wireless上主router，可以5mbps/2mbps。可是我的PC有线接
副router，速度才2mbps/700kbps.我已经把txpower加到70。还有什么办法
能提供openwrt的速度啊？我的副router可以前是fios router,硬件还不错的啊。
2.我的/etc/init.d/firewall 每次从新启动后必须手动启动，
type 'firewall start'
有没有办法能每次boot后自动运行firewall?
如下是firewall的script.是不是把改成start=1就可以了？
START=45
st |
|
z*******w
发帖数: 79 | 9 preparing NT for a firewall
Armoring NT
Lance Spitzner
http://www.enteract.com/~lspitz/papers.html
Last Modified: 16 April, 2000
Firewalls are one of the fastest growing tools in the field
of information security. However, a firewall is only as
secure as the
operating system it resides upon. This article will take a
step by step look at how you can best armor your NT box in
preparation for a firewall. These steps can apply to any
situation, however I will be using Checkpoint Firewall 1 on
NT 4 |
|
s*********r
发帖数: 22 | 10 I don't have control of the firewall, but I can send my request to the
firewall people if I know what to ask. Regarding the question you asked, I
don't know anything other than that we are using SunOS 5.8 for the servers,
and we are trying to make the web server (outside the firewall) to talk to the
WebLogic server (behind the firewall).
Did you try to tell that the IPsec configuration is on the firewall not on
either of the web server or the WebLogic server? I know from the experience of
using |
|
t**********3
发帖数: 12623 | 11 October 4, 2013
About the Model?S fire
By Elon Musk, Chairman, Product Architect & CEO
Earlier this week, a Model?S traveling at highway speed struck a large metal
object, causing significant damage to the vehicle. A curved section that
fell off a semi-trailer was recovered from the roadway near where the
accident occurred and, according to the road crew that was on the scene,
appears to be the culprit. The geometry of the object caused a powerful
lever action as it went under the car, punching ... 阅读全帖 |
|
e***i
发帖数: 3894 | 12 【 以下文字转载自 Georgia 讨论区 】
发信人: empti (Empti), 信区: Georgia
标 题: Job Refer Available: Solutions Architect-Security
发信站: BBS 未名空间站 (Mon Mar 11 12:09:01 2013, 美东)
Solutions Architect - Security
Location US-GA-Atlanta
About the Job
Solutions Architects are part of the Akamai Professional Services team and
work directly with clients to deliver Akamai's solutions. You will be
involved with projects from design through implementation, testing and
customer sign-off. You will work independently or with... 阅读全帖 |
|
m****s
发帖数: 18160 | 13 【 以下文字转载自 Georgia 讨论区 】
发信人: empti (Empti), 信区: Georgia
标 题: Job Refer Available: Solutions Architect-Security
发信站: BBS 未名空间站 (Mon Mar 11 12:09:01 2013, 美东)
Solutions Architect - Security
Location US-GA-Atlanta
About the Job
Solutions Architects are part of the Akamai Professional Services team and
work directly with clients to deliver Akamai's solutions. You will be
involved with projects from design through implementation, testing and
customer sign-off. You will work independently or with... 阅读全帖 |
|
a*****0
发帖数: 3319 | 14 Thank you very much. When I installed the free MSE (not the free comodo
firewall yet), it said it would turn on the window firewall. The free comodo
firewall should be better than the window firewall, isn't it?
Appreciate your help. |
|
x*********n
发帖数: 28013 | 15 有几个我不知道，但是每一个都被控制了for sure。不会是几十个，就1-3个edge
router
firewall 和 router的区别其实特别小，特别是发型设备。
小型firewall会做各种事，中型会做一些基本的，大型firewall基本就是做小事，因为
需要performance，不可能一个个packet查。
中国政府做的事情其实不需要firewall，一个router random drop packet就行了，一
个policy就搞定。
全球网络只有几台core，亚洲一个，在日本，欧洲一个，大洋洲一个，非洲木有，剩下
4个在美洲，全在美国，西海岸一个，芝加哥ATT一个，东海岸一个，还有一个在北卡。 |
|
w********o
发帖数: 1231 | 16 大家如果知道最近的 Stuxnet ， 就明白了。这个病毒就是靠 U 盘传，把好多工业界
的 与世隔绝的不上网的 监控电脑都搞
瘫痪了，况且 大家的 iphone 一回家就 连上 wifi， 而且还 和 主机 sync, 太
容易了。一般家用的 firewall 都是形同虚
设， 有人版上推荐的 zumocast ， 这哥们就就是程序你直接修改你的firewall ，加
入 exception， 你自己打开那个
program folder ， 他连名字都没有换， 就叫 firewall exe， 安装的时候， 你也不
知道吧? 然后，他用 udp two way
communication 一下就从你的router 出去了， 所以你的 iphone 就直接访问了
router firewall 后面的 电脑， 神奇把？
连 port forwarding 都不用。
算了说得太多了，这些都是 三脚猫的技术，只是提醒大家不要裸奔而已。 |
|
z**r
发帖数: 17771 | 17 this is definately an advantage of transparent firewall, they don't need to
worry about the unexperienced routing daemon on the firewalls. But in most
cases, the firewalls are deployed at the network edges, that means, if they
have a good IP address design, they need only the static routes, combining
with the security rules, non-layer 2 firewall deployment is easy to be managed
?
but you may be right, I am not a security guy, hehe
routing |
|
k*****s
发帖数: 231 | 18 We used to use source IP based filtering,
no matter stateful firewall, or zone-based firewall,
they are still all primarily based on IP.
Now wireless looks to have potential to dominate
access layer. How the traditional IP based firewall policy
interact with controller based security?
802.1x is supposed to provide identity based access, but
how scale is it to push ACL/firewall rules from radius to
end host? |
|
x*********n
发帖数: 28013 | 19 1. 怎么log out，平日里的ctrl+z，ctrl+c都不管用，esc也按了，还是不行，难道只
能空格键死按？
2.我wr erase以后，重启，那个password还在，平日里confreg 0x2142，是不是
firewall的register value不一样？
3.如何看firewall的interface IP brief，比如router我用sh ip int bri，但是ASA的
貌似不行。
4.ASA里面的vlan1有什么特殊含义么？我看switch因为要trunk，所以得有native vlan
，firewall的vlan1是不是可以当普通的vlan用？
5.interface vlan设在inside我觉得挺smart的，但是可不可以设在outside？我觉得设
在outside好像很混乱，很不爽的感觉。
6. 建立VPN的时候，ASA也可以，那为什么外面有router了，里面的firewall还要这个
功能？
不好意思，问的太多了。。。 |
|
s*****g
发帖数: 1055 | 20 Hmm, I googled SSL MITM proxy ... it makes sense to me now, when firewall
sees the certificate from remote server, it will change the certificate to
self signed and then send the certificate to client (actually whether it is
self signed or not does not really matter, as long as the firewall itself is
in enterprise CA trusted chain). In a typical enterprise environment, all
devices behind firewall have certificates issued by an enterprise's own/
private CA, so the tempered remote server certifica... 阅读全帖 |
|
d*b
发帖数: 21830 | 21 不是DNS，我也碰到过，msn可以连，但web不能连，因为是什么firewall,你看看你的
windows firewall和自己装的firewall是不是打开了防止浏览器欺骗.firewall是准对
浏览器的
要DNS出问题，fterm就不work了 |
|
F***Q
发帖数: 6599 | 22
believe it or not, most firewall breaches happen inside the firewalls -
uneducated users accidentally clicked something and got Adware or rootkit
installed. No matter what firewall you use, it won't help you in these
scenarios.
my own experience, my 11 yr old windows remote desktop had been running XP
for 10 years (only upgraded to Win7 1 year ago), sitting behind a firewall
at work. the desktop maintained an uptime over 99% over the years without
any anti-virus software (except for the first 6... 阅读全帖 |
|
S*A
发帖数: 7142 | 23 我以前用过一些家庭用的 router 的 DMZ, 不是很喜欢。
主要是 DMZ 里的机器都可以访问家里的 lan 里的机器。
现在很多 router 带的 switch 都有很 fancy 的功能的。
就是可以虚拟子网，可以通过编程把不同的端口虚拟成
接在不同 switch 上面。你看一般 router 带 Wan 的口
一共 5 个端口，其实内部来说那五个端口都是一样的。
是通过编程设置成其中一个是 Wan, 其他四个加上 wireless
连到 switch 上面。把 wan 和 lan 放到不同的 switch
上面是编程设定的。
通过 openwrt 可以设置真正的 DMZ, 就是把其中一个网口
拿出来，单独给一个 switch, 然后单独给一个子网。可以设置
这个子网和家里的机器联通的规则如何。用来做对外开端口的
服务比较好。如果万一那部 DMZ 的机器沦陷了，也不能访问
到家里其他的机器。DMZ 除了做对外的服务的话，家里做
P2P 的机器也可以放到 DMZ 里面。万一 P2P 软件不太老实也
减少危害。而且用 openwrt 之类的 router DMZ 是 free ... 阅读全帖 |
|
m**t
发帖数: 1292 | 24 socks is a standard based authentication mechanism, usually
is part of the firewall functionality. Remote access users can authenticate
with SOCKS firewall (user name, passwd and so on, not sure whether have public
key based), then traverse the firewall. The attacker can try to find ur machine
's socks port and try out user name/passwd to compromise the firewall, thus
can access ur intranet or well in this case maybe ur machine itself. |
|
l***n
发帖数: 36 | 25 Then u needn't use firewall.
It's unlikely u will be attacked if u r dialing up.
Some good firewalls are ZoneAlarm, Sygate Personal Firewall,
etc. Tian1 Wang3 is also pretty good.
The one I am using is Sygate Firewall pro.
But I think it's harder to use than Tian1 Wang3. |
|
l******1
发帖数: 4 | 26 愿意花钱就用一个[网络安全]
乐意免费就用[杀毒软件]+[防火墙] +[安全助理] (任选用一个即可)
[网络安全] Kaspersky Internet Security 7.0
[杀毒软件] Symantec Norton AntiVirus 10.0.0.359 / AVG Antivirus Pro 7.5 Free
Edition / Avira AntiVir PersonalEdition Classic / avast! 4 Home Edition /
BitDefender free v10 / MicroPoint Proactive Defense Software
[防火墙] Symantec Norton Client Firewall v8.6.0.80 / Comodo Firewall Pro 3.0
.14.276 / Sygate Personal Firewall / SkyNet Firewall Athena 天网防火墙V3.0.0
.1013
[安全助理] 360安全卫士 V3.7 |
|
|
b*****s
发帖数: 93 | 28 http://www.theatlanticwire.com/global/2011/05/mystery-man-who-t
The Mystery Man Who Threw an Egg and Shoes at China's Web Censor
By Uri Friedman 11:15 AM ET
The computer scientist Fang Binxing is the architect
behind China's Great Firewall, which blocks thousands of foreign websites
and filters keyword searches for sensitive topics like Tibetan independence
or the outlawed Falun Gong spiritual movement. But on Thursday, during a
lecture at Wuhan University in Hubei province, Fang couldn't preven... 阅读全帖 |
|
g****t
发帖数: 31659 | 29 【 以下文字转载自 HUST 讨论区 】
发信人: scidem (scidem), 信区: HUST
标 题: 华科学子向GFW之父扔鞋上了《纽约时报》！！赞！！
发信站: BBS 未名空间站 (Thu May 19 22:55:47 2011, 美东)
华中科技大学学生扔鞋挑战GFW之父方滨兴。昨天在武大发生的，今天上了《纽约时报
》！！！
我为华科骄傲啊！！！看到《纽约时报》上出现Huazhong University of Science and
Technology的时候，好激动！！！
这里是扔鞋者在twitter上的照片。
里面有一段我翻译一下是这样的
在(扔鞋者扔鞋)之后的几个小时里，赞美之声如风暴般席卷中国互联网，很多这样的帖子却
被及时删除了。
那些向扔鞋者（twitter账号是@hanunyi）—— 华中科技大学学生—— 致敬的帖子里，很
多人视他为英雄，并主动提出要给他各种奖励，从iPad,名牌鞋子甚至倾慕他的女性希望“献身”，这
种肉偿被中国的互联网监管者认为是有损社会道德。（本人注：这里是对中国互联网
监管者“管得太宽”的一个讽刺和嘲笑）
Postings ... 阅读全帖 |
|
g****t
发帖数: 31659 | 30 【 以下文字转载自 HUST 讨论区 】
发信人: scidem (scidem), 信区: HUST
标 题: 华科学子向GFW之父扔鞋上了《纽约时报》！！赞！！
发信站: BBS 未名空间站 (Thu May 19 22:55:47 2011, 美东)
华中科技大学学生扔鞋挑战GFW之父方滨兴。昨天在武大发生的，今天上了《纽约时报
》！！！
我为华科骄傲啊！！！看到《纽约时报》上出现Huazhong University of Science and
Technology的时候，好激动！！！
这里是扔鞋者在twitter上的照片。
里面有一段我翻译一下是这样的
在(扔鞋者扔鞋)之后的几个小时里，赞美之声如风暴般席卷中国互联网，很多这样的帖子却
被及时删除了。
那些向扔鞋者（twitter账号是@hanunyi）—— 华中科技大学学生—— 致敬的帖子里，很
多人视他为英雄，并主动提出要给他各种奖励，从iPad,名牌鞋子甚至倾慕他的女性希望“献身”，这
种肉偿被中国的互联网监管者认为是有损社会道德。（本人注：这里是对中国互联网
监管者“管得太宽”的一个讽刺和嘲笑）
Postings ... 阅读全帖 |
|
m**********n
发帖数: 27535 | 31 During the firewall's outage, many Chinese flocked to Google+, particularly
to U.S. President Barack Obama's page. They left many comments calling for
freedom of expression, such as "the Chinese GOV doesn't represent the
Chinese people."
[More from Mashable: Facebook Brand Timelines: 6 Big Changes Every Marketer
Needs to Understand]
Beyond the Great Firewall: How China Does Social Networking [INFOGRAPHIC]
"It is important to persistently let the world know about CCP’s [Chinese
Communist Party] e... 阅读全帖 |
|
g**1
发帖数: 10330 | 32 http://www.zdnet.com/the-nsas-phony-national-firewall-proposal-
The NSA's phony national firewall proposal
Summary: According to an anonymously-sourced report in the New York Times,
the NSA wants to build a firewall/IDS/IPS around the whole United States of
America. The idea is completely ridiculous, impractical in the extreme, and
perhaps just a ruse for other operations. |
|
T*********g
发帖数: 71 | 33 Firewalls obey quantum physics, solving the conundrum black holes pose
regarding entanglement. But they pose another problem by contradicting
Einstein's well-tested "equivalence principle," which implies that crossing
a black hole's event horizon should be an unremarkable event. A hypothetical
astronaut passing across an event horizon would not even be aware of the
transit. If there were a firewall, however, the astronaut would be instantly
incinerated. Since that violates Einstein's principle, ... 阅读全帖 |
|
l******t
发帖数: 55733 | 34 Quora上的。
Jeff Nelson, former ebayer, googler. Invented chromebook
Why haven't Facebook, eBay, Twitter, and Google been successful in China?
eBay:
As far as my bona fides, I was on the China integration team for eBay and in
the room in Shanghai with Meg Whitman [more shameless name dropping on my
part] when eBay did the wire-on for China.
I somewhat disagree with Kaiser Kuo that eBay was "simply beaten by a
scrappier competitor". From what I saw, we did match fees and even changed
our business m... 阅读全帖 |
|
l******1
发帖数: 85 | 35 Do you know a business or technology professional that is currently looking
for their next career opportunity?
Hi, my name is Riz and I’m a business and technology recruiter with
Genesis10 (www.genesis10.com). I have a great career opportunity right now
with one of our key clients and I’m hoping you can refer me to someone who
would fit this role. If you are interested please send me your updated
resume in Ms Word.
Genesis10 is one of the fastest growing, privately-held business and
technology ... 阅读全帖 |
|
L*********t
发帖数: 7 | 36 Send me your resume if you want referral. Since we need to fill the position
asap, we support h1b transfer. Not sure if my manager will consider new h1b
application since it takes longer time.
Software Engineer – Java Cloud
Description:
Palo Alto Networks™ is a revolutionary and dynamic startup creating
next generation firewalls backed by Top-tier investors such as Sequoia
Capital, Greylock Partners and Globespan Capital partners. If you are a
motivated, intelligent, creative, and hard... 阅读全帖 |
|
f**a
发帖数: 10 | 37 Please PM me if you are interested. (Base Salary=80% x Total Comp
Commission=20%x Total Comp). Commission can be accelerated if finishing
over 100% of your team quota.
Job Title: Senior Systems Engineer
Location: US - CALIF, Santa Clara
Alternate Location:
Function: Sales
Position Overview
The Senior Systems Engineer (Sales Engineer) understands various complex
networking and security infrastructures being deployed by the largest
enterprise organizations. They are responsible... 阅读全帖 |
|
f**a
发帖数: 10 | 38 跟风发个招sales engineer的广告, 有很多的技术演讲的机会。Cyber Security目前相
当的火。希望有更多国人能加入到销售的行列。
PM me if interested
Job Title: Senior Systems Engineer - Security Specialist
Position ID #: PRR22381
Location: US - Remote
Alternate Location:
Function: Sales
Senior Systems Engineer –Security Specialist
Ixia (NASDAQ: XXIA) provides application performance and security resilience
solutions so that organizations can validate, secure and optimize their
physical and virtual networks. Enterprises, service ... 阅读全帖 |
|
f**a
发帖数: 10 | 39 PM me if interested
Job Title: Senior Systems Engineer - Security Specialist
Position ID #: PRR22381
Location: US - Remote
Alternate Location:
Function: Sales
Senior Systems Engineer –Security Specialist
Ixia (NASDAQ: XXIA) provides application performance and security resilience
solutions so that organizations can validate, secure and optimize their
physical and virtual networks. Enterprises, service providers, network
equipment manufacturers and governments worldwide rely o... 阅读全帖 |
|
b*****s
发帖数: 93 | 40 【 以下文字转载自 ChinaNews 讨论区 】
发信人: Bunches (Oats), 信区: ChinaNews
标 题: 鞋攻蛋袭方滨兴神秘人士现身
发信站: BBS 未名空间站 (Thu May 19 20:58:02 2011, 美东)
http://www.theatlanticwire.com/global/2011/05/mystery-man-who-t
The Mystery Man Who Threw an Egg and Shoes at China's Web Censor
By Uri Friedman 11:15 AM ET
The computer scientist Fang Binxing is the architect
behind China's Great Firewall, which blocks thousands of foreign websites
and filters keyword searches for sensitive topics like Tibetan independence
or the outlaw... 阅读全帖 |
|
a*****s
发帖数: 6260 | 41 ☆─────────────────────────────────────☆
scidem (scidem) 于 (Thu May 19 22:55:47 2011, 美东) 提到:
华中科技大学学生扔鞋挑战GFW之父方滨兴。昨天在武大发生的，今天上了《纽约时报
》！！！
我为华科骄傲啊！！！看到《纽约时报》上出现Huazhong University of Science and
Technology的时候，好激动！！！
这里是扔鞋者在twitter上的照片。
里面有一段我翻译一下是这样的
在(扔鞋者扔鞋)之后的几个小时里，赞美之声如风暴般席卷中国互联网，很多这样的帖子却
被及时删除了。
那些向扔鞋者（twitter账号是@hanunyi）—— 华中科技大学学生—— 致敬的帖子里，很
多人视他为英雄，并主动提出要给他各种奖励，从iPad,名牌鞋子甚至倾慕他的女性希望“献身”，这
种肉偿被中国的互联网监管者认为是有损社会道德。（本人注：这里是对中国互联网
监管者“管得太宽”的一个讽刺和嘲笑）
Postings hailed @hanunyi — a student at H... 阅读全帖 |
|
B*******e
发帖数: 3882 | 42 control panel/windows firewall, "exceptions", add port, and 8192 once for TC
P and for UDP
or just turn off the windows firewall and any other firewall you may be
using. |
|
q***e
发帖数: 90 | 43 Windows XP has built-in firewall, which disabled
something like ping.
You need to disable XP built-in firewall! Many services
has conflict with the firewall. |
|
z**r
发帖数: 17771 | 44 这个great wall firewall并不是普通意义上的firewall，是一整套系统，从它的工作特
点你就应该看出，一般要被terminated的时候，总是几十秒之后，哪个实时的系统能这样
？
你对tap的理解是正确的，但是你不能主观臆断tap以后就只能监听不能控制。tap只是一
个技术手段（其实也没什么技术在里面），来得到一个流量的copy，监听系统对于这个
copy进行分析以后，may or may not对你真正流量进行任何控制，这基本上根IPS的道理
一样。也是俺开始为什么说，GWF应该是这么一套大规模的分布式的IPS这样的系统，而不
是一个简单的layer 7 firewall。这套系统最复杂的部分应该是两个，一个是
classification，一个是
scalability。至于去控制IP session，实在没有什么复杂的（因为它的控制相对很简单
）
老
阻
把
危
证
站
有
很
达 |
|
s*****g
发帖数: 1055 | 45 If DNS root (BTW, why necessarily DNS root? it applies to any level of DNS server) not accessible, you still can access internet via plain IP addresses, firewall has nothing to do with DNS.(Well, I am talking about concepts only, you do need to take care of DNS when configuring firewall depends where your DNS server is placed, but that is specific implementation, not the "general" topic we are talking about right now).
Why don't you read up some introductory firewall books first and then you
can |
|
n*****y
发帖数: 71 | 46 1. ping to each other to verify network connectivity first
2. if ping results are Ok, try to access the folder via run rather than
network browser in windows, type in \\remote host ip\share folder name in
the run window. if it fails, check windows firewall or any client based
firewall setting
3. if ping failes, and both PCs are in the same subnet, check windows or any
client based firewall setting; if in two different two subnet, try to
access the shared folder via Run, if it fails again, check |
|
x*********n
发帖数: 28013 | 47 192.168.x。x
first of all, this is a private IP, how can you reach a private IP when you
are outside of the network?
For internet users to access the website, they are hitting the public IP
first, then NAT to private, firewall or router usually do the NAT job.
Most likely, check your firewall.
for internal visit, firewall rule is also possible if you and the server are
under the different area, server usually located at DMZ zone, you are user
zone.
To isolate the issue, connect you PC to switch, ... 阅读全帖 |
|
f**a
发帖数: 10 | 48 Please PM me if you are interested. (Base Salary=80% x Total Comp
Commission=20%x Total Comp). Commission can be accelerated if finishing
over 100% of your team quota.
Job Title: Senior Systems Engineer
Location: US - CALIF, Santa Clara
Alternate Location:
Function: Sales
Position Overview
The Senior Systems Engineer (Sales Engineer) understands various complex
networking and security infrastructures being deployed by the largest
enterprise organizations. They are responsib... 阅读全帖 |
|
x*********n
发帖数: 28013 | 49 ###大环境变化。
DC-----》cloud
以前大家enterprise都是自己的DC，现在好了，租一个AWS，MSFT搞定。
###小环境变化。
router，switch， firewall，之间的区别越来越小，几乎是同化了。
现在的走向是，
AWS继续市场第一，MSFT第二，IBM第三，各个增长都是20%+，市场空间很大。
enterprise的switch在下降，但是DC的switch在增长，传统厂商几乎都是靠DC这些东西
吃饭现在。
router，switch，firewall越来越同化，基本上，router上有FW feature，FW上也有
switch，router的feature。未来的局势是。server + 软件。
为啥呢？因为total ownership cost少。1. 我server买了，3年合同以后可以自行切换
。前三年load cisco的virtual router，后三年load juniper的virtual switch。再过
三年load palo alto的virutal firewall 2. 设备performance更新，只需要换... 阅读全帖 |
|
