校园网中代理服务器和NAT设备的监控与防范  

Detection and control on proxy server and NAT equipment in compus network

作　　者：崔建[1] 钱杰[1] 张蓓[1] 

机构地区：[1]北京大学计算中心,北京100871

出　　处：《大连理工大学学报》2005年第z1期90-94,共5页Journal of Dalian University of Technology

摘　　要：在校园网中私设代理服务和NAT服务的问题长期困扰着网络管理人员,一直没有一个高效、全局的技术方案对上述问题进行有效遏制.为此,介绍了通过端口扫描及流量分析方法对代理服务器或NAT设备进行检测定位的技术思路,提出了Session控制的方法对代理和NAT服务进行防范,并在北京大学校园网千兆出口处实际采用,取得了较好的控制效果.Illegal setups of the proxy service and NAT service in campus network have been bothering the network administrators for a long time.None high-efficient,technological scheme of the overall situation has been adopted to restrict such kinds of problems.This text introduces a technical viewpoint to detect and locate the proxy server and NAT instrument by ports scanning and traffic analysis.The application of session control has been adopted on the gigabit exits of the campus network of Peking University.It can keep effective control for the proxy service and NAT service.

关 键 词：代理 NAT 端口扫描 流量分析 Session控制 

分 类 号：TP393.18[自动化与计算机技术—计算机应用技术]