基于反向连接、HTTP隧道和共享DNS的防火墙穿透技术  

The firewall penetrating techniques based on the inverse connection,HTTP-tunnel and sharing DNS

作　　者：刘静[1] 裘国永[1] 

机构地区：[1]陕西师范大学计算机科学学院,陕西西安710062

出　　处：《郑州轻工业学院学报（自然科学版）》2007年第5期57-59,共3页Journal of Zhengzhou University of Light Industry:Natural Science

摘　　要：基于防火墙的基本原理,通过分析防火墙穿透的主要技术,利用防火墙的可信关系,实现了反向连接加HTTP隧道和共享DNS套接字句柄来穿透防火墙.在Windows XP系统中共享套接字句柄可顺利完成,但在Windows 2000系统下尚不能顺利接收数据包,有待后续研究.Based on the basic firewall principle, firstly, the main firewall penetrating techniques was analysed. Then using inverse connection and HTYP - tunnel to pass through firewalls was proposed, and realizes sharing DNS socket handle technique. It results well in Windows XP but expresses not so efficiently in Windows 2000, so it will be the next research.

关 键 词：防火墙穿透 HTTP隧道 HTTP端口复用技术 DNS 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]