潘多拉网吧防火墙 1.0 双线破解

最近网络老有点问题，朋友说是攻击,具体也不知道是不是攻击造成，网上找到了一个免费的网吧防火墙(潘多拉网吧防火墙www.chinawb.net)，可惜不支持双线，试用了几天单线还行，尤其是高级规则感觉很黄很暴力,不过没双线是很郁闷的事情。

凭借多年ros的管理经验，决定分析一把这个号称能防攻击的免费防火墙。看看究竟是个啥原理。

安装好系统以后居然没有root密码，还好到官方客服那里要到了密码"qwe123"，要不就xxx

不多废话,下面是破解过程。

步骤一、设置网络接口

这是我的接口图，网通ip是58.19.111.108网关是58.19.111.1

电信的ip是58.49.1.222网关是58.49.1.1

步骤二、查看当前路由

这个是设置了两个wan口后的路由表，可以在图中看出路由表明显的有问题，两个路由表都指向了网关,这肯定出不去了。既然有问题那我们就来修改一下

步骤三、修改路由表

默认ip是通过电信出去，所以要删除到网通的路由

routedeletedefaultgw58.19.111.1

下面这图是删除后的结果

然后添加网通的路由

routeadd-net58.16.0.0/16gw58.19.111.1

routeadd-net58.17.0.0/17gw58.19.111.1

routeadd-net58.18.0.0/16gw58.19.111.1

routeadd-net58.19.0.0/16gw58.19.111.1

routeadd-net58.20.0.0/16gw58.19.111.1

routeadd-net58.22.0.0/15gw58.19.111.1

routeadd-net58.100.0.0/15gw58.19.111.1

routeadd-net58.240.0.0/12gw58.19.111.1

routeadd-net59.80.0.0/14gw58.19.111.1

routeadd-net60.0.0.0/13gw58.19.111.1

routeadd-net60.8.0.0/14gw58.19.111.1

routeadd-net60.12.0.0/16gw58.19.111.1

routeadd-net60.13.0.0/18gw58.19.111.1

routeadd-net60.13.128.0/17gw58.19.111.1

routeadd-net60.14.0.0/15gw58.19.111.1

routeadd-net60.16.0.0/12gw58.19.111.1

routeadd-net60.55.0.0/16gw58.19.111.1

routeadd-net60.208.0.0/12gw58.19.111.1

routeadd-net60.216.0.0/15gw58.19.111.1

routeadd-net60.220.0.0/14gw58.19.111.1

routeadd-net61.4.64.0/20gw58.19.111.1

routeadd-net61.47.128.0/18gw58.19.111.1

routeadd-net61.48.0.0/13gw58.19.111.1

routeadd-net61.128.210.0/24gw58.19.111.1

routeadd-net61.133.0.0/17gw58.19.111.1

routeadd-net61.134.96.0/19gw58.19.111.1

routeadd-net61.134.128.0/17gw58.19.111.1

routeadd-net61.135.0.0/16gw58.19.111.1

routeadd-net61.136.0.0/16gw58.19.111.1

routeadd-net61.137.128.0/17gw58.19.111.1

routeadd-net61.138.0.0/17gw58.19.111.1

routeadd-net61.139.128.0/18gw58.19.111.1

routeadd-net61.148.0.0/13gw58.19.111.1

routeadd-net61.148.0.0/15gw58.19.111.1

routeadd-net61.156.0.0/16gw58.19.111.1

routeadd-net61.158.0.0/16gw58.19.111.1

routeadd-net61.159.0.0/18gw58.19.111.1

routeadd-net61.161.0.0/18gw58.19.111.1

routeadd-net61.161.128.0/17gw58.19.111.1

routeadd-net61.162.0.0/15gw58.19.111.1

routeadd-net61.167.0.0/16gw58.19.111.1

routeadd-net61.168.0.0/16gw58.19.111.1

routeadd-net61.176.0.0/16gw58.19.111.1

routeadd-net61.179.0.0/16gw58.19.111.1

routeadd-net61.180.13.0/24gw58.19.111.1

routeadd-net61.180.128.0/17gw58.19.111.1

routeadd-net61.181.0.0/16gw58.19.111.1

routeadd-net61.182.0.0/16gw58.19.111.1

routeadd-net61.189.0.0/17gw58.19.111.1

routeadd-net61.236.0.0/15gw58.19.111.1

routeadd-net61.237.148.0/24gw58.19.111.1

routeadd-net125.32.0.0/16gw58.19.111.1

routeadd-net125.58.128.0/17gw58.19.111.1

routeadd-net202.4.252.0/22gw58.19.111.1

routeadd-net202.8.128.0/19gw58.19.111.1

routeadd-net202.10.64.0/20gw58.19.111.1

routeadd-net202.14.235.0/24gw58.19.111.1

routeadd-net202.14.236.0/23gw58.19.111.1

routeadd-net202.14.238.0/24gw58.19.111.1

routeadd-net202.38.164.0/22gw58.19.111.1

routeadd-net202.63.248.0/22gw58.19.111.1

routeadd-net202.69.4.0/22gw58.19.111.1

routeadd-net202.85.208.0/20gw58.19.111.1

routeadd-net202.90.224.0/20gw58.19.111.1

routeadd-net202.91.0.0/22gw58.19.111.1

routeadd-net202.91.128.0/22gw58.19.111.1

routeadd-net202.91.176.0/20gw58.19.111.1

routeadd-net202.94.0.0/19gw58.19.111.1

routeadd-net202.95.0.0/19gw58.19.111.1

routeadd-net202.96.0.0/12gw58.19.111.1

routeadd-net202.122.32.0/21gw58.19.111.1

routeadd-net202.122.64.0/19gw58.19.111.1

routeadd-net202.123.96.0/20gw58.19.111.1

routeadd-net202.127.0.0/21gw58.19.111.1

routeadd-net202.127.212.0/22gw58.19.111.1

routeadd-net202.136.252.0/22gw58.19.111.1

routeadd-net202.180.128.0/19gw58.19.111.1

routeadd-net203.79.0.0/20gw58.19.111.1

routeadd-net203.90.0.0/22gw58.19.111.1

routeadd-net203.90.192.0/19gw58.19.111.1

routeadd-net203.93.0.0/16gw58.19.111.1

routeadd-net203.128.128.0/19gw58.19.111.1

routeadd-net203.134.240.0/21gw58.19.111.1

routeadd-net203.175.128.0/19gw58.19.111.1

routeadd-net203.175.192.0/18gw58.19.111.1

routeadd-net203.196.0.0/21gw58.19.111.1

routeadd-net203.207.64.0/18gw58.19.111.1

routeadd-net203.207.128.0/17gw58.19.111.1

routeadd-net210.12.0.0/15gw58.19.111.1

routeadd-net210.14.160.0/19gw58.19.111.1

routeadd-net210.14.192.0/18gw58.19.111.1

routeadd-net210.15.0.0/17gw58.19.111.1

routeadd-net210.15.128.0/18gw58.19.111.1

routeadd-net210.21.0.0/16gw58.19.111.1

routeadd-net210.22.0.0/16gw58.19.111.1

routeadd-net210.45.128.0/20gw58.19.111.1

routeadd-net210.51.0.0/16gw58.19.111.1

routeadd-net210.52.0.0/15gw58.19.111.1

routeadd-net210.72.96.0/20gw58.19.111.1

routeadd-net210.73.32.0/19gw58.19.111.1

routeadd-net210.74.96.0/19gw58.19.111.1

routeadd-net210.74.128.0/19gw58.19.111.1

routeadd-net210.78.0.0/19gw58.19.111.1

routeadd-net210.82.0.0/15gw58.19.111.1

routeadd-net211.64.0.0/13gw58.19.111.1

routeadd-net211.95.192.0/18gw58.19.111.1

routeadd-net211.97.245.0/24gw58.19.111.1

routeadd-net211.144.0.0/12gw58.19.111.1

routeadd-net211.163.0.0/16gw58.19.111.1

routeadd-net218.4.0.0/14gw58.19.111.1

routeadd-net218.8.0.0/14gw58.19.111.1

routeadd-net218.12.0.0/16gw58.19.111.1

routeadd-net218.21.128.0/17gw58.19.111.1

routeadd-net218.24.0.0/14gw58.19.111.1

routeadd-net218.28.0.0/15gw58.19.111.1

routeadd-net218.56.0.0/14gw58.19.111.1

routeadd-net218.60.0.0/15gw58.19.111.1

routeadd-net218.62.0.0/17gw58.19.111.1

routeadd-net218.67.128.0/17gw58.19.111.1

routeadd-net218.68.0.0/15gw58.19.111.1

routeadd-net218.96.0.0/14gw58.19.111.1

routeadd-net218.108.0.0/15gw58.19.111.1

routeadd-net218.104.0.0/16gw58.19.111.1

routeadd-net218.106.0.0/15gw58.19.111.1

routeadd-net218.108.0.0/15gw58.19.111.1

routeadd-net219.82.0.0/16gw58.19.111.1

routeadd-net219.141.128.0/17gw58.19.111.1

routeadd-net219.142.0.0/15gw58.19.111.1

routeadd-net219.154.0.0/15gw58.19.111.1

routeadd-net219.156.0.0/15gw58.19.111.1

routeadd-net219.158.0.0/16gw58.19.111.1

routeadd-net219.159.0.0/18gw58.19.111.1

routeadd-net220.192.0.0/12gw58.19.111.1

routeadd-net219.216.0.0/13gw58.19.111.1

routeadd-net220.248.0.0/14gw58.19.111.1

routeadd-net220.250.0.0/16gw58.19.111.1

routeadd-net220.252.0.0/16gw58.19.111.1

routeadd-net221.0.0.0/13gw58.19.111.1

routeadd-net221.6.0.0/16gw58.19.111.1

routeadd-net221.7.0.0/18gw58.19.111.1

routeadd-net221.7.64.0/19gw58.19.111.1

routeadd-net221.7.128.0/17gw58.19.111.1

routeadd-net221.8.0.0/15gw58.19.111.1

routeadd-net221.10.0.0/16gw58.19.111.1

routeadd-net221.11.0.0/17gw58.19.111.1

routeadd-net221.11.128.0/18gw58.19.111.1

routeadd-net221.11.192.0/19gw58.19.111.1

routeadd-net221.12.0.0/17gw58.19.111.1

routeadd-net221.13.0.0/16gw58.19.111.1

routeadd-net221.14.0.0/15gw58.19.111.1

routeadd-net221.122.0.0/15gw58.19.111.1

routeadd-net221.136.0.0/15gw58.19.111.1

routeadd-net221.172.0.0/14gw58.19.111.1

routeadd-net221.192.0.0/14gw58.19.111.1

routeadd-net221.196.0.0/15gw58.19.111.1

routeadd-net221.198.0.0/16gw58.19.111.1

routeadd-net221.199.0.0/19gw58.19.111.1

routeadd-net221.199.32.0/20gw58.19.111.1

routeadd-net221.199.128.0/18gw58.19.111.1

routeadd-net221.199.192.0/20gw58.19.111.1

routeadd-net221.200.0.0/13gw58.19.111.1

routeadd-net221.207.0.0/18gw58.19.111.1

routeadd-net221.208.0.0/14gw58.19.111.1

routeadd-net221.208.0.0/12gw58.19.111.1

routeadd-net222.32.0.0/11gw58.19.111.1

routeadd-net222.128.0.0/12gw58.19.111.1

routeadd-net222.160.0.0/14gw58.19.111.1

下图是添加好网通路由的结果

这个时候你就发现可以用上双线了,不过别高兴太早,这个时候就千万不能在去改设置了,否则路由表会改变,改了设置后好象会自动加一条到网通的路由。然后把这个脚本放到启动项里,那你就可以用双线爽了。看不懂的就直接执行我这个ro.sh脚本吧，不过要记得把网通的网关58.19.111.1替换成你自己的网关。

ro.sh

route delete default gw 58.19.111.1
route add -net 58.16.0.0/16    gw 58.19.111.1
route add -net 58.17.0.0/17    gw 58.19.111.1
route add -net 58.18.0.0/16    gw 58.19.111.1
route add -net 58.19.0.0/16    gw 58.19.111.1
route add -net 58.20.0.0/16    gw 58.19.111.1
route add -net 58.22.0.0/15    gw 58.19.111.1
route add -net 58.100.0.0/15   gw 58.19.111.1
route add -net 58.240.0.0/12   gw 58.19.111.1
route add -net 59.80.0.0/14    gw 58.19.111.1
route add -net 60.0.0.0/13     gw 58.19.111.1
route add -net 60.8.0.0/14     gw 58.19.111.1
route add -net 60.12.0.0/16    gw 58.19.111.1
route add -net 60.13.0.0/18    gw 58.19.111.1
route add -net 60.13.128.0/17  gw 58.19.111.1
route add -net 60.14.0.0/15    gw 58.19.111.1
route add -net 60.16.0.0/12    gw 58.19.111.1
route add -net 60.55.0.0/16    gw 58.19.111.1
route add -net 60.208.0.0/12   gw 58.19.111.1
route add -net 60.216.0.0/15   gw 58.19.111.1
route add -net 60.220.0.0/14   gw 58.19.111.1
route add -net 61.4.64.0/20    gw 58.19.111.1
route add -net 61.47.128.0/18  gw 58.19.111.1
route add -net 61.48.0.0/13    gw 58.19.111.1
route add -net 61.128.210.0/24 gw 58.19.111.1
route add -net 61.133.0.0/17   gw 58.19.111.1
route add -net 61.134.96.0/19  gw 58.19.111.1
route add -net 61.134.128.0/17 gw 58.19.111.1
route add -net 61.135.0.0/16   gw 58.19.111.1
route add -net 61.136.0.0/16   gw 58.19.111.1
route add -net 61.137.128.0/17 gw 58.19.111.1
route add -net 61.138.0.0/17   gw 58.19.111.1
route add -net 61.139.128.0/18 gw 58.19.111.1
route add -net 61.148.0.0/13   gw 58.19.111.1
route add -net 61.148.0.0/15   gw 58.19.111.1
route add -net 61.156.0.0/16   gw 58.19.111.1
route add -net 61.158.0.0/16   gw 58.19.111.1
route add -net 61.159.0.0/18   gw 58.19.111.1
route add -net 61.161.0.0/18   gw 58.19.111.1
route add -net 61.161.128.0/17 gw 58.19.111.1
route add -net 61.162.0.0/15   gw 58.19.111.1
route add -net 61.167.0.0/16   gw 58.19.111.1
route add -net 61.168.0.0/16   gw 58.19.111.1
route add -net 61.176.0.0/16   gw 58.19.111.1
route add -net 61.179.0.0/16   gw 58.19.111.1
route add -net 61.180.13.0/24  gw 58.19.111.1
route add -net 61.180.128.0/17 gw 58.19.111.1
route add -net 61.181.0.0/16   gw 58.19.111.1
route add -net 61.182.0.0/16   gw 58.19.111.1
route add -net 61.189.0.0/17   gw 58.19.111.1
route add -net 61.236.0.0/15   gw 58.19.111.1
route add -net 61.237.148.0/24 gw 58.19.111.1
route add -net 125.32.0.0/16   gw 58.19.111.1
route add -net 125.58.128.0/17 gw 58.19.111.1
route add -net 202.4.252.0/22  gw 58.19.111.1
route add -net 202.8.128.0/19  gw 58.19.111.1
route add -net 202.10.64.0/20  gw 58.19.111.1
route add -net 202.14.235.0/24 gw 58.19.111.1
route add -net 202.14.236.0/23 gw 58.19.111.1
route add -net 202.14.238.0/24 gw 58.19.111.1
route add -net 202.38.164.0/22 gw 58.19.111.1
route add -net 202.63.248.0/22 gw 58.19.111.1
route add -net 202.69.4.0/22   gw 58.19.111.1
route add -net 202.85.208.0/20 gw 58.19.111.1
route add -net 202.90.224.0/20 gw 58.19.111.1
route add -net 202.91.0.0/22   gw 58.19.111.1
route add -net 202.91.128.0/22 gw 58.19.111.1
route add -net 202.91.176.0/20 gw 58.19.111.1
route add -net 202.94.0.0/19   gw 58.19.111.1
route add -net 202.95.0.0/19   gw 58.19.111.1
route add -net 202.96.0.0/12   gw 58.19.111.1
route add -net 202.122.32.0/21 gw 58.19.111.1
route add -net 202.122.64.0/19 gw 58.19.111.1
route add -net 202.123.96.0/20 gw 58.19.111.1
route add -net 202.127.0.0/21  gw 58.19.111.1
route add -net 202.127.212.0/22 gw 58.19.111.1
route add -net 202.136.252.0/22 gw 58.19.111.1
route add -net 202.180.128.0/19 gw 58.19.111.1
route add -net 203.79.0.0/20   gw 58.19.111.1
route add -net 203.90.0.0/22   gw 58.19.111.1
route add -net 203.90.192.0/19 gw 58.19.111.1
route add -net 203.93.0.0/16   gw 58.19.111.1
route add -net 203.128.128.0/19 gw 58.19.111.1
route add -net 203.134.240.0/21 gw 58.19.111.1
route add -net 203.175.128.0/19 gw 58.19.111.1
route add -net 203.175.192.0/18 gw 58.19.111.1
route add -net 203.196.0.0/21  gw 58.19.111.1
route add -net 203.207.64.0/18 gw 58.19.111.1
route add -net 203.207.128.0/17 gw 58.19.111.1
route add -net 210.12.0.0/15   gw 58.19.111.1
route add -net 210.14.160.0/19 gw 58.19.111.1
route add -net 210.14.192.0/18 gw 58.19.111.1
route add -net 210.15.0.0/17   gw 58.19.111.1
route add -net 210.15.128.0/18 gw 58.19.111.1
route add -net 210.21.0.0/16   gw 58.19.111.1
route add -net 210.22.0.0/16   gw 58.19.111.1
route add -net 210.45.128.0/20 gw 58.19.111.1
route add -net 210.51.0.0/16   gw 58.19.111.1
route add -net 210.52.0.0/15   gw 58.19.111.1
route add -net 210.72.96.0/20  gw 58.19.111.1
route add -net 210.73.32.0/19  gw 58.19.111.1
route add -net 210.74.96.0/19  gw 58.19.111.1
route add -net 210.74.128.0/19 gw 58.19.111.1
route add -net 210.78.0.0/19   gw 58.19.111.1
route add -net 210.82.0.0/15   gw 58.19.111.1
route add -net 211.64.0.0/13   gw 58.19.111.1
route add -net 211.95.192.0/18 gw 58.19.111.1
route add -net 211.97.245.0/24 gw 58.19.111.1
route add -net 211.144.0.0/12  gw 58.19.111.1
route add -net 211.163.0.0/16  gw 58.19.111.1
route add -net 218.4.0.0/14    gw 58.19.111.1
route add -net 218.8.0.0/14    gw 58.19.111.1
route add -net 218.12.0.0/16   gw 58.19.111.1
route add -net 218.21.128.0/17 gw 58.19.111.1
route add -net 218.24.0.0/14   gw 58.19.111.1
route add -net 218.28.0.0/15   gw 58.19.111.1
route add -net 218.56.0.0/14   gw 58.19.111.1
route add -net 218.60.0.0/15   gw 58.19.111.1
route add -net 218.62.0.0/17   gw 58.19.111.1
route add -net 218.67.128.0/17 gw 58.19.111.1
route add -net 218.68.0.0/15   gw 58.19.111.1
route add -net 218.96.0.0/14   gw 58.19.111.1
route add -net 218.108.0.0/15  gw 58.19.111.1
route add -net 218.104.0.0/16  gw 58.19.111.1
route add -net 218.106.0.0/15  gw 58.19.111.1
route add -net 218.108.0.0/15  gw 58.19.111.1
route add -net 219.82.0.0/16   gw 58.19.111.1
route add -net 219.141.128.0/17 gw 58.19.111.1
route add -net 219.142.0.0/15  gw 58.19.111.1
route add -net 219.154.0.0/15  gw 58.19.111.1
route add -net 219.156.0.0/15  gw 58.19.111.1
route add -net 219.158.0.0/16  gw 58.19.111.1
route add -net 219.159.0.0/18  gw 58.19.111.1
route add -net 220.192.0.0/12  gw 58.19.111.1
route add -net 219.216.0.0/13  gw 58.19.111.1
route add -net 220.248.0.0/14  gw 58.19.111.1
route add -net 220.250.0.0/16  gw 58.19.111.1
route add -net 220.252.0.0/16  gw 58.19.111.1
route add -net 221.0.0.0/13    gw 58.19.111.1
route add -net 221.6.0.0/16    gw 58.19.111.1
route add -net 221.7.0.0/18    gw 58.19.111.1
route add -net 221.7.64.0/19   gw 58.19.111.1
route add -net 221.7.128.0/17  gw 58.19.111.1
route add -net 221.8.0.0/15    gw 58.19.111.1
route add -net 221.10.0.0/16   gw 58.19.111.1
route add -net 221.11.0.0/17   gw 58.19.111.1
route add -net 221.11.128.0/18 gw 58.19.111.1
route add -net 221.11.192.0/19 gw 58.19.111.1
route add -net 221.12.0.0/17   gw 58.19.111.1
route add -net 221.13.0.0/16   gw 58.19.111.1
route add -net 221.14.0.0/15   gw 58.19.111.1
route add -net 221.122.0.0/15  gw 58.19.111.1
route add -net 221.136.0.0/15  gw 58.19.111.1
route add -net 221.172.0.0/14  gw 58.19.111.1
route add -net 221.192.0.0/14  gw 58.19.111.1
route add -net 221.196.0.0/15  gw 58.19.111.1
route add -net 221.198.0.0/16  gw 58.19.111.1
route add -net 221.199.0.0/19  gw 58.19.111.1
route add -net 221.199.32.0/20 gw 58.19.111.1
route add -net 221.199.128.0/18 gw 58.19.111.1
route add -net 221.199.192.0/20 gw 58.19.111.1
route add -net 221.200.0.0/13  gw 58.19.111.1
route add -net 221.207.0.0/18  gw 58.19.111.1
route add -net 221.208.0.0/14  gw 58.19.111.1
route add -net 221.208.0.0/12  gw 58.19.111.1
route add -net 222.32.0.0/11   gw 58.19.111.1
route add -net 222.128.0.0/12  gw 58.19.111.1
route add -net 222.160.0.0/14  gw 58.19.111.1