基于Linux的屏蔽子网防火墙的实现  

The Implement of Screened-subnet Firewall Based on Linux

作　　者：刘翌南[1] 阳慧[1] 傅明[1] 

机构地区：[1]长沙理工大学计算机与通信工程学院,湖南长沙410076

出　　处：《计算技术与自动化》2005年第1期122-124,127,共4页Computing Technology and Automation

摘　　要：在分析Linux防火墙基本构架的基础上,对构建基于屏蔽子网防火墙的方法进行了探讨,提出了基于Linux系统的屏蔽子网防火墙的解决方案,并对两种常见的防火墙构造方式进行了分析和比较,最后给出了具有更强防范能力的屏蔽子网防火墙的实现方法及其iptables实现脚本。In this paper,methods of constructing Screened-subnet-based Firewall are discussed on the basis of the analysis of Linux Firewall Architecture.The solution of Screened-subnet Firewall based on Linux is presented and two common firewall construction modes are analyzed and compared with each other.At last,an implementation method of Screened-subnet Firewall with more defensibility and its iptables implementation script are put forward.

关 键 词：LINUX防火墙 IPTABLES DMZ 屏蔽子网防火墙 基本构架 脚本 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]