Windows单机版防火墙包过滤多种方案比较与实现  

COMPARISON AND IMPLEMENTATION OF MULTIPLE METHODS FOR PACKET FILTERING IN WINDOWS PERSONAL FIREWALL

作　　者：陈琪[1] 屈光[1] 高传善[1] 

机构地区：[1]复旦大学计算机科学与工程系,上海200433

出　　处：《计算机应用与软件》2005年第5期114-116,共3页Computer Applications and Software

摘　　要：本文介绍了Windows下单机防火墙的核心技术包拦截过滤的多种方案,分别阐述了每种方案的实现方法,比较几种方案的优缺点,得出各自的适用范围以及局限性,最后实现了基于NDIS中间驱动程序和Winsock2SPI技术的包过滤。Several strategies for packet filterin g in windows personal firewall environment are introduced in this essay.Then imple mentation methods for every strategy are presented respectively,including compar ing their advantages and disadvantages,applicable scope and limitations.Finally, we implement packet filtering using both NDIS mediate driver and Winsock 2 SPI i n personal firewall.

关 键 词：WINDOWS 包过滤 防火墙 方案比较 单机版 WINSOCK 中间驱动程序 SPI技术 核心技术 NDIS 优缺点 局限性 

分 类 号：TP316.7[自动化与计算机技术—计算机软件与理论] TP393.08[自动化与计算机技术—计算机科学与技术]