新一代的netfilter网络底层开发结构  

作　　者：张金良[1] 李中言[1] 

机构地区：[1]廊坊师范学院,廊坊065000

出　　处：《现代情报》2005年第9期43-45,共3页Journal of Modern Information

摘　　要：Linux的网络安全模块到最新的共有3个版本:ipfwadm,IPCHAINS,netfilter。只要是使用和研究过这三代网络安全模块的用户就能深刻的体会到Linux系统中网络安全的进步和Linux内核版本号的变迁一样迅速。Linux内核级的网络安全越来越完善、越来越合理、越来越易于更多的人参与进行二次开发。尤其是最后一点最为重要,一个难于扩展的框架在Linux这样一个开放源代码的空间里,无疑是暴殄天物。在原有的IPCHAINS框架中也有诸多的不合理和不明智的设计。本文将详细的描述IPCHAINS的不足与缺陷,详尽的介绍netfilter的整体框架。The network safe modular of Linux arrives, is newest to possess 3 editions ： Ipfwadm, IPCHAINS, netfilter. If the user who uses and studies this 3 acting network safe modulars only can be deep to realize the advance of network safety in Linux system, as the changes of Linux kernel edition number, is quick. The network safety of Linux kernel level is more and more perfected, is more and more reasonable is more and more easy more person participate in to go on twice development. Especially final point, the most important frame, that one is hard to expand is in the Linux space of such a open source cede, undoubtedly is Bao Tian Tian thing. In original IPCHAINS flame, also have many not reasonable and not sensible design. This paper will detailed describe IPCHAINS is below with defect, the overall frame of detailed introduction netfiher.

关 键 词：NETFILTER IPCHAINS 透明代理 Linux2.2 快速NAT ICMP 包过滤 

分 类 号：G250.73[文化科学—图书馆学]