Linux下基于Netfilter的动态包过滤防火墙的设计与实现  

Design and implementation of dynamic packet filtering firewall based on Netfilter under Linux

作　　者：郝身刚[1] 张丽[1] 

机构地区：[1]南阳师范学院计算机科学系,河南南阳473000

出　　处：《南阳师范学院学报》2006年第6期85-88,共4页Journal of Nanyang Normal University

摘　　要：网络安全在现代社会中的地位越来越重要,动态包过滤技术作为一种更有效的防火墙技术在网络安全领域起着关键性的作用。本文在分析了动态包过滤技术的工作原理、Linux系统下Netfilter框架结构的基础上,详细讨论了动态包过滤技术基于Netfilter结构的实现方法和实现细节,并最终完成了动态包过滤防火墙的设计和实现。Today, the security of network is becoming more and more important. Dynamic packet filtering technique which acts as a more useful firewall technique plays a key role in the security of network. The article analyzes the work theory of dynamic packet filtering technique and framework of Netfilter in Linux, discusses in detail the method of implementing dynamic packet filtering technique on the basis of Netfilter. At last, the design and implementation of it is finished.

关 键 词：动态包过滤 NETFILTER 防火墙 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]