Linux下基于Netfilter个人内核防火墙的设计与实现  

Design and realization of firewall based on Netfilter individual kernel in Linux

作　　者：熊忠阳[1] 张逢贵[1] 张玉芳[1] 

机构地区：[1]重庆大学计算机学院,重庆400044

出　　处：《计算机应用》2009年第B06期95-96,99,共3页journal of Computer Applications

摘　　要：在涉及到很多基于Linux操作系统中小型后台业务系统中,根据各自不同的需求灵活开发基于个人的防火墙内核模块。在Linux操作系统下建立基于Netfilter架构的防火墙模型。在此架构下,只要具备Linux内核编程经验以及熟悉网络协议栈,就可以编写出属于个人的防火墙。Involved in a lot of Linux operating system based on the background of small and medium-sized business system, if in accordance with their different needs flexible customization based on personal firewall module, saving for the purchase of the cost of professional firewall, and not because of the deployment of professional firewall and an increase of the whole system formed a single point of failure. In this paper, in the Linux operating system, based on the structure of the Netfilter firewall model. In this framework, as long as the kenel programming experience with Linux and familiar with the network protocol stack, you can write a personal firewalt.

关 键 词：netfiler 防火墙 LINUX 内核模块 协议栈 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]