RedHat As 5下L7-filter封包过滤的搭建应用  

Implementation and application of L7-filter based on RedHat As 5

作　　者：李剑[1] 罗洪梅 

机构地区：[1]重庆工程职业技术学院计算机系,重庆400037 [2]重庆渝北区龙山中学,重庆401147

出　　处：《计算机应用》2009年第B06期114-115,121,共3页journal of Computer Applications

摘　　要：分析了Linux netfilter/iptables架构下L7-filter的功能、工作原理和实现机制,利用iptables的独立模块L7-fiter实现了具有封锁MSN、QQ等P2P封包过滤功能,并进行相关测试。测试结果表明,该layer7的封包过滤可以在具有网络地址转换(NAT)功能的防火墙体系上实现,限制对P2P等大流量数据对网络带宽的占用,使得网络运行更加高效稳定。This paper analyzed the function, working principles and mechanism of L7-filter under the framework of Linux netfiher/iptables, realized filtering of the P2P packets which could blockade MSN and QQ by use of independent modules L7- fiter of iptables, and did related tests. The results of tests show that this packet filter could be realized in the firework systems which could translate network address, and restrict the occupation of network bandwidth from large flow of data such as P2P in order to make the network work more efficient and stable.

关 键 词：内核 七层过滤 IPTABLES 网络地址转换 P2P 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]