基于linux下的包过滤防火墙ipchains与iptables的分析研究  

The Realization and Application of the Firewall of Linux

作　　者：韩珂[1] 

机构地区：[1]华北水利水电学院,郑州450011

出　　处：《中原工学院学报》2010年第3期59-63,共5页Journal of Zhongyuan University of Technology

摘　　要：分析了2.2.X内核下包过滤防火墙ipchains和2.4.X内核下iptables的工作方式.在ipchains中数据要遍历Input、forward、ouput 3个链,而在iptables中的filter的3个链则分别处理Inputf、orward、output数据;在ipchains时代,要完成NAT功能,则需要ipmasqadm与ipchains一起使用;最后分析了3种可视化的ipchains设置工具.Working principles of ipchains on the kernel of Linux 2.2.X and iptables on the kernel of Linux 2.4.X detailedly are analysed.In ipchains,data need traverse INPUT,FORWARD,OUPUT three chain,in iptables the three chain of Filter need treatment below data INPUT：handle the data which is entering local host;FORWARD：handle the data which needed routing;OUTPUT：Handling the output data.In ipchains era,to complete the NAT function,need to be used together with ipchains ipmasqadm.Finally,introduced three kinds of visible ipchains constitution tools briefly.

关 键 词：包过滤 代理服务器 IPCHAINS IPTABLES 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]