一个基于shell script的网络层防火墙设计与实现  

Design and Implementation of Network Firewall Based on Shell Script

作　　者：张迎春[1] 王荻[1] 

机构地区：[1]上海电子信息职业技术学院计算机应用系,上海20140

出　　处：《计算机与数字工程》2011年第6期106-109,共4页Computer & Digital Engineering

摘　　要：提出了一种基于Linux内建的Netfilter/Iptables标准框架设计网络层防火墙的思路,分析了关键技术,给出了一个非常接近实际应用的基于shell脚本的企业安全网关解决方案。此网关对信任区域网络提供了基本安全防护,并且通过地址伪装和目标网络地址转换技术,定制和实现了企业内外网之间的互通互访。A design thought of a network firewall based on Linux built-in standard framework of Netfilter/Iptables was put forward,the key technology was analysed,then a solution of the enterprise safety gateway which is closer to the practical application based on shell script was proposed.The gateway can not only protect the trusted region,but can custom and implement the communication between the internal and external networks by MASQUERADE and DNAT.

关 键 词：Netfilter/Iptables框架 网络层防火墙 安全网关 信任区域 SHELL脚本 

分 类 号：TP393.8[自动化与计算机技术—计算机应用技术]