基于UNIX流机制的包过滤防火墙的研究及实现  

The research and implement of packets filtrating firewall based on UNIX streams mechanism

作　　者：张文彬[1] 蒋涛[1] 

机构地区：[1]电子科技大学计算机科学与工程学院,成都610054

出　　处：《计算机工程与设计》2000年第6期35-39,共5页Computer Engineering and Design

摘　　要：在现有各种防火墙技术中，包过滤防火墙具有速度快、安全性较高等优点。而现有工作站中又广泛采用的UNIX系统都是基于系统V，它们的网络协议栈采用流（STREAMS）机制实现。文中就是基于这个背景，设计并实现了包过滤防火墙。实践证明，基于流机制的包过滤防火墙具有隔离性好、通用性强、管理方便等优点。Among all kinds of firewall technology, packets filtrating firewall has the characteristic of high speed and high security. The operating system of workstations is widely based on UNIX System V, and STREAMS mechanism is adopted in the implement of their network protocol stack. In this paper, we design and accomplish a packets filtrating firewall in this condition. In practices, it can be proved that packets filtrating firewall based on streams mechanism has the merits of good isolation, high universality and easy management.

关 键 词：包过滤器 防火墙 UNIX INTERNET网 流机制 网络安全 

分 类 号：TP393.408[自动化与计算机技术—计算机应用技术]