Linux环境下NAT服务与安全研究  

Study on NAT Service and Security Policy under Linux

作　　者：杨明华[1] 王云会[2] 郑建群[1] 王振海[3] 

机构地区：[1]第二炮兵装备研究院,北京100085 [2]北京工商大学计算机与信息工程学院,北京100048 [3]海军工程大学勤务学院,天津300450

出　　处：《信息安全与技术》2014年第7期52-57,共6页

基　　金：国家自然科学基金项目(61063042);中国博士后科学基金项目(201104753);北京市自然科学基金项目(4132025)

摘　　要：最早NAT是用来解决互联网IP耗尽问题的,随着网络技术的发展、安全需求的提升,NAT逐渐应用到防火墙技术里,把个别IP地址隐藏起来不被外部发现,使外部无法直接访问内部网络设备,从而成为了隔离内外网络、保障网络安全的一种手段。本文基于Linux平台环境详细阐述了NAT服务的技术原理,通过应用实例描述了NAT配置、管理过程,分析了存在的安全问题。The earliest NAT technology is used to solve the problem of Internet IP exhaustion. With the development of network technology, security requirements are enhanced deeply. NAT technology is gradual y applied to the firewal inside. Some IP addresses is hidden from the outside, so that the external network can not directly access the internal network resource. Thus NAT is becoming isolated means between inside and outside network and some networks are protected. In this paper ,Based on the Linux platform environment , the principle of NAT technology services is il ustrated and application examples is described step by step .Some security problems is analyzed.

关 键 词：NAT 网络地址转换 NAT安全 静态转换 动态转换 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]