浅谈Linux防火墙Netfilter/Iptables在网络安全中的应用  

Discussion on the Application of Linux Firewall Netfilter/Iptables in Network Security

作　　者：刘陆民 LIU Lu-min(Xinyang Agriculture and Forestry University,School of information engineering,Xinyang Henan 464000)

机构地区：[1]信阳农林学院信息工程学院,河南信阳464000

出　　处：《数字技术与应用》2018年第2期199-200,共2页Digital Technology & Application

基　　金：信阳农林学院2015年度青年科研基金项目(201501014)

摘　　要：近些年随着互联网的飞速发展,人们利用互联网学习提升自己的知识水平,网络在给人们带来方便的同时也会带来一些安全隐患,像比特币事件、勒索病毒等。为避免用户的计算机遭受网络攻击,防火墙显得尤为重要。防火墙Netfilter模块存在于Linux内核当中,其扩展性很强,本文通过对Linux内核模块Netfilter深入研究,从防火墙策略和iptables的用户空间等方面考虑,过滤网络常用的应用程序像MSN、PPS、Thunder,并通过测试证明iptables在实际应用中的有效性和可靠性。In recent years,with the rapid development of Internet,people use the Internet to learn and improve their knowledge level.The Internet brings convenience to people,but it also brings some security risks,such as bitcoin events,ransom virus and so on.In order to avoid network attacks on users'computers,firewalls are particularly important.The firewall Netfilter module in the Linux kernel,the strong expansibility,based on the research of Linux Netfilter kernel module,considering the firewall strategy and iptables user space etc,the application of commonly used filter network like MSN,PPS,Thunder,and iptables through the test in the practical application of validity and reliability.

关 键 词：Netfi lter 过滤 网络攻击 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]