Iptables包过滤技术及其在机载网络上的实现  

Iptables packet filtering technology and its implementation on airborne network

作　　者：周斌 黄丝 赵彦斌 袁瑞阳 苏德虎 ZHOU Bin;HUANG Si;ZHAO Yanbin;YUAN Ruiyang;SU Dehu(AVIC Xi’an Aviation Institute of Computing Technology,Xi’an 710068,China;School of Telecommunications Engineering,Xidian University,Xi’an 710071,China;Yangquan Geographic Information Center of Shanxi,Yangquan 045000,China)

机构地区：[1]中航工业西安航空计算技术研究所,陕西西安710068 [2]西安电子科技大学通信工程学院,陕西西安710071 [3]山西省阳泉市地理信息中心,山西阳泉045000

出　　处：《现代电子技术》2018年第9期31-34,40,共5页Modern Electronics Technique

基　　金：国家重点科研项目(MJ-2014-S-37)~~

摘　　要：针对机载无线信息系统可能由地面网络技术引入网络安全威胁,因此机载网络需要对数据包进行过滤,根据规则限制数据传输。阐述了Iptables的工作原理,分析数据包过滤的规则操作及数据包的传输过程,及其在机载网络上的应用环境。对用Iptables在Linux上实现丢弃某IP数据包和阻止相关网页访问请求进行实验,在此基础上对基于Iptables的包过滤技术进行研究。Since the potential network security threats may be introduced in airborne wireless information system due to the ground network technology,it is necessary for the airborne network to filter the data packet and limit the data transmission ac-cording to the rules.The working principle of Iptables is expounded.The filtering rules operation,transmission process and ap-plication environment of data packet on airborne network are analyzed.The experiment of how to use the Iptables to realize the discarding of some IP data packets and prevention of related webpage access request on Linux was performed.On this basis,the data packet filtering technology based on Iptables is researched.

关 键 词：IPTABLES 包过滤 机载网络 LINUX 防火墙 数据包 

分 类 号：TN711-34[电子电信—电路与系统]