Linux下基于Netfilter/Iptables防火墙的研究与应用  

Research and application of Netfilter/Iptables firewall based on Linux

作　　者：余飞[1] 杨波 

机构地区：[1]安徽电子信息职业技术学院,安徽蚌埠233060 [2]山西移动通信有限责任公司,太原030012

出　　处：《齐齐哈尔大学学报（自然科学版）》2015年第3期53-58,共6页Journal of Qiqihar University(Natural Science Edition)

基　　金：安徽省自然科学研究项目<基于web和zigbee技术的以家庭模式为切入点的光伏照明系统的设计与实现>(KJ2013B017)

摘　　要：在对Linux下netfilter/iptables防火墙工作机制进行分析的基础上,提出了能够提高防火墙数据匹配效率的FLC(First-Last-Characters)算法,并在netfilter/iptables防火墙中,与BMHS算法进行了对比测试。测试结果表明,这种算法能够有效地提高防火墙的性能,具有一定的应用价值。Along with the computer network security being increasingly precarious, the performance requirement for the firewall has to meet more strict demands. This paper, based on the analysis of the mechanism of Netfilter/Iptables Firewall under Linux, proposes FLC(First-Last-Characters) algorithm which can improve the matching efficiency of firewall data and has brought comparative test with the BMHS algorithm in the netfilter/iptables firewall. The test results show that this algorithm can effectively increase firewall performance and has a certain application value.

关 键 词：防火墙 NETFILTER/IPTABLES BMHS FLC 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP316.81[自动化与计算机技术—计算机科学与技术]