Linux内核防火墙的研究与程序设计

Research and Design of Linux Kernel Firewall

首先介绍Linux防火墙Netfilter系统的结构框架特点、工作原理及其在内核中的实现机制。最后通过例子介绍如何编写自己的内核模块并将其镶嵌在Netfilter的架构中,以实现对防火墙功能的扩充。

This paper introduces the framework, working principle and implementation mechanism in kernel of the Linux firewall named netfilter and states how to write kernel module and mount it in netfilter architecture to expand the function of Linux firewall.