防火墙包过滤技术发展研究

Research on Technology Development of Packet Filtering in Firewall

防火墙技术主要分为包过滤和应用代理两类。从数据包结构出发,分析包过滤技术,首先提出包过滤技术的核心问题;然后在分析传统包过滤技术缺陷的基础上,详细论述了包过滤技术的两种发展趋势;最后以技术实例说明了这两种趋势的融合。

Firewall can be classified as packet filter and application agent.In this paper,the packet filter method was analyzed from the structure of data package.First the key problem of packet filter is proposed,then the two possible tendency of the packet filter method are thoroughly investigated.Finally,several cases are used to illustrate the combination of the two tendency.