摘要
Linux在内核中已实现了强大的防火墙机制,以2.2.x版本下的ipchains为例,通过对内核代码的分析,揭示了Linux防火墙的内核实现机制。描述了规则链的函数以及实现的基本框架,分析了不同断点数据包的处理,详细介绍了防火墙核心的数据结构和规则的应用以及和基于模块机制的动态实现机理。
Linux has realized powerful firewall system in its kernel. Implementation mechanism of ipchains——firewall in version 2.2.x by analyzing the source code is revealed. First, function of rule chains and basic frame are described, the process of data at different point are emphasized. Then kernel data structure and application of rule are introduced followed by analyzing the dynamic mechanism of module in the kernel.
出处
《计算机工程与设计》
CSCD
2004年第10期1748-1750,共3页
Computer Engineering and Design
