桥式网络防火墙的设计技术

The Design Technology of Firewall Based on Net Bridge

为解决局域网的安全以及linux防火墙策略配置难的问题,在分析Linux以太网桥的基础上,以包过滤为例介绍了在Linux操作系统下实现网桥防火墙的方法。同时通过socket编程,实现了基于图形界面的防火墙的远程管理技术。结果表明,基于网桥的防火墙比传统网关型防火墙具有更好的灵活性和更高的安全性,能够实现数据包过滤与防止黑客入侵的功能,性价比高,方便网络管理员的使用。

In order to solve the problem of safety of LAN and the difficulty of configuring firewall of Linux, this paper, taking packet filter as an example, introduces the method of realizing net bridge firewall under the operating system of Linux and brings into existence the long distance management technology based on graphic interface through socket programming. The result shows that firewall based on net bridge is more flexible and safer than that of traditional gateway and it can realize the function of packet filter and prevent Hacker and at the same time it is more convenient for the controllers to use.