Linux防火墙中的包过滤技术

Technique of PACKET TILTE in the Linux firewall

防火墙作为电子商务安全系统的"盾",必须深入研究方能保证系统的安全。因此针对电子商务安全的需要,研究类UNIX系统———Linux防火墙中的包过滤技术是极具价值的。文章首先概述了Linux2.2防火墙的功能分类,然后针对其中的包过滤技术,结合源代码给出了详尽的分析,最后介绍了最新的Linux2.4中的防火墙实现。通过对包过滤技术的分析研究,逐步掌握了linux防火墙的关键技术,为进一步了解“盾”打下了扎实的理论基础。

In order to certify the security of a system, firewall should be studied thoroughly for it is the “shield” in EC security system. Therefore it is of great value to research PACKET FILTE technique in homo - linux firewall, pointing to the security of EC. The paper summarizes the function groups of firewall Linux 2.2 first, then analyses the PACKET FILTE technique circumstantially, combining with source code. At the end of this paper, the realization of firewall in newest Linux 2.4 is introduced. Thus we can have a grasp of the key technique in linux firewall step by step and get a good theoretical basis for the understanding of this “shield”.