Linux中Netfilter网络安全框架分析

The Analysis of Network Security Framework Netfilter in Linux

文章在Linux相关源码的基础上对Linux内核防火墙框架Netfilter进行了研究,分析和讨论了Linux操作系统的网络安全框架Netfilter的原理和实现,并给出了在内核中和用户空间进行扩展的方法。在研究防火墙的原理、实现上具有重要的借鉴意义。

This Paper studies the Netfilter/Iptables in Linux2.4 kernal firewalls structure based on the Linux source code, The principle and system framework of netfilter in linux were introduced.It also shows the way of extension in the kernel and user space.Analysis of netfilter will help to understand the principle and implement of firewall.